Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier: QmrkTnuwrmw7n/hX2iuvUiemcCdbSzTtZo8/OOot4sA=
Subject key identifier: 27:49:7F:BD:C2:CC:CE:9B:E8:C4:93:E9:4E:FD:1E:51:F5:37:7F:75
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial: 01A001DD5D1623074857782C6268A6150353
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number: 1A03
Signing time: Fri 14 Aug 2026 20:01:19 +0000
Manifest this update: Fri 14 Aug 2026 20:01:19 +0000
Manifest next update: Sat 15 Aug 2026 20:01:19 +0000
Files and hashes: 1: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: 5QvUZpcuW9SXXivHCDjDA5WkIzl8cVNQFWxSF30FqeM=)
2: TglFPGNOO08n6CcIWPtZA1IiMQ4.roa (hash: /q1UZrCdKL66jU2/r5RlUBwTKqwDKZiHeHHzwJ0UJjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:5d:16:23:07:48:57:78:2c:62:68:a6:15:03:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Validity
Not Before: Aug 14 20:01:19 2026 GMT
Not After : Aug 15 20:01:19 2026 GMT
Subject: CN=27497fbdc2ccce9be8c493e94efd1e51f5377f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:87:76:7d:90:89:85:5f:b7:e1:4c:5a:3b:
bf:07:f4:ab:ff:c5:e5:f6:98:06:ca:ca:88:e3:66:
d1:ef:2f:ca:c2:80:b1:07:0f:1b:db:75:6c:8c:b1:
99:57:36:39:48:1d:f5:40:39:ce:a6:b2:ae:05:c9:
94:6b:1d:ce:47:f6:55:ea:b7:4b:52:9a:0b:0d:3c:
26:0c:52:af:9f:57:48:f3:df:d6:49:65:5e:96:f3:
55:c5:c1:c1:21:7c:8f:95:64:0d:2c:7c:c5:6a:78:
a1:82:6c:de:97:1a:66:d0:73:1e:ca:93:5d:31:09:
a3:b0:7c:00:09:ce:de:a5:28:b0:81:d3:59:aa:be:
f2:0a:5d:b5:d3:c7:75:a3:9d:34:d8:d9:0d:b2:4e:
bb:8a:19:26:4c:d6:57:c2:ca:3e:ac:40:2b:ad:42:
5d:04:aa:3c:d7:1a:c4:60:5a:62:69:33:58:01:e6:
7f:24:47:59:2c:1a:3d:38:53:50:97:63:e9:e7:a2:
4c:bb:38:f5:19:2f:e6:21:ea:e5:7c:1d:ac:e1:ae:
45:c8:34:08:e7:62:35:a3:eb:87:d0:50:d2:87:13:
84:a6:54:9f:18:a8:ea:49:c4:d7:1f:bc:ef:de:9e:
a1:bb:a9:fb:71:d8:60:0d:5d:a6:ad:97:62:c9:a8:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:49:7F:BD:C2:CC:CE:9B:E8:C4:93:E9:4E:FD:1E:51:F5:37:7F:75
X509v3 Authority Key Identifier:
keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f2:c1:2d:2f:3b:55:a0:a1:e4:28:b6:33:0c:f4:66:4b:44:
fa:f2:58:5c:c2:82:04:24:07:79:b4:f7:45:b8:6c:bb:94:33:
11:5a:9b:15:16:2e:5d:ca:82:c2:0a:20:a3:df:7d:74:9c:ab:
07:cf:3b:08:f7:0e:94:d8:5f:fe:b2:42:b2:22:7e:bc:a9:50:
0c:e1:03:4f:52:58:2d:de:2f:9e:ef:cc:e7:c3:6f:59:9e:38:
79:28:f1:25:b7:9e:20:6f:68:1e:a9:82:63:50:03:6f:62:e3:
9a:f4:75:e3:a7:69:ca:5d:81:58:87:9a:69:8b:2a:74:1f:05:
d8:b4:97:39:d0:98:08:a4:4a:61:c9:de:00:a5:7a:ba:60:75:
a1:b1:1c:ac:a1:b4:a4:a8:5e:e1:12:91:1a:94:b8:e7:8e:ff:
06:e3:16:99:f5:d5:8a:2e:fb:27:3b:08:6f:a9:c6:80:ed:f0:
d7:e0:38:d0:1a:0e:70:a4:c0:06:5b:16:6b:7b:c7:e7:ff:e6:
00:89:bf:27:dc:e8:81:48:a0:10:54:9d:0b:24:22:5e:12:97:
79:d0:74:27:77:7c:8b:e9:ac:8f:bf:cc:3c:9d:87:84:f7:c7:
7f:4a:fc:85:09:5d:0f:e9:2b:19:67:23:46:cb:85:19:e1:73:
d2:14:b2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:42 2026 by rpki-client