Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: dxTMVoXj/NkiHfM7cwx9pzMYPuNHycV3/PMcElyYaDo=
Subject key identifier: 28:52:1C:8E:BA:BF:30:EC:B2:1E:EB:A1:0C:CD:82:1A:9A:5E:51:33
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 01A1208A2D1F8AA5ACF0696494CCD6B105D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 1A98
Signing time: Fri 09 Oct 2026 12:01:28 +0000
Manifest this update: Fri 09 Oct 2026 12:01:28 +0000
Manifest next update: Sat 10 Oct 2026 12:01:28 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: lYpAaLfqfze4PcXQnian2rCQabikyiFXmAMp45l+mvI=)
2: aD4aJMmaQg_1w8VUSr55ba35-_4.roa (hash: 3Ez4Ad6m2JnI3XnTs61pJ+5b17Kb2kmyt6ZM1f7rwSI=)
3: g2k94sbrfkriJ_TYzjO-TqZlMBM.roa (hash: 1ZkSwSDFlimbj/n4XoixvGsfM3nfxp389BDAwVqw2BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 12:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:8a:2d:1f:8a:a5:ac:f0:69:64:94:cc:d6:b1:05:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Oct 9 12:01:28 2026 GMT
Not After : Oct 10 12:01:28 2026 GMT
Subject: CN=28521c8ebabf30ecb21eeba10ccd821a9a5e5133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1c:69:10:a7:39:b1:ce:25:c1:79:2b:a5:b5:
38:5f:f3:0b:3b:1e:41:48:4b:72:85:c4:a5:a3:b4:
79:aa:71:0f:a6:be:f4:9a:ac:94:86:28:5b:c1:22:
fe:e9:5b:01:0e:e8:37:10:10:c2:6f:49:20:07:61:
a7:22:c8:c6:a2:dd:91:6e:01:e1:c2:67:ff:4d:70:
62:56:68:7a:cf:38:72:ba:4a:4a:81:b6:d4:bf:1c:
1e:92:1b:4c:78:61:a9:fa:4b:6f:14:4e:91:65:29:
64:a0:99:24:78:0d:30:c7:fc:3c:6b:aa:3f:6c:35:
d2:3a:db:ad:f7:f9:21:54:1b:e7:1a:78:57:a8:9e:
aa:93:57:4d:02:48:22:2f:01:eb:de:ad:ed:c6:9b:
32:21:93:cb:df:16:d6:61:9a:4a:1d:96:e2:26:df:
b7:c7:d0:1f:42:71:05:ab:8d:a9:46:d8:96:c2:5d:
56:f4:36:ea:6b:cb:89:9d:d4:00:cb:9b:e8:fe:f1:
ba:2b:d0:30:ed:8b:7e:df:ef:2c:f3:0d:03:0b:1d:
c4:74:a9:61:e9:92:11:f3:2c:14:d5:5f:be:9f:18:
cd:0f:11:36:0c:54:70:ea:ed:6d:3e:79:91:03:c3:
0d:f7:f4:0a:79:63:04:78:d5:99:45:86:d1:29:2c:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:52:1C:8E:BA:BF:30:EC:B2:1E:EB:A1:0C:CD:82:1A:9A:5E:51:33
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:12:0b:e6:b8:f8:ce:e0:a2:d7:d2:f3:14:47:43:5f:8e:ef:
23:5d:d1:2f:ac:1f:e5:da:68:ba:b2:2d:e0:7b:f4:9e:e1:2e:
3b:1f:21:38:03:93:f1:b9:50:01:2d:3e:c2:6e:c1:17:90:71:
1a:69:3c:3f:8d:f1:c2:f3:38:62:31:c7:3a:5e:86:61:d8:8a:
97:70:ea:4c:c2:f8:23:7c:01:7c:3d:76:68:ae:00:23:19:0e:
88:b7:d7:af:1a:8b:42:5d:a3:ed:16:02:04:77:fd:80:a6:93:
69:f1:69:08:05:f0:7a:b6:b6:52:85:e2:86:89:aa:69:7b:1b:
70:be:7e:f2:66:ce:c3:3b:cd:26:5a:04:78:50:97:1b:cf:89:
53:d1:cd:f7:65:d4:60:0e:c9:99:a2:11:82:1a:94:0d:e0:a3:
63:1f:f9:65:2c:71:ff:2d:11:d8:b4:1f:d5:18:a8:49:75:cb:
cd:dc:a8:95:c7:6e:48:c7:9f:3b:e6:47:84:65:57:17:c7:5a:
4f:e3:60:e1:3b:ca:46:55:3b:f6:bf:60:c3:65:f5:ed:a2:f2:
7e:d5:5d:23:af:76:c3:ca:dc:04:d3:cd:e1:99:1d:88:78:a6:
47:b9:60:9f:a0:58:78:86:20:87:06:16:fe:8a:c2:c9:19:96:
71:dd:fd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:03:00 2026 by rpki-client