Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
File: 4A98YCwtJIbuagplJAe5BKfUDeA.mft (raw, json)
Hash identifier: 4hJ4Gs7sMZFUemmQnsftzh+pxPYnGOU9w2F397X35hw=
Subject key identifier: 2F:C9:DE:06:2E:60:62:39:AE:55:1B:3A:88:D0:4B:05:4D:07:A2:60
Authority key identifier: E0:0F:7C:60:2C:2D:24:86:EE:6A:0A:65:24:07:B9:04:A7:D4:0D:E0
Certificate issuer: /CN=e00f7c602c2d2486ee6a0a652407b904a7d40de0
Certificate serial: 01A0BEB0249A5FB5C841AD9783C09B3BEC66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
Manifest number: DC
Signing time: Sun 20 Sep 2026 12:00:09 +0000
Manifest this update: Sun 20 Sep 2026 12:00:09 +0000
Manifest next update: Mon 21 Sep 2026 12:00:09 +0000
Files and hashes: 1: 4A98YCwtJIbuagplJAe5BKfUDeA.crl (hash: jhqkBA6Wq76v72UCdcgJpBAT0/4bIWramZAlgsD1/hk=)
2: XYZAtepajrERzVfepYrQ1WLpJn0.roa (hash: NwsD9n0fR/8scpVFCnvi5VpS0JM3A+KLBhhzQOSTM9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b0:24:9a:5f:b5:c8:41:ad:97:83:c0:9b:3b:ec:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00f7c602c2d2486ee6a0a652407b904a7d40de0
Validity
Not Before: Sep 20 12:00:09 2026 GMT
Not After : Sep 21 12:00:09 2026 GMT
Subject: CN=2fc9de062e606239ae551b3a88d04b054d07a260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d4:71:78:73:e1:a7:65:5d:97:f9:cb:a3:c1:
ec:74:93:e7:f3:fb:fb:0b:62:66:cb:be:61:7a:fd:
28:b6:68:ea:4e:43:b8:3b:59:41:8f:48:72:55:35:
94:7f:8c:4c:a7:7a:d4:74:53:4e:d5:a3:04:2c:26:
f8:c4:7e:96:55:53:56:5b:78:aa:cb:3c:3c:8d:35:
86:ee:a5:c0:52:ce:c4:c6:9f:88:5a:c0:d5:fb:90:
d2:ef:6e:22:79:ce:db:49:10:4a:a6:24:47:73:ce:
fa:b0:e9:f6:16:90:0d:82:a9:e6:7e:71:3d:74:26:
b4:23:d5:b7:e4:43:d1:80:ad:5e:28:63:bb:83:91:
f1:c5:6c:23:6e:a2:7a:98:5a:d8:f4:7d:1b:6c:e8:
fa:5c:50:97:d0:8d:7a:05:79:08:24:2c:13:50:cb:
fe:20:2b:22:75:ac:2c:e3:fe:83:85:15:64:fa:0b:
96:78:bd:f4:08:4b:37:58:0e:5e:13:a8:3e:a9:13:
ec:4d:22:06:0b:9c:cb:37:b3:51:d8:54:3d:2f:40:
e0:a4:b0:e0:0f:e3:69:b2:04:53:3c:2d:2d:4e:b7:
3a:0d:6e:51:c2:57:96:eb:7c:c6:d6:f7:eb:9a:51:
0a:93:f2:9b:da:0e:d2:9f:21:9e:34:59:16:f9:35:
25:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C9:DE:06:2E:60:62:39:AE:55:1B:3A:88:D0:4B:05:4D:07:A2:60
X509v3 Authority Key Identifier:
keyid:E0:0F:7C:60:2C:2D:24:86:EE:6A:0A:65:24:07:B9:04:A7:D4:0D:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4A98YCwtJIbuagplJAe5BKfUDeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/27c4c1-1577-4ee1-aa24-ade2babcb8d0/1/4A98YCwtJIbuagplJAe5BKfUDeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:de:aa:de:b7:51:59:52:6e:18:e6:f4:51:5c:53:55:3f:be:
c9:1a:1f:42:6f:e3:64:33:ac:93:40:f0:d7:7c:38:d4:f1:3a:
5b:69:a1:2a:93:29:45:ff:68:48:55:67:3d:06:11:9d:15:f8:
4b:18:b9:a6:34:0d:31:a1:0c:c5:4f:02:89:48:49:7a:d6:5b:
81:8c:2f:73:cb:da:c9:1d:74:e3:f6:30:c5:0e:04:d6:8e:9c:
d5:b6:06:7f:7d:b3:14:46:49:f2:b7:0e:de:c8:7a:8b:e8:a5:
10:2b:72:02:dc:e6:ca:4e:98:6f:2a:f9:f5:e6:5f:09:56:29:
58:d5:e4:f5:47:a1:26:b9:7b:10:8f:9e:b7:87:83:26:c3:5a:
a2:ea:1c:4b:a2:41:e0:81:04:5e:87:91:5d:b9:c3:35:3b:e3:
50:b4:f3:ff:0e:0c:ce:a8:b9:32:c8:54:48:46:a3:e6:a7:0d:
78:07:e4:75:10:37:33:54:9d:7a:8d:0f:04:b5:68:93:3a:76:
68:50:6b:b4:d4:a3:52:9b:67:ea:c9:51:18:bd:d6:82:d4:7b:
2e:b9:db:40:e6:a6:54:79:2d:5b:a3:f6:90:82:12:4c:f1:4d:
40:82:2b:35:80:fe:e9:99:57:93:e6:b7:b2:f1:5c:d4:80:74:
b0:c8:7c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:24:42 2026 by rpki-client