Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
File: 4BGYDkOhYAqXZWfbBqNKARRf14o.mft (raw, json)
Hash identifier: V46OVBv1wtZI6WK/KzPkPJtchdu6K3sKUhOHClq7pzg=
Subject key identifier: 7A:A8:7D:A9:C8:BB:C7:15:F7:9B:03:6C:25:DA:74:38:91:8C:77:5A
Authority key identifier: E0:11:98:0E:43:A1:60:0A:97:65:67:DB:06:A3:4A:01:14:5F:D7:8A
Certificate issuer: /CN=e011980e43a1600a976567db06a34a01145fd78a
Certificate serial: 01A03FE08688C1B3B61342BCA77550FBB8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BGYDkOhYAqXZWfbBqNKARRf14o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
Manifest number: 02A3
Signing time: Wed 26 Aug 2026 21:01:14 +0000
Manifest this update: Wed 26 Aug 2026 21:01:14 +0000
Manifest next update: Thu 27 Aug 2026 21:01:14 +0000
Files and hashes: 1: 4BGYDkOhYAqXZWfbBqNKARRf14o.crl (hash: LkSE0vA0Dviz+suGt2AFGNqpXZ/Ihw7Jzjta+jcbVYk=)
2: aoCwhi5evCru6LgJTjJ8MV_C6jc.roa (hash: yQEGzqfXX6MkFbhFn963xnKD2YQsIROLhxeJWGdhd6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BGYDkOhYAqXZWfbBqNKARRf14o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:86:88:c1:b3:b6:13:42:bc:a7:75:50:fb:b8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e011980e43a1600a976567db06a34a01145fd78a
Validity
Not Before: Aug 26 21:01:14 2026 GMT
Not After : Aug 27 21:01:14 2026 GMT
Subject: CN=7aa87da9c8bbc715f79b036c25da7438918c775a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:31:09:2c:3a:df:af:60:fb:f1:19:cd:f9:96:
9d:dc:b2:60:7b:94:26:b1:6c:38:53:c6:c0:5e:5f:
70:6d:fa:fa:26:96:2e:84:7d:38:58:a7:42:07:48:
bb:a0:3a:ec:00:b0:d6:86:b8:96:1d:9c:8d:c1:aa:
ee:b2:de:95:0f:46:7b:33:a1:b9:e2:bd:a7:87:8f:
6f:60:ff:0f:3f:de:99:e6:69:a0:29:51:53:79:db:
38:1b:3d:a5:b4:53:6c:f4:f2:11:9a:f7:78:e0:1b:
69:ba:f4:33:02:6e:1f:21:a3:39:12:bb:9b:32:28:
7e:bc:76:48:ad:08:ed:f5:30:de:6d:93:91:fb:9c:
06:c1:06:fc:86:21:9d:fe:f2:50:28:8c:8a:5d:48:
0f:94:4a:9d:5f:65:b7:d0:0d:09:eb:19:d9:eb:c2:
6c:67:14:0f:88:7d:d1:4e:c2:8d:5a:b6:cb:2e:83:
89:31:b9:d5:e7:1f:8c:97:f2:d1:05:9e:ee:d0:89:
a1:23:9c:d0:c8:c0:b6:9c:6d:eb:f3:18:c6:30:37:
23:28:19:4d:8d:98:e6:b2:5e:02:c1:66:74:79:9d:
34:9e:d5:0a:ec:0f:6a:69:87:5d:17:b7:5f:53:0c:
66:b3:f8:ce:cb:99:0a:14:5f:89:a8:50:00:8e:b7:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:A8:7D:A9:C8:BB:C7:15:F7:9B:03:6C:25:DA:74:38:91:8C:77:5A
X509v3 Authority Key Identifier:
keyid:E0:11:98:0E:43:A1:60:0A:97:65:67:DB:06:A3:4A:01:14:5F:D7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BGYDkOhYAqXZWfbBqNKARRf14o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:4a:71:42:65:ff:be:17:44:2a:44:a7:f8:8a:5c:94:b3:c1:
8a:5e:0e:a7:64:db:1d:28:42:64:fa:c6:be:8f:09:38:64:5e:
e1:09:fe:fa:b6:d5:01:d3:48:59:0d:d9:b9:44:e7:2b:0a:c7:
f9:ef:98:e3:76:39:2f:2f:ce:93:b3:ed:db:14:69:8e:91:2f:
68:3d:db:25:27:04:19:aa:71:96:1e:d3:62:4a:9f:9c:19:ff:
11:57:7d:bf:6d:16:4d:e3:04:a9:a7:4e:23:ee:b6:33:a6:01:
4a:ea:4a:44:22:bf:4a:3a:30:ce:39:a9:70:27:76:00:96:b9:
1f:90:3b:08:32:bb:c1:bd:72:3c:82:6a:91:78:78:32:66:2e:
68:f8:e8:7a:b4:f2:34:7f:fd:16:c8:13:b1:bc:e4:04:4f:dc:
04:78:31:4e:07:95:2c:73:2e:31:f8:4a:65:5c:c2:c2:0b:d5:
88:70:89:00:68:81:e7:db:31:a4:85:e2:a0:e8:1e:1c:30:35:
e1:fb:8f:c9:ec:9f:da:95:c8:e1:89:4e:9e:e7:6c:e3:fc:ba:
c8:fb:7a:9f:83:96:63:d0:e7:b6:32:3e:8e:c5:6b:f3:8a:6c:
0c:47:cc:2a:34:3b:b8:fa:fe:c4:3b:00:db:61:6e:26:7d:fc:
ba:e3:23:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:22:29 2026 by rpki-client