Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: 1jOZ4lJsTNyd7egXVilC6FGEpe1GQlqt0SVjlcWWCCg=
Subject key identifier: 1B:F9:88:E0:D3:5E:1B:BD:F7:18:E5:08:53:67:EC:20:5B:39:87:67
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 01A11ABE03164D7EA27158331E4B9BE0F6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 1A96
Signing time: Thu 08 Oct 2026 09:00:22 +0000
Manifest this update: Thu 08 Oct 2026 09:00:22 +0000
Manifest next update: Fri 09 Oct 2026 09:00:22 +0000
Files and hashes: 1: E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa (hash: iGIvi874jRBhxZZbEUcwG0C99qEqnZSND8WgM3AT+F4=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: 3q7Niv+w4AtgXHZRi6NI5TIwXW/Fu6ZcNRcnWz5Bk0A=)
3: yUKdjmZYtQWjFFXFgM-27cUdhs0.roa (hash: ob1AlTKcmBmfwJd93MbWCK4KiRPHg8c27xb+FIsvFL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:be:03:16:4d:7e:a2:71:58:33:1e:4b:9b:e0:f6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Oct 8 09:00:22 2026 GMT
Not After : Oct 9 09:00:22 2026 GMT
Subject: CN=1bf988e0d35e1bbdf718e5085367ec205b398767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fe:da:ab:16:f7:7f:09:c9:b2:a7:46:b1:5d:
50:ad:80:7c:7f:d6:7e:7d:87:5b:c1:b3:85:bc:9a:
83:67:89:2a:67:50:2e:cb:b1:ad:65:e0:15:b0:73:
8c:1f:74:34:c8:d6:2a:ad:41:a1:71:73:96:4c:8c:
c8:11:b5:80:6b:27:79:10:d9:92:f2:70:88:e1:8b:
eb:99:64:bf:a1:11:88:9e:a0:41:05:70:80:2e:6b:
82:68:c0:56:73:c9:3e:57:f7:ef:7d:02:c5:ae:79:
cd:cd:61:d0:b9:7e:02:ce:5a:14:4d:28:2c:16:f1:
91:12:00:3b:81:c6:4d:53:71:93:93:ff:39:34:91:
e8:95:a9:07:ee:0f:a0:5a:d9:31:11:b9:d4:b6:02:
9c:97:94:4f:88:1a:3a:41:c1:94:c1:f6:af:77:a4:
6d:c3:30:af:f9:aa:ef:31:b2:e6:fd:69:d7:3b:7d:
13:21:b6:95:4a:de:3f:53:31:02:12:2c:91:56:e4:
07:6c:94:95:fc:d4:e0:13:31:ff:96:68:7a:42:03:
b2:2c:b4:ed:64:9f:af:15:0c:aa:5e:83:e7:aa:80:
11:23:5d:f0:e8:5c:da:af:98:74:88:d4:2d:10:9d:
7d:11:54:16:55:74:f0:7e:98:90:b0:26:94:6b:b6:
b5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F9:88:E0:D3:5E:1B:BD:F7:18:E5:08:53:67:EC:20:5B:39:87:67
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:30:24:33:03:4c:bc:09:5c:fa:9e:98:7c:b1:d2:28:60:4e:
86:af:78:cb:66:31:24:2c:01:0b:18:a8:bb:75:9d:d7:9f:5d:
7e:8d:1c:49:bd:c6:b7:5c:c9:e1:18:25:d6:70:d3:94:d5:4c:
95:6f:06:92:a9:37:16:0d:0b:5f:f4:8d:f1:d3:ab:5e:e2:63:
51:ba:2b:bd:8c:d8:3b:d8:c6:58:9e:bf:86:55:7b:22:9f:e8:
3a:76:6a:ab:dd:0b:28:7d:77:6c:56:57:56:3d:be:7d:f2:81:
d9:81:d4:5b:48:7b:94:b5:e5:87:aa:7f:0e:bd:a0:a3:0b:de:
ff:0f:3a:94:fe:a7:71:e0:0a:c2:7a:53:ae:27:cf:d2:ca:ce:
e0:1c:81:7b:2b:e7:1a:85:95:06:2c:f3:93:f9:a4:87:7f:dc:
b0:1f:ff:57:13:76:19:a1:e7:a8:fd:1c:e2:57:9f:68:0a:74:
d1:28:c4:41:c6:54:f0:9a:90:6e:d6:62:85:fb:35:63:a3:95:
2e:d2:2f:91:68:91:8e:74:13:22:7d:a2:d0:99:b6:93:3c:ef:
72:ef:77:e9:ab:d5:31:e9:b4:2a:9d:03:54:5f:69:b1:34:22:
9a:58:58:ef:d5:fc:ff:4d:1c:18:10:da:68:f4:65:41:60:3d:
8a:8b:15:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:26:27 2026 by rpki-client