Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
File: 4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json)
Hash identifier: 0WgUsAeS/7sejkQ8REtENjdDaQAJnb69R6hT1CdOKRc=
Subject key identifier: C8:4F:72:75:A7:22:8C:33:0A:11:FB:D7:7B:77:57:89:B5:44:15:A1
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial: 01A131467485604B39CB3813F9257E2CCC6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
Manifest number: 0A67
Signing time: Mon 12 Oct 2026 18:01:03 +0000
Manifest this update: Mon 12 Oct 2026 18:01:03 +0000
Manifest next update: Tue 13 Oct 2026 18:01:03 +0000
Files and hashes: 1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: EDT930k3l+Ytv4mPEpS9p1T3Ju3FREQYoO5eQ2cB+0A=)
2: KNOVXoGQsdCxPsZM3zKJ6uFmptI.roa (hash: UiYbuT4DjmIashb94arKXLuitUGRN2TvoEQlDnO6RSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:46:74:85:60:4b:39:cb:38:13:f9:25:7e:2c:cc:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Validity
Not Before: Oct 12 18:01:03 2026 GMT
Not After : Oct 13 18:01:03 2026 GMT
Subject: CN=c84f7275a7228c330a11fbd77b775789b54415a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:a5:0c:1f:dd:e8:2f:27:af:62:c4:1d:37:
a8:dc:a7:f3:b7:4b:de:cc:f4:68:a7:69:39:92:e1:
87:e1:0f:ac:ed:18:c9:32:35:db:cf:0c:b3:1b:92:
8b:2a:eb:be:b0:af:0e:8e:31:79:fb:17:4f:65:41:
84:65:ea:ab:4f:10:48:bd:8a:40:eb:7f:77:f6:90:
95:c6:cf:54:df:db:a8:21:82:34:d4:ba:3e:75:e9:
5a:55:18:83:86:f3:b3:18:27:3f:db:86:2e:6e:fe:
81:7f:6e:c5:58:de:b6:0d:10:d6:b5:f3:fc:ca:b4:
9f:22:87:66:ef:1b:93:77:ce:fd:40:29:12:12:fc:
a3:c1:df:6f:20:41:b0:81:a2:a8:77:a4:fe:96:10:
5e:60:9b:19:20:5b:a8:00:ee:18:25:42:f9:9e:ae:
f2:5b:c4:b0:38:70:39:1a:96:a2:14:7f:4f:8a:93:
c9:81:d4:df:c1:68:f6:07:cc:78:34:ce:f0:7c:b7:
0c:46:d5:f8:4b:a4:51:36:cb:67:e7:c3:a1:8d:d7:
69:22:a3:ec:90:a9:c9:f7:9d:f8:a7:9e:e2:d6:f7:
85:41:41:0d:7c:d5:06:d9:8f:8a:b0:3f:2d:53:e5:
31:80:c9:9b:ca:e8:01:27:57:36:aa:37:c7:1c:bf:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4F:72:75:A7:22:8C:33:0A:11:FB:D7:7B:77:57:89:B5:44:15:A1
X509v3 Authority Key Identifier:
keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c2:cd:5f:f1:d4:6c:e6:47:44:ba:f9:9c:a7:23:c2:f5:0b:
aa:8e:f6:63:47:a1:57:2d:2c:72:70:71:f0:d3:69:e6:92:79:
7a:07:5b:e5:7b:4d:f5:30:3b:6d:f6:23:6b:c3:7b:d8:e7:a4:
3a:16:22:6d:01:fe:45:b0:90:5c:ab:56:9e:bf:eb:86:9a:4c:
7c:30:21:3b:61:56:d5:5f:36:76:7b:4e:f2:65:1e:6c:81:82:
53:12:1b:ed:3e:e5:b2:cd:57:d9:a1:f0:0b:16:63:2a:7c:60:
1f:79:7e:67:9d:cb:c1:5b:36:f9:5e:57:97:dc:8c:3d:aa:f1:
5a:5a:cb:45:42:8d:9f:17:bd:13:00:7f:3e:a8:ec:c7:fe:c8:
4d:4b:64:82:fe:ed:72:b5:70:66:ad:58:37:84:64:d6:6f:36:
a2:2e:e2:96:33:e7:80:db:54:b2:62:f0:93:bb:32:49:c7:88:
16:7b:0b:f3:1e:97:b9:fc:84:b3:f6:aa:c6:3a:37:cc:b3:e4:
f2:ba:7a:5f:60:a9:e9:5b:0f:d7:18:5e:e4:a4:42:08:2f:96:
e9:1a:bf:fe:96:dc:29:b6:17:c2:2c:5c:91:d2:3e:91:9c:45:
5b:f0:22:76:78:52:8b:61:16:0e:ef:fe:af:09:2b:02:22:64:
91:b2:e1:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:48:26 2026 by rpki-client