Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
File: 4SLitYIzoZPR9yd4Vl1smNdhY6c.mft (raw, json)
Hash identifier: hkNkQuyKytW+kzvTLRGzDpCUW2t4/ISViQBuQHh/JmU=
Subject key identifier: 71:72:53:2B:0C:F9:2D:86:DA:E9:31:8B:F6:08:78:6B:BB:23:76:6B
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial: 01A13ECB5F3EA3CFAC7B2B1C047ADDE79DDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
Manifest number: 1686
Signing time: Thu 15 Oct 2026 09:01:17 +0000
Manifest this update: Thu 15 Oct 2026 09:01:17 +0000
Manifest next update: Fri 16 Oct 2026 09:01:17 +0000
Files and hashes: 1: 4SLitYIzoZPR9yd4Vl1smNdhY6c.crl (hash: 2CZIhRxEs4JX2KbI5tH1tall4SQlfKJWYQjofJRkM/0=)
2: EZWxZhFmRJKcHZHUYtJREuYOZKA.asa (hash: o6wDYlrB5ufIUn6eLi+ahJAd1q3uJL19jR47MI+d/JI=)
3: GO-d2Wh9QMmrYUtLnGnz133HNZg.roa (hash: xFp07iitJni/qMpmHXkgYii0ns8yCXMQvZmN2wMYF3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:5f:3e:a3:cf:ac:7b:2b:1c:04:7a:dd:e7:9d:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
Validity
Not Before: Oct 15 09:01:17 2026 GMT
Not After : Oct 16 09:01:17 2026 GMT
Subject: CN=7172532b0cf92d86dae9318bf608786bbb23766b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:61:d1:ca:cd:a9:70:aa:26:5c:d7:13:5e:
6f:29:62:35:cc:0a:4f:ad:70:9e:83:fa:9c:48:fc:
2f:67:08:05:3e:6d:8f:6e:c8:1a:c5:17:ff:66:ac:
4e:0f:eb:45:b6:92:82:56:a6:c9:61:71:68:c4:cf:
d2:92:b9:0a:1f:5e:1e:3d:7c:88:e6:2a:47:c7:91:
36:58:88:8e:2c:9c:3c:5f:df:f2:5d:90:d9:2d:31:
71:1b:fd:34:50:07:e1:71:e5:a4:7f:c9:c4:77:e0:
48:b2:57:1f:75:00:ed:f1:bd:e4:32:8a:13:81:6a:
e1:94:74:53:87:d3:09:7a:18:73:8c:be:27:56:4b:
36:41:af:8f:e0:7e:45:4a:6a:22:04:1f:8c:84:6c:
a9:a1:4c:f1:d0:e4:54:19:55:e0:e8:a8:93:d7:a4:
87:c1:a3:c7:29:51:c8:30:c0:d3:11:47:b9:fb:51:
dc:75:29:50:07:78:0b:9e:31:c1:36:d5:20:45:64:
8e:6b:71:ab:fb:11:01:f5:2e:2b:f8:41:9c:b4:48:
37:1d:d7:03:d7:22:d1:fd:52:36:60:6a:55:6c:46:
c0:37:39:61:73:be:f1:85:20:03:fe:05:68:30:3c:
1c:a4:f4:81:a8:29:a7:82:bb:ac:98:50:54:1e:e4:
48:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:72:53:2B:0C:F9:2D:86:DA:E9:31:8B:F6:08:78:6B:BB:23:76:6B
X509v3 Authority Key Identifier:
keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:27:67:da:c8:9c:35:cd:a5:c9:f5:7a:dd:4c:88:33:b7:8a:
a5:61:ef:09:1b:61:65:b5:bd:1c:88:17:95:82:2b:77:d4:17:
19:0c:db:a7:4c:1a:50:a6:72:fe:d5:da:4d:b9:89:b8:a3:0a:
7e:6a:0c:1f:10:e8:75:05:e4:09:23:15:ff:65:09:90:72:7d:
48:63:a1:89:8a:60:62:75:97:3f:7b:40:6d:95:2b:e5:25:df:
79:f9:f9:98:ca:96:90:25:29:1d:2d:1d:ad:56:a2:3b:65:89:
00:ed:61:9f:cc:98:94:50:ea:5e:e7:af:43:f9:6c:8a:75:a6:
1f:a0:38:52:a6:c4:68:d0:83:b8:b4:e5:e7:e8:63:29:3e:0d:
16:ff:d0:4a:20:0b:18:e3:66:3f:8e:eb:f9:a9:53:52:c5:c8:
9d:79:73:62:4e:60:73:0c:f1:96:d7:3d:36:62:4a:2b:6f:e7:
b5:fa:a1:17:19:24:ef:33:79:4e:05:f2:49:46:71:fc:29:73:
e2:da:38:8b:6f:4d:67:70:b3:a5:8a:53:79:9a:ca:0e:74:a2:
9d:09:2d:74:84:69:1c:21:69:5e:09:c7:18:f3:f5:da:3e:64:
c5:e4:c4:e2:2c:d3:08:c9:50:bc:98:f8:81:0b:c6:04:90:8c:
83:ae:49:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:07 2026 by rpki-client