Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: 88MuU3rsK2lw3BsWubzU3L4+pJODS9mRFBbUWIYJaPw=
Subject key identifier: D5:63:BF:65:89:18:47:AE:E7:07:A4:C2:C6:FF:FB:27:9F:F7:BA:3D
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 01A121656118109EDE612A222BAAE167FD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 1A92
Signing time: Fri 09 Oct 2026 16:00:54 +0000
Manifest this update: Fri 09 Oct 2026 16:00:54 +0000
Manifest next update: Sat 10 Oct 2026 16:00:54 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: kahLccazrlsow5P0bxJ4SE4fU8shKJBRj+9GiGiyuNU=)
2: sz56j9LVi6BvJ23bxmQK9h0mrwg.asa (hash: L3jU/73+xzk1SL2NMp3V4ynSAIXNNRQbicPSs6+Khfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:65:61:18:10:9e:de:61:2a:22:2b:aa:e1:67:fd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Oct 9 16:00:54 2026 GMT
Not After : Oct 10 16:00:54 2026 GMT
Subject: CN=d563bf65891847aee707a4c2c6fffb279ff7ba3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:64:9f:60:6c:be:61:be:6b:9e:a2:27:09:
ea:c2:1e:fa:0f:99:ac:ed:5e:cd:8d:07:46:aa:88:
97:60:59:24:f7:e8:8d:ac:3c:5a:68:94:c0:35:7e:
87:b6:f1:b4:a7:61:89:b1:3f:5a:26:dd:da:a3:de:
52:aa:f3:34:7b:da:a5:1a:4b:06:31:fd:dc:39:86:
dd:56:14:8a:10:fc:74:95:ad:e9:fd:66:7f:70:a6:
7c:96:22:c9:5f:43:d0:97:3a:15:38:a8:44:45:74:
64:70:93:85:0e:7e:64:f4:3e:72:75:11:98:a6:93:
88:76:e7:98:3d:c1:a7:7f:15:6a:13:bb:fa:79:b8:
61:28:ec:b9:60:4d:5f:bc:6b:c9:bc:a3:39:c5:aa:
b7:91:4c:a1:54:a0:f1:80:a6:2b:4b:bd:a1:05:d2:
30:b9:1a:fc:e8:80:bc:e8:56:c5:f4:68:22:20:18:
62:27:dd:13:3a:aa:d2:74:f9:2a:8b:89:66:3a:04:
98:63:d0:4c:89:66:86:92:e9:49:5b:5b:3d:9d:c1:
a1:77:2b:23:99:42:bd:64:54:2f:f3:62:c8:38:70:
7b:66:2d:ac:52:ef:b9:66:be:a0:03:68:23:0e:1f:
e0:68:91:59:3f:f4:26:44:00:b5:97:86:e1:05:e2:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:63:BF:65:89:18:47:AE:E7:07:A4:C2:C6:FF:FB:27:9F:F7:BA:3D
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:72:4a:a2:41:52:bf:f8:74:94:1d:d0:b1:75:39:85:29:8e:
69:49:e9:ce:1e:b0:a7:87:fd:a0:36:e8:6e:2c:d0:dd:56:18:
c3:78:7e:2e:8b:bf:34:25:60:40:66:1d:a2:07:bd:82:8b:8e:
35:b1:5c:48:37:70:69:25:62:01:1f:4f:18:bb:f2:7c:0b:90:
92:7f:17:e4:90:d5:44:e7:cb:f2:4c:be:1d:13:34:16:a2:9d:
82:3f:7b:12:80:59:35:54:da:f4:03:10:71:1b:d6:54:74:18:
f7:75:15:7c:d0:e9:32:e3:2d:54:e9:ed:92:39:ad:5d:b0:a6:
74:34:18:e3:99:86:30:d7:5e:5e:3e:1e:ad:7f:7a:59:d6:ac:
be:9c:f7:45:99:9d:da:30:51:2f:da:bc:c1:6e:64:9f:e0:58:
23:16:d8:04:05:a2:5b:e9:a5:50:5e:58:5f:9a:9b:ff:9d:3e:
50:83:e7:e9:2e:4e:9f:a1:31:f2:b0:05:cc:9c:89:e4:94:8c:
b8:79:82:a3:93:e0:a2:6f:ad:47:93:32:99:3b:57:4f:50:94:
12:0f:35:63:8e:ec:e3:28:bf:fc:32:77:c4:8a:7e:7d:be:b8:
e4:71:26:c6:82:0c:00:9c:3c:4f:10:2e:fb:73:37:41:71:00:
26:f3:d0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 23:16:16 2026 by rpki-client