Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: hpQT66TJf/0C9MKxfUWY//6L+FLATSekS3cS1jvkH6Y=
Subject key identifier: F9:A2:AD:44:AA:F8:F1:C7:2E:36:89:9F:9F:89:18:CA:8A:D1:01:25
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 01A14E079DEB73630C4446261CACC13A64AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 1AAD
Signing time: Sun 18 Oct 2026 08:01:24 +0000
Manifest this update: Sun 18 Oct 2026 08:01:24 +0000
Manifest next update: Mon 19 Oct 2026 08:01:24 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: +n9vK+2D5G/bu4wruLDLvssbTJ1R8s2YtXNeiK/qujA=)
2: j6eYXTGIPK6gsz2syCvMaVTG-yE.roa (hash: 91e+kynlaPtGnq7c6oIlywSzsBYw97PzDquhkqe4ygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4e:07:9d:eb:73:63:0c:44:46:26:1c:ac:c1:3a:64:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Oct 18 08:01:24 2026 GMT
Not After : Oct 19 08:01:24 2026 GMT
Subject: CN=f9a2ad44aaf8f1c72e36899f9f8918ca8ad10125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:75:fd:ad:18:c4:fd:00:bf:f9:85:72:43:
9d:e5:6b:f1:ed:24:56:5f:26:05:5b:5d:b4:27:32:
8b:5a:62:f2:11:e5:8f:58:25:2d:ef:65:e9:c2:33:
81:43:20:f3:15:47:7f:bb:76:05:99:09:b1:b4:fd:
f3:c9:e5:ac:34:c0:30:bf:94:ad:95:1b:6b:c7:e8:
39:31:26:be:b7:ec:ce:e1:28:e1:ff:4a:67:0a:eb:
73:cd:80:52:bf:27:dc:57:47:a0:7e:08:3f:8b:af:
59:39:b8:28:9f:4b:05:24:ad:21:e1:d6:26:ce:6c:
db:8c:61:fa:ef:ea:a6:13:c7:b9:cd:3a:7b:97:19:
68:ed:28:3c:3f:6d:bf:fb:7a:ff:01:81:09:4d:79:
a9:47:d5:5c:6c:c3:ad:1a:03:43:ce:8a:c3:d8:e7:
23:68:77:58:6e:e9:55:17:a4:d2:e3:ea:55:49:f4:
53:b8:0c:41:03:38:ab:e2:03:87:77:0a:c4:e6:8b:
49:14:5b:9f:99:5e:52:c0:68:31:b8:ce:8b:89:27:
3a:2d:1b:75:1c:d4:8c:63:96:6d:22:83:e9:f3:f0:
f3:7e:0e:d2:47:4a:9f:bc:eb:a9:a8:9d:f1:24:94:
ab:7c:b2:97:e8:5a:7b:76:23:61:6b:b2:3c:30:3e:
df:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A2:AD:44:AA:F8:F1:C7:2E:36:89:9F:9F:89:18:CA:8A:D1:01:25
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1f:3c:55:e0:67:33:24:2c:8a:b6:4c:2d:34:7a:0a:22:17:
04:f7:39:06:f1:81:78:13:3b:92:13:98:6f:07:95:e2:43:9a:
a9:5f:b0:6f:d7:12:05:1b:c3:38:fc:0f:33:93:46:64:e4:7a:
3d:16:14:4a:1c:2d:0d:55:35:34:29:1c:fd:20:cb:0d:53:23:
52:b2:94:44:6a:83:b7:42:f2:73:a7:00:6e:b0:23:85:cf:12:
ae:4f:af:4d:59:a2:4e:5a:2c:2e:fb:ae:89:fe:4d:93:0b:77:
13:5c:3a:b9:3c:2f:d0:a5:2e:7e:03:7e:59:3f:f2:9f:f0:5b:
b4:4f:b7:59:65:83:2f:e3:2f:8b:bd:d0:05:3f:b5:07:a9:da:
e9:3c:c3:0d:2d:ee:c0:19:ae:d3:36:8e:b3:4a:06:20:25:28:
2e:97:16:3b:0f:3e:a8:96:14:81:3e:11:93:79:ea:f9:42:ec:
15:d3:b0:e1:21:d2:5c:d2:b3:c6:28:0d:0d:ce:e8:20:1f:8c:
54:10:b8:2f:94:e5:03:48:2f:f1:f6:4f:da:4a:0a:35:a8:3d:
9b:e3:10:77:56:b6:2e:70:c8:a6:41:98:ff:b7:00:17:e0:8a:
e1:cb:60:f7:ef:30:d8:37:50:da:ca:23:72:be:c6:6d:1b:3d:
d1:67:e3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:05:21 2026 by rpki-client