Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
File: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft (raw, json)
Hash identifier: aaibkLr+3Qs25s2qe9CbBT/13hwO9qA4UKBA8wSG3TM=
Subject key identifier: 76:11:CF:C1:87:E9:22:57:EC:E9:65:36:0C:EC:A8:02:38:CB:F4:0F
Authority key identifier: E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
Certificate issuer: /CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Certificate serial: 01A08A5561385F5963D024681CEB97627438
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
Manifest number: 01EC
Signing time: Thu 10 Sep 2026 08:00:46 +0000
Manifest this update: Thu 10 Sep 2026 08:00:46 +0000
Manifest next update: Fri 11 Sep 2026 08:00:46 +0000
Files and hashes: 1: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl (hash: Zp0FjQ8kqFpkttU9p1DLNP1BPyLTPGAcWrBLPCuJ5ik=)
2: x9acHITrBbqOx2e9ypYS952QsxQ.roa (hash: b6zhtsIkjF/mT1JMxCSolgKQVZ0ngXMbV1MvghbUubE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:61:38:5f:59:63:d0:24:68:1c:eb:97:62:74:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Validity
Not Before: Sep 10 08:00:46 2026 GMT
Not After : Sep 11 08:00:46 2026 GMT
Subject: CN=7611cfc187e92257ece965360ceca80238cbf40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:47:bd:9b:70:94:7d:12:b6:6b:6d:80:0e:15:
72:88:58:d9:b2:b6:f1:c5:57:79:71:5e:93:49:b3:
1c:74:ca:d7:30:48:b3:ee:17:6d:e5:af:a8:16:17:
7a:51:3b:9d:4f:91:3e:63:c2:45:81:3f:ee:ac:bb:
ef:fe:da:3c:cf:e4:a0:9a:4d:7c:02:d1:e5:e2:14:
76:31:db:af:4d:76:1b:62:48:58:2b:c7:88:1f:fd:
15:0b:e4:13:4d:50:ef:c0:8e:13:3b:e8:46:a0:1f:
60:5c:47:61:6e:f3:dc:f2:33:e4:d3:8a:86:fa:45:
34:9e:85:60:10:95:e0:08:ce:ff:a2:1e:ad:53:91:
62:c6:11:05:43:fe:0c:71:a9:e3:26:37:40:fc:f6:
0d:69:73:17:a9:8d:4d:57:9d:d2:d4:7a:68:63:6a:
6f:96:00:9d:06:f8:d4:31:0a:6f:89:9d:fe:42:0f:
fe:f8:49:a0:dc:dc:83:5d:b0:eb:31:20:84:98:b2:
af:79:2d:1f:02:6f:ed:12:8f:62:94:61:ac:22:65:
6f:94:b7:9d:48:97:72:1e:79:45:c8:a1:52:a1:91:
d7:00:09:1f:1a:3c:96:8a:30:c1:21:ce:38:27:71:
71:1e:19:32:02:c9:43:2c:7d:af:a3:b7:83:2c:96:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:11:CF:C1:87:E9:22:57:EC:E9:65:36:0C:EC:A8:02:38:CB:F4:0F
X509v3 Authority Key Identifier:
keyid:E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b2:91:50:cc:57:14:bb:10:c5:db:ae:10:56:21:cc:56:1f:
e7:9d:12:33:ce:ed:16:7e:32:3e:d0:cf:a3:86:b8:c1:b9:d0:
7b:60:8b:e4:af:3b:15:47:75:d1:7a:8e:d6:09:a1:5f:52:80:
09:be:b1:ae:7f:01:70:0f:49:40:ee:66:59:67:79:dc:17:a4:
eb:13:d7:03:a8:24:f1:7e:f5:6a:fe:f4:01:c0:e7:ac:24:7d:
16:73:c9:e8:4e:cf:09:10:ef:54:4c:f0:26:e0:0e:0c:14:82:
d5:2b:b5:fe:13:82:b5:7a:3b:3f:3f:33:1d:a9:47:10:b4:5b:
a4:99:99:0c:c6:00:f7:f2:aa:5f:af:d7:e6:ef:27:17:10:f1:
b2:ca:79:b0:d5:44:d2:b8:4b:85:84:c9:ac:b8:61:df:cf:00:
eb:e5:9c:38:de:6e:71:ae:8a:4b:16:2b:46:a0:64:86:62:e9:
bb:fa:ad:4a:24:20:75:64:8d:23:43:83:6d:f7:00:c1:6b:50:
71:eb:42:c3:9e:48:d4:22:e7:a3:19:85:e4:5b:2c:fc:27:03:
53:cc:7f:94:07:04:17:8b:26:46:f1:73:7a:09:62:fd:0b:e9:
2f:81:4f:c3:80:53:54:f1:46:74:1b:42:74:1e:7b:e7:51:cf:
d9:c0:ca:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:50:38 2026 by rpki-client