Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
File: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft (raw, json)
Hash identifier: YFbaGcMR6CC/o/23oaFrQYM5/nPuCMYyCLiQe4qDk98=
Subject key identifier: 56:92:0C:93:60:A9:EB:FD:CC:BC:C3:B2:A8:F9:74:1E:7F:CA:E3:F0
Authority key identifier: E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
Certificate issuer: /CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Certificate serial: 01A17D734EBDF7C5B807151258201E3ED20E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
Manifest number: 026A
Signing time: Tue 27 Oct 2026 13:01:10 +0000
Manifest this update: Tue 27 Oct 2026 13:01:10 +0000
Manifest next update: Wed 28 Oct 2026 13:01:10 +0000
Files and hashes: 1: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl (hash: 3VzG71G0GclY8CIW1s6PvmYKahzx9UkMXcvbr53+kYA=)
2: Zc-3buCmpkxcSPLtDxmT9skS6LY.roa (hash: zC97RSvuPPJ+rDjI+CneKiQgS8s6aa4yZHNe6jWz970=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:73:4e:bd:f7:c5:b8:07:15:12:58:20:1e:3e:d2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Validity
Not Before: Oct 27 13:01:10 2026 GMT
Not After : Oct 28 13:01:10 2026 GMT
Subject: CN=56920c9360a9ebfdccbcc3b2a8f9741e7fcae3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:2a:3a:1c:29:fa:bf:89:df:4d:0a:a4:a3:
89:b2:04:f5:7c:3a:8a:24:e3:28:ca:f6:e5:a5:73:
95:f4:a7:a7:a5:1d:51:01:a6:1d:65:47:5f:d5:18:
69:2f:8d:e8:c6:2a:1d:03:53:75:de:de:43:05:df:
96:3a:3d:58:84:ce:3c:f8:8a:02:6b:c4:13:f6:74:
0a:9b:b3:88:9b:14:60:08:64:f8:b1:51:51:ad:5e:
7e:4c:25:7c:1a:d3:89:ff:bb:44:c0:f0:93:ec:fd:
13:f8:31:27:be:4a:bd:a1:9e:61:1a:8d:19:7c:fb:
37:32:e2:3f:ba:3d:a1:bc:0d:43:82:9d:cc:bf:c8:
87:01:38:e2:49:9e:03:e8:ff:dd:d4:b7:b6:87:ce:
95:7e:ca:f7:42:2f:f4:41:5d:c1:08:92:3b:d1:38:
83:46:59:c5:b8:5e:3a:96:54:c2:47:6a:21:c9:f0:
f4:3a:4a:ef:78:5b:c2:b9:be:31:b0:e1:29:89:27:
0a:56:14:48:4e:d3:f9:27:d6:f1:5c:9f:73:8d:91:
99:ae:12:c5:e2:bf:ed:b4:bb:d8:e1:ce:19:cf:f0:
7b:8c:fe:fb:61:cd:95:c0:5d:d5:a0:b2:7f:e3:ba:
43:ff:6b:2c:77:6a:54:94:2c:f0:de:36:ad:4d:17:
8d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:0C:93:60:A9:EB:FD:CC:BC:C3:B2:A8:F9:74:1E:7F:CA:E3:F0
X509v3 Authority Key Identifier:
keyid:E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:15:08:ae:8b:98:73:a5:b5:94:12:e7:59:f1:f1:12:c2:59:
27:fe:c0:8a:4b:25:c0:83:c8:99:c3:03:47:32:90:2b:fd:76:
f6:59:4f:57:5d:a4:9e:86:4a:4d:a3:4e:60:77:c7:51:8b:51:
8c:9c:19:0d:84:8f:10:1a:a2:e0:13:d8:6e:7a:07:48:64:61:
fb:43:52:b4:40:6a:36:c1:22:29:02:22:f3:2f:04:6a:d9:ca:
91:1f:08:8f:b1:01:93:af:97:12:17:9a:06:ef:18:f7:fd:0f:
65:21:6b:86:7e:2e:f2:d7:ef:0b:73:6b:13:81:df:5a:1f:08:
d1:53:af:ac:f1:08:95:55:09:28:43:12:d5:9b:8b:e6:ee:fb:
6d:7c:55:9f:fc:22:3e:f7:e4:9c:c8:23:38:b1:5f:33:82:eb:
98:f8:d8:b5:4f:df:86:ee:20:24:48:85:7e:3a:38:f3:b1:9a:
1d:05:35:19:dc:c7:43:49:31:4a:ca:65:b7:60:6a:44:3d:e7:
d8:cb:ec:f2:2c:2e:6b:87:d4:12:37:80:af:4e:49:b1:4c:21:
b6:c3:90:1a:fc:c8:cc:b7:ee:4e:e0:22:df:f6:9c:1f:09:f2:
e9:c7:f4:67:14:86:6a:76:05:10:90:7b:d3:f4:b2:55:30:d6:
b9:73:1b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:41:01 2026 by rpki-client