Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: O6Hds3GNeErHen+0YqyTWv+/xfzmo0sBUYQGyO8uCo0=
Subject key identifier: C1:81:31:50:78:F9:B4:C5:BA:BA:EC:EF:08:4D:79:3A:61:87:7B:63
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 01A0D012382790BA24A62B46911C0B05A199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 19FF
Signing time: Wed 23 Sep 2026 21:00:49 +0000
Manifest this update: Wed 23 Sep 2026 21:00:49 +0000
Manifest next update: Thu 24 Sep 2026 21:00:49 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: j0vCfWexp49JKqxXB9iLLHxofiwQhuHzHk/5WbYDAc4=)
2: Z-KRt-a6fFf_5XtERzEP16Ujm4E.roa (hash: UsGPZBKjWrTYFqihznPKPakXtZqMZXtabA/JlRVq59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:38:27:90:ba:24:a6:2b:46:91:1c:0b:05:a1:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Sep 23 21:00:49 2026 GMT
Not After : Sep 24 21:00:49 2026 GMT
Subject: CN=c181315078f9b4c5babaecef084d793a61877b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:23:0c:2b:7a:17:d9:4c:d7:2b:ea:d1:df:da:
f6:8c:eb:77:8e:62:e5:f6:b7:f4:d4:e2:2d:38:2b:
78:32:7f:bc:20:ee:f0:29:c2:37:9d:83:ff:38:62:
8f:9f:05:25:cc:34:16:7f:86:90:94:2c:c2:fc:04:
51:2c:4b:d5:45:2b:2b:17:18:6f:fa:d9:58:90:80:
c8:f0:f8:f8:d0:a9:f0:e9:2a:23:51:b4:f6:2d:8e:
cf:84:05:39:86:00:bd:02:2e:e6:b0:5c:d1:5e:4d:
6e:f4:0e:4c:fd:f0:da:7a:82:23:5a:66:95:39:1d:
82:c9:9e:da:f3:b9:b1:50:67:34:7c:d5:cc:96:86:
17:30:e0:78:a1:d5:1d:bd:07:11:ab:aa:79:59:90:
cf:05:e5:54:05:05:81:8e:ca:fe:28:58:91:41:52:
f0:98:d9:06:df:ed:4f:e7:3a:83:fe:04:87:08:68:
f1:d9:af:61:cc:0a:ef:33:aa:cb:1a:43:97:df:23:
85:e8:5f:e3:28:9d:ed:c5:59:2a:37:b0:75:b9:d5:
b2:2f:2a:ad:05:a3:e6:8a:9b:b6:32:fd:b1:8e:08:
6e:ab:3b:61:69:06:41:08:87:b8:58:23:b4:01:8f:
a7:28:f1:8f:68:48:2d:35:83:f5:50:fd:e3:ee:16:
ab:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:31:50:78:F9:B4:C5:BA:BA:EC:EF:08:4D:79:3A:61:87:7B:63
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:db:57:a6:6f:0a:70:6f:0c:1f:da:c7:c5:0c:7e:34:f8:06:
e5:d5:bd:f6:56:e2:12:f4:13:e3:87:de:05:61:92:15:27:ea:
3b:1b:51:fa:54:0b:2f:1f:c4:1b:f7:95:23:2e:d2:f1:e6:bb:
77:e0:2e:ba:b9:dd:df:a7:cc:ce:59:85:03:41:75:8f:a1:bb:
e8:b3:82:4c:1a:7a:1e:69:67:2e:34:7c:d0:f4:38:cf:01:60:
6a:09:0a:ed:a7:a7:ca:c4:b3:e8:fa:fc:3b:24:dd:6a:8d:69:
ab:57:01:87:ba:dc:e0:7f:02:55:c5:56:73:de:69:c8:1e:38:
cd:60:63:82:83:42:7b:3e:d3:57:1d:87:28:bd:d3:df:b6:15:
c6:1b:d0:2f:3d:38:b4:54:df:b1:d5:92:9e:e4:83:e4:8c:06:
b3:eb:ad:29:95:ad:73:9c:ba:b4:0d:a3:26:11:9d:51:80:37:
a0:7d:2f:64:54:54:9d:fc:67:4a:50:ee:05:f0:0a:5b:06:46:
4d:f8:63:3c:f4:32:c4:a7:d2:e8:f4:9c:58:97:6f:b6:7a:aa:
2c:91:b1:64:03:06:1c:8d:48:3b:97:82:19:f4:91:12:0c:87:
4e:63:3a:07:e8:42:9f:26:b3:47:4d:e8:34:29:88:e8:3f:e0:
9e:e6:8b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:53:24 2026 by rpki-client