Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: UDxK7J/A2/RmSoHzpgzKHz6Tru6Xm23CGgCtSwg8BVo=
Subject key identifier: E2:94:61:01:9C:EF:C3:8B:40:F5:CD:7D:9E:18:78:F9:39:72:9F:E5
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 01A17BF31CFEAA0048BD3E1163F55E73B664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 1817
Signing time: Tue 27 Oct 2026 06:01:32 +0000
Manifest this update: Tue 27 Oct 2026 06:01:32 +0000
Manifest next update: Wed 28 Oct 2026 06:01:32 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: e6BZX4fTgwAqVHPBR9/drdPPS/i/5aaTcnAm64yYrOo=)
2: ZFPsdpNLJ5l0WxKp0MW2ehft5Vc.roa (hash: 9gNaT5xTEshkzEjpFa3J0fv6CbE+hBJqY5VddI2BOX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f3:1c:fe:aa:00:48:bd:3e:11:63:f5:5e:73:b6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Oct 27 06:01:32 2026 GMT
Not After : Oct 28 06:01:32 2026 GMT
Subject: CN=e29461019cefc38b40f5cd7d9e1878f939729fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:55:50:fe:17:23:8a:f2:70:43:71:37:d9:33:
34:52:77:00:27:eb:40:80:e6:c1:f4:d7:7c:2f:97:
64:74:e0:f6:bc:8f:1a:13:c1:4e:0f:d6:77:3a:ff:
b3:ca:65:27:08:fb:b4:54:2a:d5:8c:08:fb:67:d1:
05:9e:2d:a0:90:f9:88:87:8b:2d:75:1e:4a:00:8c:
ff:80:4e:97:cf:ca:cf:f5:9f:68:99:b6:46:ed:00:
6b:29:62:76:fd:49:80:d0:a7:09:a3:1b:b1:53:36:
27:a1:e1:57:d4:56:c6:16:85:6a:25:7c:ca:b6:3d:
12:48:19:4e:2e:4e:cf:7a:a8:ec:dc:b2:7e:8e:c2:
ae:16:74:7b:a7:6d:7e:58:28:70:47:20:e3:54:4a:
3e:3f:67:a6:7b:a8:0a:c2:e3:b8:ad:3e:d6:bd:9e:
84:0a:44:2d:a6:38:65:32:fa:f7:f9:dc:c5:1a:60:
a8:9c:41:1f:22:e3:26:15:69:cf:93:b3:62:6a:58:
8b:37:f5:f9:d3:b7:04:83:48:90:2b:dc:cf:ad:be:
41:68:dd:6a:1a:e5:3d:26:b1:51:62:ec:d6:48:87:
97:36:53:8b:72:0a:7d:b1:2c:17:c8:ba:f3:8f:eb:
38:d5:72:3d:c4:dc:fa:35:e0:ed:82:c4:ab:04:b3:
0c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:94:61:01:9C:EF:C3:8B:40:F5:CD:7D:9E:18:78:F9:39:72:9F:E5
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5b:e8:e6:1b:eb:3c:32:c1:0a:0b:01:76:60:2e:e8:5d:97:
de:34:04:84:2e:dc:8f:5d:52:d7:41:29:09:a5:4f:9b:e7:62:
f4:b5:1e:7d:93:66:99:95:42:2e:66:7f:d6:01:a5:0d:6f:7d:
e0:6c:ca:a1:7a:54:ab:d0:d5:29:ff:13:e6:09:8c:3f:78:43:
fe:26:97:54:24:78:03:f7:e1:48:3b:0b:81:8a:5b:02:25:58:
a8:fd:f1:98:35:3b:32:da:9d:c7:d5:53:fc:96:fe:ab:0a:55:
05:3f:b8:15:1b:1d:1c:b9:7a:82:fb:41:ce:a7:50:10:ae:57:
85:50:8b:45:ec:ea:dc:4e:b5:61:a9:3e:38:57:09:dd:2c:de:
55:2a:1b:93:61:dd:56:87:ae:ed:31:c3:b4:4d:1a:f6:38:dd:
a8:ee:cf:48:9e:e7:d2:e6:44:2c:76:e5:d5:97:a5:e3:90:0a:
f2:97:af:7d:62:c0:29:f3:91:da:55:dd:46:eb:2d:ef:b3:7e:
22:42:c1:27:ae:31:65:e0:02:cd:b9:ec:cb:3a:78:0f:33:d6:
be:51:6a:5d:d6:13:ae:0a:57:e6:42:08:bc:b3:96:ee:57:52:
cf:be:d3:e6:3c:3e:cb:fe:8b:3c:16:9d:61:5b:54:71:52:58:
ed:5e:24:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:30:43 2026 by rpki-client