Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.mft
File: _c4S2VwEZFSQOnsqViidt5FjWm0.mft (raw, json)
Hash identifier: u7ugzHzQX2JA6G/Mc+q5MY1L9Hw4UrjFoSve+8qlJYs=
Subject key identifier: 8A:EB:34:F3:05:72:34:4B:03:D0:BE:F6:42:AB:2D:16:A7:78:11:0F
Authority key identifier: FD:CE:12:D9:5C:04:64:54:90:3A:7B:2A:56:28:9D:B7:91:63:5A:6D
Certificate issuer: /CN=fdce12d95c046454903a7b2a56289db791635a6d
Certificate serial: 01A12EB34E0205504909DBE93ACBA85CF5EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_c4S2VwEZFSQOnsqViidt5FjWm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.mft
Manifest number: 68
Signing time: Mon 12 Oct 2026 06:01:04 +0000
Manifest this update: Mon 12 Oct 2026 06:01:04 +0000
Manifest next update: Tue 13 Oct 2026 06:01:04 +0000
Files and hashes: 1: _c4S2VwEZFSQOnsqViidt5FjWm0.crl (hash: Fj/lQjbCcl6KOc7rB2rgkUZs7mqTVF33JMQNHywBrPE=)
2: odwPZDNuXyDgnLpxFjQripVtxTU.asa (hash: igJaENyyF56dOLL+KkaJi4krAn2njacTd33CsRM20MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_c4S2VwEZFSQOnsqViidt5FjWm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 06:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:b3:4e:02:05:50:49:09:db:e9:3a:cb:a8:5c:f5:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdce12d95c046454903a7b2a56289db791635a6d
Validity
Not Before: Oct 12 06:01:04 2026 GMT
Not After : Oct 13 06:01:04 2026 GMT
Subject: CN=8aeb34f30572344b03d0bef642ab2d16a778110f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:4c:00:f3:56:3e:a4:df:d9:9a:52:ff:a8:
ed:db:f2:bf:36:c8:61:a0:59:34:c7:7e:60:e2:67:
49:27:ae:0e:e5:7c:87:0b:4c:99:80:0b:43:2b:bb:
f8:d2:f3:27:4a:be:72:0c:34:65:43:d3:f1:dc:dd:
39:01:c2:84:fc:53:20:89:08:db:9f:6f:f8:65:25:
48:b0:1b:39:17:4a:e7:84:c0:55:4d:87:18:2b:72:
82:bd:11:87:f8:4d:fe:02:83:53:97:36:66:2f:19:
db:c0:c4:ad:b0:a5:15:be:7c:cd:58:4c:ab:42:e0:
87:e0:86:de:a8:74:19:90:75:57:c9:36:84:1e:e8:
a5:94:06:45:35:c4:ad:e1:b9:7b:ae:59:68:20:0c:
78:27:e1:c1:76:5a:6a:cf:04:73:f3:d6:e4:bb:59:
c5:fb:8f:bb:fd:64:58:bf:e1:ff:c6:8f:4b:7b:24:
23:28:e2:5f:9d:59:02:11:38:2e:c1:f6:4f:4a:fa:
fe:9f:2b:ce:dd:cb:e4:1a:f0:6d:5e:e6:f9:a6:73:
f7:6c:b9:14:c3:b2:c1:a6:65:ff:6a:4a:85:de:8c:
62:57:ea:fc:d3:8d:af:a8:d6:2f:28:2d:96:2e:7c:
ba:ec:37:39:0c:73:66:aa:73:b2:99:c0:b5:41:2e:
ec:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EB:34:F3:05:72:34:4B:03:D0:BE:F6:42:AB:2D:16:A7:78:11:0F
X509v3 Authority Key Identifier:
keyid:FD:CE:12:D9:5C:04:64:54:90:3A:7B:2A:56:28:9D:B7:91:63:5A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_c4S2VwEZFSQOnsqViidt5FjWm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/51d177-32c7-494b-a470-1b189a50658e/1/_c4S2VwEZFSQOnsqViidt5FjWm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:96:e5:d4:47:5c:44:3c:ad:10:a3:b0:7b:5f:ac:e7:76:bf:
b7:30:81:a7:01:5a:99:c1:f4:07:03:cf:9f:c9:47:6f:41:cd:
a6:61:aa:a4:d3:29:3e:73:23:eb:78:de:93:45:ec:4b:1b:48:
19:a6:65:28:05:a7:29:17:68:d4:c2:44:82:59:6b:be:45:59:
f8:71:9a:e0:a6:db:48:58:15:48:ae:52:2e:e5:2c:87:53:34:
fa:2d:79:51:8b:dd:5d:b2:ab:41:34:74:f5:b6:8b:55:0a:5f:
3b:e9:54:31:72:8a:d7:8c:d4:cb:41:e4:d6:7a:3e:40:a0:81:
5e:d7:8c:56:45:97:b3:3d:3e:ff:a3:6a:83:40:16:94:ab:a2:
df:fa:06:62:69:97:e1:c9:3f:f0:50:7d:a5:38:b0:e3:e8:82:
39:6d:80:b9:c0:d4:6e:6c:ea:a2:57:e6:39:3c:f7:cc:36:f9:
62:d5:51:49:e3:92:47:54:05:dc:b6:9b:89:15:25:a1:ee:0f:
77:77:4c:90:58:35:15:5d:ff:4d:6a:e5:28:06:f5:d7:fd:c2:
05:94:a7:f8:3a:fa:eb:b1:c1:05:32:39:c1:12:1c:b8:f7:0f:
ad:4c:a4:1b:00:b3:72:e0:db:d4:a5:be:83:a6:d4:ad:b8:a0:
7d:4f:fe:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:31:01 2026 by rpki-client