Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json)
Hash identifier: Zj9/4LSnFRvR05OGn/5sIjgP6yNZN/V3PzdVyZUWv0o=
Subject key identifier: EA:7F:83:F4:0B:34:02:C4:5F:E0:14:56:67:C4:22:86:43:49:7C:68
Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f
Certificate serial: 01A15288C8B8D77C6D0DC2F899266BFA8F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
Manifest number: 06A0
Signing time: Mon 19 Oct 2026 05:00:58 +0000
Manifest this update: Mon 19 Oct 2026 05:00:58 +0000
Manifest next update: Tue 20 Oct 2026 05:00:58 +0000
Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: dw/r0nZDH1hZ5Wi0uevBY7dBDIBZRd88uzv45ymefq4=)
2: 8J8jqfIBZIcDi5qcEjDOA-SS3uk.roa (hash: P2MosB3uZAItjOGMQglzm3PWOTUEZCA6IE9hN8uIIUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:88:c8:b8:d7:7c:6d:0d:c2:f8:99:26:6b:fa:8f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f
Validity
Not Before: Oct 19 05:00:58 2026 GMT
Not After : Oct 20 05:00:58 2026 GMT
Subject: CN=ea7f83f40b3402c45fe0145667c4228643497c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:86:51:12:cd:cb:36:58:d1:36:45:05:79:c9:
e0:9d:6c:c7:4f:6b:8f:5f:1f:ce:e0:75:47:71:6b:
a6:a2:10:59:c0:fa:e3:84:01:ce:39:41:5d:4a:3b:
93:58:8c:31:2c:d8:97:21:6b:5c:ae:81:0f:6a:0e:
d8:3a:2d:60:60:a1:c6:38:4c:e3:d1:60:e7:20:2d:
04:bb:91:b9:c5:94:79:d5:e3:bc:89:8a:90:47:20:
a7:d3:dd:80:2d:b3:7e:de:af:c8:a2:be:3e:c0:f0:
63:4b:9f:ed:a8:20:dd:ca:ff:40:17:0b:c6:56:13:
e6:e7:74:92:2a:bd:a8:d1:b7:65:46:9f:ab:1a:eb:
15:eb:12:9d:b0:6d:e7:0b:ce:19:6b:0d:7f:e1:6e:
b5:e1:5e:c0:f9:4d:63:41:74:74:88:7c:0f:b4:62:
99:fb:92:87:a6:81:39:0f:79:9b:9c:41:4e:23:c6:
4d:38:ef:3a:43:1d:25:d9:5a:2f:50:d8:d5:3e:1c:
09:bf:50:db:c3:8a:2b:00:ec:76:34:58:f6:a0:eb:
da:aa:30:9d:fa:db:6c:69:42:cf:c5:71:73:ef:2c:
46:7a:b9:6d:42:bd:e8:8e:c0:ae:e7:9c:21:50:b8:
70:5e:db:70:fe:52:b6:e7:2c:74:93:47:8e:93:cc:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7F:83:F4:0B:34:02:C4:5F:E0:14:56:67:C4:22:86:43:49:7C:68
X509v3 Authority Key Identifier:
keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f8:e0:73:af:92:f4:69:77:e3:82:bf:a2:f9:b5:b7:30:db:
1b:77:82:45:32:98:38:9e:38:0a:9f:78:85:19:16:40:91:ba:
82:ab:7b:23:e1:48:3e:34:3d:8c:9a:35:ca:6e:7a:36:33:92:
f5:b8:d3:d3:6e:23:ce:3d:95:44:1b:96:bf:c1:5e:8e:c5:23:
f4:6f:39:6b:56:e8:08:4b:72:7c:cb:fe:90:cd:56:47:39:dd:
1a:e8:4d:62:a1:b0:6b:d1:99:da:5d:f3:84:8f:7c:6b:9e:7b:
ef:5e:0e:ed:d5:4b:f4:ac:55:a8:5a:52:0f:37:77:63:eb:19:
03:57:ae:51:a6:0f:f0:07:75:4a:42:0d:f1:4d:05:d3:e0:5c:
02:7c:e2:b6:50:12:53:70:49:4f:a0:cd:af:10:7a:30:a5:8d:
e8:a4:d0:b6:d7:da:a4:08:86:3e:77:b8:f2:16:22:d5:ee:84:
91:8a:6d:59:f7:00:ac:59:d1:41:66:f4:1e:19:23:f7:51:ae:
51:cd:c9:26:38:56:ff:53:98:32:88:4f:90:a5:fe:18:ff:02:
4e:4c:f8:e6:d5:99:cf:06:de:7f:55:81:44:23:a7:d1:76:f2:
f8:8d:c2:3d:64:56:13:31:17:bc:39:12:d7:4b:84:56:57:e9:
6e:0e:fd:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:53:56 2026 by rpki-client