Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier: wSCtA+tIt2WCYpNpdUqAC3zL26HlspFs0aSMHtkQ7Dc=
Subject key identifier: DE:6D:06:68:A2:0D:4D:28:E9:27:42:86:5D:21:73:1B:77:A1:B0:89
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 01A156D39060CCBEE44587447CA982AD91B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number: 0A10
Signing time: Tue 20 Oct 2026 01:01:07 +0000
Manifest this update: Tue 20 Oct 2026 01:01:07 +0000
Manifest next update: Wed 21 Oct 2026 01:01:07 +0000
Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: 28QC9uL4P53N5iyi2szciyuIAICVHlDZ+8GAXG9+4Vw=)
2: Um8x4FnVBBKSkcy47VZrVv_LDxE.roa (hash: tfl71U6Q8ML7hqI6qdxoHZc1rgsYETV4BNFwPX3unlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:56:d3:90:60:cc:be:e4:45:87:44:7c:a9:82:ad:91:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Oct 20 01:01:07 2026 GMT
Not After : Oct 21 01:01:07 2026 GMT
Subject: CN=de6d0668a20d4d28e92742865d21731b77a1b089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:40:b0:60:83:78:24:fd:6a:f9:1f:d9:a4:
af:0b:41:aa:75:2d:a8:00:b2:15:77:9d:48:74:f0:
c7:2b:52:71:4e:9e:62:de:bb:71:43:3d:e9:28:b6:
35:a9:f8:8b:7e:14:0d:26:d6:2e:8a:d2:98:cb:85:
77:aa:f6:76:19:06:94:0d:68:f0:03:bb:2b:3b:24:
58:ee:0e:60:01:3e:b8:2d:4d:aa:e0:65:00:31:e9:
a5:b3:9d:e5:a5:82:e6:2f:e2:84:55:73:53:51:a2:
6f:de:d7:e2:76:5d:e0:81:bc:13:9e:01:d3:94:d0:
f8:b0:36:0f:38:08:64:00:f3:1c:91:67:90:d8:1d:
86:f5:cf:13:ae:69:74:c4:aa:60:0c:b9:6d:66:94:
81:2c:be:5d:f9:7a:5e:2c:6c:52:e2:13:51:e3:0c:
d1:72:23:da:54:3b:70:0c:6f:c8:6d:d6:1e:eb:69:
8b:03:23:5f:2e:10:6f:39:4d:61:62:92:28:eb:44:
d1:42:f3:93:61:00:54:30:ac:43:99:09:dd:2d:98:
1d:1e:c6:2f:76:b4:4c:68:85:43:e2:89:eb:0b:5d:
2e:8d:13:66:31:92:f1:7d:a2:34:21:74:37:4c:2b:
28:00:99:c1:20:b5:41:13:78:5c:89:ad:f0:e0:fd:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:6D:06:68:A2:0D:4D:28:E9:27:42:86:5D:21:73:1B:77:A1:B0:89
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:be:b1:42:2a:f2:49:4e:36:67:cc:e8:be:c3:76:48:3c:2e:
f9:bc:3c:d0:f2:00:77:ff:cf:c8:fe:4d:0f:88:02:62:0d:64:
bc:11:f1:b5:06:08:88:05:5e:84:bd:7c:65:8c:97:b5:63:4c:
f2:a5:6b:41:13:da:e3:e5:9b:54:c4:ef:07:55:67:ae:d9:5c:
db:0a:82:65:f7:10:7f:34:71:23:e8:b2:96:25:15:6a:80:ef:
0a:d5:a7:de:93:00:4e:b8:c5:d6:74:0d:70:d4:1c:ac:f5:2c:
fb:31:a6:ff:6b:6a:1a:48:fa:aa:b4:7f:e2:9f:cc:c7:3f:15:
ac:a5:95:9d:5d:7d:7f:97:17:33:31:06:fc:07:7e:38:a9:25:
e1:8f:57:53:f3:93:12:b3:67:72:a0:db:f0:86:57:1c:a0:f1:
51:fe:25:11:de:7b:c6:43:45:c3:24:f8:5b:e5:36:9c:c5:7f:
a5:b1:11:41:ef:3a:43:50:a1:0e:d5:73:c6:3e:55:be:09:06:
1e:a4:7c:fe:d3:6e:81:12:b3:6e:2f:9d:0e:4d:f3:5d:88:19:
aa:24:cf:0f:d3:0f:00:37:cf:26:b1:4f:31:af:50:96:7f:aa:
64:50:b7:8a:83:78:b0:48:b5:53:3b:f7:93:3c:27:3f:26:b0:
a4:9b:ad:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:47:33 2026 by rpki-client