Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: KyCQ0NaH7GoyY0jB/zRTUJfnDz3iiFXv3m6/bURk21E=
Subject key identifier: 09:FC:BF:07:3F:46:CF:34:76:6D:B2:35:52:55:EF:90:32:A6:F2:B3
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 01A13D12F21FE6EA059D597F2D22F442D6FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 15A3
Signing time: Thu 15 Oct 2026 01:00:14 +0000
Manifest this update: Thu 15 Oct 2026 01:00:14 +0000
Manifest next update: Fri 16 Oct 2026 01:00:14 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: 9unxku5wZjsgbh+AAPF+FOt0+6+u4yDLQYdgmFLVJeQ=)
2: 5BcZMkFK4H4HzeU32Pg9Et5_SQ8.roa (hash: yDr7OimE93R5A5WQDfIWvLQYnSnCYBj7r4S1yWKb1hg=)
3: l-2H50X-00hqRbXcinxXRtfOf8E.roa (hash: He9ZZQ/4dfXZbCStMS8Lcu6gvV1X94SjwWPCQNPvzbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:12:f2:1f:e6:ea:05:9d:59:7f:2d:22:f4:42:d6:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Oct 15 01:00:14 2026 GMT
Not After : Oct 16 01:00:14 2026 GMT
Subject: CN=09fcbf073f46cf34766db2355255ef9032a6f2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:54:24:3b:2a:08:59:3a:e8:35:a6:67:db:b7:
d4:f8:78:89:15:44:ce:61:af:f7:67:e8:84:e9:48:
66:d6:a7:72:5e:82:55:06:bf:d5:65:64:5f:2c:fe:
71:7c:6f:39:09:91:ca:55:f9:bf:8f:97:0e:a9:05:
03:88:6b:5b:f8:c6:ed:76:b8:96:b0:eb:05:a9:1e:
5f:23:32:63:b6:c5:ab:17:0d:5a:fb:11:6e:f7:91:
a0:ab:6f:b0:fd:d3:7a:59:66:7c:30:da:01:9f:e1:
0b:98:7f:29:45:c3:d0:ac:37:34:ec:57:48:81:3e:
b2:f9:88:e8:55:4e:1b:8b:5b:19:b1:23:4f:3b:c9:
0c:ca:e8:96:6d:24:3f:75:16:18:16:57:fd:1d:27:
b0:b0:50:69:6f:02:f9:63:af:59:1e:99:7e:5d:bc:
9b:47:32:c6:97:b6:17:28:86:c3:c4:18:5c:3f:06:
bd:ae:d1:e2:a2:8a:2d:fe:c0:d3:66:ee:34:70:e0:
6e:7f:dc:fe:0b:14:b0:b7:2e:2e:88:fa:92:af:a4:
9d:17:00:c0:26:10:ff:85:8f:de:d0:f7:46:2c:fe:
b6:15:1f:ac:1d:00:e2:10:ed:e0:57:a2:22:7a:ce:
b0:73:0d:53:44:2b:1b:b7:70:fb:5c:e8:d3:7e:ee:
d6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FC:BF:07:3F:46:CF:34:76:6D:B2:35:52:55:EF:90:32:A6:F2:B3
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:75:47:96:e1:b0:ff:6b:52:58:b7:9a:1a:ac:53:3e:6b:e8:
d5:96:a3:10:3e:bb:18:f0:7b:55:ba:13:67:9e:b9:95:87:9c:
c6:c2:31:b7:15:af:f0:49:86:ae:1d:9d:1b:19:49:0f:63:d8:
24:a6:82:9c:50:e7:dd:11:9a:1c:00:39:d5:d3:0c:ae:57:6e:
ef:39:88:58:92:cf:2c:d0:d0:ac:c6:13:ab:2e:b5:ec:c0:03:
ee:79:bf:e9:ce:6c:e7:12:03:a2:8a:5f:2c:9e:6a:2f:0b:97:
b2:8d:cd:20:9c:75:3e:28:bf:60:35:16:d9:1d:ab:82:ab:b4:
7c:0a:06:f1:53:c3:c5:c5:ad:a2:44:e3:08:4f:68:e7:83:a5:
05:f7:2e:a4:1f:fb:fa:97:25:76:4b:49:ae:c4:0f:bc:ea:62:
54:ea:0f:a9:ad:b9:38:6c:86:0c:50:f0:9f:04:1e:ca:10:05:
6e:bc:ff:7a:7b:b2:c2:66:a5:38:ad:37:6d:19:1f:b8:15:1e:
e8:7c:4e:a7:43:a8:51:8f:eb:6a:be:aa:1c:55:3a:07:aa:1a:
bf:32:c5:f9:ab:94:46:ac:41:aa:c9:30:82:f0:cd:60:5a:5d:
ee:90:18:43:13:e7:1c:b2:28:dd:c7:44:06:3b:0b:cd:ee:87:
bf:b5:f9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:35:55 2026 by rpki-client