Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: z+lJPHa9cU/r/WMP0GZF+C1sAzOxp01c8ULjAsn0eK4=
Subject key identifier: 37:12:16:28:E9:9E:2E:0D:48:10:75:AB:76:7A:9C:9E:CB:1A:8D:8E
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 01A0D012B5E7F8673ED0DD8CF346AE6FACBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 21:01:22 +0000
Manifest this update: Wed 23 Sep 2026 21:01:22 +0000
Manifest next update: Thu 24 Sep 2026 21:01:22 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: 1FVBZQLpYLEejaLLFctfrMhCuXoZwUE0mArbQ7MAs2s=)
2: CTp1GS2fYaQIruu9tWpwYU6UL5U.roa (hash: 1woVFgn9dNEGbuwWBJn4MG4ChUl6MAOmb6s5dU16yL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:b5:e7:f8:67:3e:d0:dd:8c:f3:46:ae:6f:ac:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Sep 23 21:01:22 2026 GMT
Not After : Sep 24 21:01:22 2026 GMT
Subject: CN=37121628e99e2e0d481075ab767a9c9ecb1a8d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:4b:a4:ad:e3:4c:76:e1:3a:b0:48:c2:dd:
b2:d2:1b:28:84:ff:e7:dd:76:6c:a9:eb:10:48:28:
29:52:1a:cd:4a:c4:23:4a:4f:96:d3:56:db:27:58:
6f:35:a4:92:00:b0:23:a5:4f:95:26:04:cc:a5:3b:
d2:6a:6d:3d:45:c9:4e:61:f8:8f:24:3f:04:42:c6:
d4:97:98:d3:28:4c:eb:5f:d5:a1:84:1e:27:e0:b5:
de:b7:5e:60:1c:a3:7c:21:78:7e:19:c8:84:81:62:
94:20:ee:79:b9:08:b6:e2:de:31:09:fd:0f:93:28:
e1:7d:d4:e1:3f:b5:88:ff:9c:c9:ee:8f:4f:cf:a0:
7b:4d:7e:36:d2:4e:78:23:b7:37:49:7a:99:24:c3:
4d:5f:8a:6f:43:ab:11:b7:d3:f8:0b:46:e9:45:f1:
95:b1:59:d4:78:0b:77:ba:3a:42:ad:a9:bd:93:e6:
9e:41:a7:bd:18:fa:17:a7:2b:a3:ed:05:e8:ae:65:
00:c4:33:4d:73:ea:d9:e2:9f:fc:d9:f8:bc:e8:9e:
aa:34:16:e6:4b:f1:9b:89:94:3d:6a:d8:75:1e:d2:
6e:da:b2:00:cc:db:ad:1b:ac:c8:fc:96:8e:b1:86:
b9:40:a0:a2:4b:d8:bf:9c:45:54:1b:70:ce:1f:4d:
e3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:12:16:28:E9:9E:2E:0D:48:10:75:AB:76:7A:9C:9E:CB:1A:8D:8E
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e9:62:10:04:4c:23:90:98:02:67:67:7c:fe:3b:06:0c:bb:
54:30:20:e1:f8:e1:a1:ff:c3:dd:62:bd:78:b6:81:90:3b:74:
5c:45:73:f2:06:c7:b6:a5:ed:a2:3a:2a:90:eb:65:fb:59:a3:
b3:b8:4d:25:c5:ee:ee:94:91:82:c8:b0:12:f0:db:0b:3d:16:
11:b3:3d:24:08:32:d6:9c:20:48:10:7d:65:e7:84:84:64:1e:
95:74:27:dc:d1:7d:9b:48:33:49:f7:1b:ab:5f:9b:fb:f3:11:
9b:01:8e:18:d1:83:ab:87:18:ec:ad:5a:06:a7:ea:86:2b:91:
80:26:c3:4c:6c:8f:96:a1:fa:90:25:ad:e3:fb:17:37:e0:1e:
15:a2:f9:fd:a4:b5:dc:05:6d:6b:cd:22:dd:1e:04:7d:72:8e:
23:8e:f6:56:d0:25:dc:ab:c4:52:26:46:fd:cf:44:9f:ce:1b:
9e:cf:c8:e1:bf:94:04:95:13:1e:d4:08:26:45:54:1e:da:55:
0b:a8:8e:9c:f4:21:f5:ba:41:71:18:7b:67:fa:59:d5:63:b4:
f8:31:83:a1:e6:be:59:85:4e:81:b5:c3:cf:5a:be:26:a9:1d:
b2:d2:84:bc:4f:9c:cc:3f:24:16:07:08:75:e0:6d:a5:d7:11:
ae:3f:c0:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:06:02 2026 by rpki-client