Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File: 4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier: euKh1a+Dl3kRQ0XkpSDSUSDFtadGSd9Z9mYIJFnitro=
Subject key identifier: 4A:5C:CE:C1:5F:4C:93:50:64:B9:25:D6:50:79:EB:30:68:66:73:6B
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer: /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial: 01A000CA4AE5645F238061B6B524AF06858A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 15:00:52 +0000
Manifest this update: Fri 14 Aug 2026 15:00:52 +0000
Manifest next update: Sat 15 Aug 2026 15:00:52 +0000
Files and hashes: 1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: 7HP1BZQjvC/1x7s37QcK+NW7tZe53zCrFoijSOZNPpw=)
2: EC4GBb1LJjJ7pV8_x0txKCEIXSg.roa (hash: 9oW73pfxOP8M7veC/PL5Kk4ZUA5njttoIdfA+gSwRO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:4a:e5:64:5f:23:80:61:b6:b5:24:af:06:85:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Validity
Not Before: Aug 14 15:00:52 2026 GMT
Not After : Aug 15 15:00:52 2026 GMT
Subject: CN=4a5ccec15f4c935064b925d65079eb306866736b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3e:b7:0f:e8:74:84:c2:39:f9:c2:d0:b9:16:
f4:eb:da:98:81:4c:1f:d3:ac:55:67:bb:38:13:01:
fa:a7:9f:dc:73:91:87:7e:13:1b:52:ac:ee:ea:5b:
f9:5c:a5:38:77:ec:16:8f:2a:16:d7:36:28:8f:0f:
96:88:8c:c8:9b:15:b9:73:ff:08:f5:7e:18:02:a5:
97:67:96:77:f6:c4:ed:57:e5:b7:f6:5e:44:0a:15:
14:1b:50:12:3b:d3:19:6e:70:2d:bf:5d:ed:43:a2:
82:1e:04:76:14:56:64:a0:48:a2:b9:5b:e4:26:83:
8f:d3:ee:c4:10:6f:86:8e:82:1d:77:cd:41:c0:8a:
4e:e6:52:be:49:83:c8:d5:34:93:2c:7c:84:37:a1:
c2:f3:00:af:a8:cd:ec:36:56:fd:69:bf:9f:52:94:
d3:18:b2:07:cd:cf:e8:77:5d:17:26:56:ee:1a:db:
94:23:47:83:20:22:be:23:27:a2:c1:d8:36:9f:be:
77:1c:e9:33:d0:3e:72:d5:ad:a7:ea:fc:91:02:17:
a0:c1:aa:b1:7c:3a:b8:e4:f2:1c:2f:9d:e5:06:3e:
f0:cf:fb:26:7d:d3:7a:e3:f8:ae:fd:4a:44:2f:90:
65:d1:f1:36:f9:d4:8d:df:5c:46:94:b7:a6:3f:a0:
a7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5C:CE:C1:5F:4C:93:50:64:B9:25:D6:50:79:EB:30:68:66:73:6B
X509v3 Authority Key Identifier:
keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:fd:0c:8e:05:dd:b1:a4:82:f1:4a:cd:0b:55:13:96:f0:44:
43:93:c0:7f:76:ac:bb:98:af:e0:cc:54:27:a8:8d:79:f0:8b:
fb:3b:7d:26:80:6b:14:90:5f:c4:33:cb:bb:c6:1a:18:b6:e7:
c6:2b:96:19:44:ba:5d:14:f6:57:6d:e7:5c:da:03:4c:d8:24:
d2:2c:fb:17:a1:58:97:23:ab:e0:d1:90:73:e8:65:d3:5e:96:
22:7f:c8:12:c1:2a:f6:3a:6d:c6:d3:09:3d:ab:54:12:a6:3f:
dc:20:d4:60:1e:22:0a:6d:a5:a8:9b:82:f4:11:e3:37:78:10:
04:5f:bc:b5:a2:34:2e:18:d2:64:e0:36:a6:10:dd:48:f0:6c:
78:7e:5f:f2:2a:b4:2b:6f:82:d4:93:06:bf:ae:8b:e3:93:9f:
1d:d9:18:2d:f0:e9:e5:47:d0:e3:8e:0d:26:12:e7:e9:ab:83:
da:4e:6c:71:ec:f1:17:89:5a:0f:04:cb:27:36:55:b7:1f:62:
79:a8:5a:50:00:56:81:a3:87:14:a8:23:27:b5:c0:c7:a6:2e:
ce:cf:1a:89:30:29:fd:83:59:1d:32:95:17:b2:37:f3:bb:4c:
68:ad:fd:d6:2c:0a:5f:24:b2:be:d8:d8:4d:d2:9d:f9:f2:32:
59:f8:aa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:47 2026 by rpki-client