Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json)
Hash identifier: y/t2exxHHwWDa4oQRkvGNRERVzfqRGmzhJkWRO0cljk=
Subject key identifier: 8F:62:ED:B0:78:77:2C:43:82:38:06:EA:6E:75:74:1D:A8:4D:56:1A
Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
Certificate issuer: /CN=e31c010e95015c2123641d33120a7e9c9008002d
Certificate serial: 01A125797A66FC845DDF7E283A24F54D1E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
Manifest number: 03C3
Signing time: Sat 10 Oct 2026 11:01:20 +0000
Manifest this update: Sat 10 Oct 2026 11:01:20 +0000
Manifest next update: Sun 11 Oct 2026 11:01:20 +0000
Files and hashes: 1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: qsoHT+Ek2aEHShdzZhh7QN3zITvvrPM10yRG7PfC3jc=)
2: EVP8JZC4veSxdxX6T8tUKYQ-OAA.roa (hash: bYUAbwTN22M9GXhG7TnoyYrgAEb8pmrS9QwXIchXrAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:79:7a:66:fc:84:5d:df:7e:28:3a:24:f5:4d:1e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d
Validity
Not Before: Oct 10 11:01:20 2026 GMT
Not After : Oct 11 11:01:20 2026 GMT
Subject: CN=8f62edb078772c43823806ea6e75741da84d561a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:21:c7:c9:9d:b8:d5:da:01:36:df:e0:a7:29:
26:c7:81:00:45:91:38:3c:1f:18:d5:cc:bf:16:f2:
0b:a9:b7:95:fc:13:e5:af:d6:d6:7f:bf:90:9a:34:
49:20:75:fa:9e:32:a8:25:fe:13:4b:0c:66:8a:07:
89:56:64:a2:5f:89:0a:36:39:c8:13:89:48:70:b6:
6b:b4:fd:85:5d:0f:3e:5a:b6:56:ce:05:44:40:ab:
48:29:03:d8:ae:f6:d5:71:8f:30:8a:30:72:d2:fc:
7a:18:99:bd:15:71:7e:25:7e:c1:d2:3c:07:af:fe:
0b:b1:ae:48:71:3b:d8:88:a7:db:f0:c7:90:12:80:
7f:55:1b:a7:f0:7b:09:ee:1d:ea:fb:38:2f:00:ea:
7e:65:c8:04:62:eb:a7:7a:fb:e8:b6:89:cb:d9:5d:
5f:85:08:d8:f5:d0:d8:68:e9:3c:9c:8a:4d:8c:86:
b2:28:c2:86:36:7d:8b:2e:81:60:63:45:ff:c4:03:
14:02:77:cb:db:aa:b9:e7:8d:f0:1c:70:31:24:9c:
a3:12:54:c9:66:b8:9b:b9:aa:53:e3:48:04:bf:f6:
1d:ce:c1:e4:8e:f9:54:11:21:84:ee:11:73:b9:8d:
1c:72:de:05:a7:e5:70:a4:d4:79:86:5a:d8:40:44:
86:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:62:ED:B0:78:77:2C:43:82:38:06:EA:6E:75:74:1D:A8:4D:56:1A
X509v3 Authority Key Identifier:
keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2b:2f:be:15:60:8e:6a:98:7f:96:c3:6f:81:83:fa:82:fa:
1c:2f:6c:ab:9a:ac:72:3d:3b:32:88:3c:1a:4f:4e:fd:de:c1:
89:a9:f4:42:75:b2:44:0d:ef:4c:60:6b:b2:2e:d2:60:d9:73:
c8:d3:bb:d7:88:d9:07:71:17:b9:58:8e:e5:cc:8c:9e:5f:1b:
41:8b:2c:28:f9:f6:9b:b2:f3:72:7f:d2:49:7a:02:ec:64:97:
24:46:44:0b:f2:24:28:8e:ff:4b:37:26:86:e7:23:a0:8a:f0:
18:b9:2d:77:55:bf:41:a3:95:3a:6e:f8:31:44:0c:71:07:11:
24:ed:87:59:fc:7a:fb:e6:ec:c8:1e:a8:af:74:31:e8:8f:3b:
bf:7d:2f:e6:6e:eb:17:dc:b6:db:ef:95:c3:e9:94:75:91:bf:
f2:51:67:29:5e:3a:35:c7:68:c6:03:89:b4:cd:b1:bb:18:f2:
2a:de:6d:c6:3f:cd:f4:bb:db:5b:01:86:e2:08:f7:04:af:38:
6c:64:65:9b:72:c7:82:75:52:74:58:28:38:e8:b3:1c:16:10:
fe:bf:57:30:48:18:4f:10:fc:8a:97:b5:af:3e:b7:0a:f9:df:
2c:51:c0:8f:99:9a:2d:1b:58:57:4f:56:12:08:1c:38:90:b5:
98:31:b1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:07:12 2026 by rpki-client