
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: WMM9RLGxg5rQNm0NGUmPwx5Gw2mOBS7bBI8ccQ1XMzA=
Subject key identifier: FA:7D:5A:ED:04:00:87:5C:0F:15:22:22:D5:D3:44:33:F7:AE:22:31
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 01A0016EE9695C7A27D79D02248C01348AE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0DC3
Signing time: Fri 14 Aug 2026 18:00:40 +0000
Manifest this update: Fri 14 Aug 2026 18:00:40 +0000
Manifest next update: Sat 15 Aug 2026 18:00:40 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: ez78MqN1N1SiAhAqnbGJdylmZODnR7h34EWXlYbDjaU=)
2: Zfv_5cAa3ri0Ax5p2vNE36rHpnE.roa (hash: Id3c2s4Nmji3usQrf3+l5D4JNCrYHAfvKHW7XcPkXa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6e:e9:69:5c:7a:27:d7:9d:02:24:8c:01:34:8a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Aug 14 18:00:40 2026 GMT
Not After : Aug 15 18:00:40 2026 GMT
Subject: CN=fa7d5aed0400875c0f152222d5d34433f7ae2231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bf:48:f3:f0:85:23:96:14:2d:19:7b:a0:c4:
ab:75:5a:30:93:27:20:e9:63:44:5b:59:6c:b7:40:
20:68:ef:30:9a:72:f0:3d:77:61:48:fe:8f:e9:d6:
bd:bc:e0:36:6c:43:25:1a:15:c7:a2:99:a7:7d:81:
1e:d3:7d:5c:af:f5:39:7f:c0:9d:de:5b:56:ef:14:
c0:31:81:52:8b:ae:00:fb:ed:22:92:27:81:65:89:
ca:95:48:b5:a2:64:f8:49:f7:b4:d4:72:17:04:37:
fb:7b:17:57:ab:ae:21:a8:20:59:8b:b1:eb:cc:82:
7a:80:48:25:83:0a:46:94:48:8e:bf:11:c3:15:8d:
e5:d5:33:36:43:3e:71:78:f6:f7:6d:98:6a:f1:4a:
8d:aa:4a:ce:47:94:65:07:40:79:40:87:cc:db:27:
7e:aa:41:c2:f7:c2:d5:6e:fc:47:dc:5a:95:75:02:
14:5c:8e:10:fc:08:61:a8:de:fb:41:37:c7:c5:57:
2e:72:bd:ad:31:d6:ea:8c:3d:05:ca:a7:29:4b:67:
2b:ba:50:82:ab:d1:04:32:6b:37:7b:61:cc:96:b6:
60:12:f7:6d:78:e3:00:6c:77:87:de:0d:d0:af:6e:
3a:d0:b0:ed:f7:b4:a9:48:8d:23:03:79:39:ae:f5:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7D:5A:ED:04:00:87:5C:0F:15:22:22:D5:D3:44:33:F7:AE:22:31
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:cb:68:87:da:89:9b:5f:33:12:cf:5b:b1:11:a9:8c:9a:2f:
83:d9:a6:97:b6:be:b7:76:23:45:93:6b:8c:a2:87:eb:79:ff:
d9:4b:7c:3e:bf:66:4e:11:e3:9b:01:98:fc:3b:ad:46:bd:e0:
8a:6d:aa:35:2e:d7:2b:99:4b:03:1f:6c:24:ac:5e:f2:e2:f3:
1f:33:a5:76:ed:56:59:a4:04:62:fb:9d:3d:0f:14:96:92:a3:
2d:43:68:58:85:51:31:41:41:e5:27:cf:75:64:bc:15:19:da:
90:80:b1:52:23:8e:57:f8:15:f1:88:52:48:6e:f3:ed:63:45:
80:58:34:e7:e4:e2:5f:7e:20:ff:99:4f:1a:67:95:99:7b:04:
97:9a:c0:26:98:7a:a0:5f:4e:7c:4a:1c:4a:41:e4:7f:4a:0b:
de:6b:59:0b:3c:c2:fd:ba:a4:be:38:10:37:78:bb:f0:e7:48:
f5:51:9d:28:bf:d1:45:be:60:99:43:64:79:fe:ba:77:7d:52:
e6:d3:8e:8a:d0:e9:54:32:d9:f0:e6:49:9b:56:ba:6b:e9:5d:
70:58:39:c2:36:49:19:f7:03:bd:2e:5c:4b:68:fd:51:5a:11:
ae:b3:34:c7:cd:3e:16:f7:4d:38:b6:d5:a7:6e:35:6a:30:d5:
ba:e9:1c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:13:05 2026 by rpki-client