Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: uAKYpnt77Jh52vAndc3UQ8dxKbLckYIhHuZ5KO2DNfY=
Subject key identifier: 2B:44:DA:CE:B2:8A:8F:F5:44:6B:D2:F3:56:94:D0:BA:64:F2:85:0D
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 01A0DB724B91D347E8AFDCF720BF727AA0F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 1A7B
Signing time: Sat 26 Sep 2026 02:01:35 +0000
Manifest this update: Sat 26 Sep 2026 02:01:35 +0000
Manifest next update: Sun 27 Sep 2026 02:01:35 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: E0cIIbFxC7NUEbBN551YLzspSkGZKfBv/XwyR8sLRJQ=)
2: CpV5ifZcjPyGOZZo5Kthc-0aYIE.roa (hash: lgb25S95umOL8YFj63EWLcLTY42lwBMqoGZsvrLzBnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:4b:91:d3:47:e8:af:dc:f7:20:bf:72:7a:a0:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Sep 26 02:01:35 2026 GMT
Not After : Sep 27 02:01:35 2026 GMT
Subject: CN=2b44daceb28a8ff5446bd2f35694d0ba64f2850d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:28:da:d2:e5:56:bd:d8:71:28:ca:40:fe:19:
93:08:43:bd:45:77:de:1e:4f:fc:60:f5:b4:45:8f:
14:b7:6b:1d:7d:97:57:a9:32:4d:49:5f:1d:a0:7f:
30:70:92:c6:58:04:51:a6:2e:3e:4f:5c:6e:53:0c:
8a:07:34:9f:ad:ed:d3:e4:61:2c:c8:52:a1:fa:4b:
f6:27:15:1f:89:fc:36:19:30:e2:c1:4e:ac:61:fa:
8b:96:96:eb:64:e2:03:df:39:71:75:c2:07:86:bc:
3c:0c:fb:07:ad:68:69:37:97:0b:ef:85:08:b8:b8:
0d:cc:b2:ae:e6:76:3b:40:28:e1:5e:63:a8:db:f8:
c5:62:a4:78:37:c5:f4:4f:8e:5a:95:30:5a:9a:95:
3e:b5:2f:f8:d1:2f:c1:1a:21:2d:48:01:7a:2f:8a:
04:18:d0:e7:db:fd:49:8e:da:00:70:91:e3:aa:96:
25:c7:f2:12:e0:40:4a:95:2f:f4:6b:d7:11:df:1a:
87:73:94:69:90:f6:5c:33:ba:8a:d3:99:61:b4:1c:
b4:e1:df:2a:09:bc:63:04:ed:9e:2f:60:94:36:78:
5f:9c:4e:5c:c8:83:1f:31:86:74:43:05:1b:ac:3b:
9f:eb:fb:14:6f:6a:e5:5b:b1:f3:f6:5b:88:f7:69:
b2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:44:DA:CE:B2:8A:8F:F5:44:6B:D2:F3:56:94:D0:BA:64:F2:85:0D
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a6:0f:3a:3c:34:44:15:84:16:3d:41:0c:1e:b3:8e:41:ac:
94:21:36:a9:bf:7d:e6:cc:bd:a5:8c:6d:1a:65:a5:6d:eb:34:
31:61:51:34:dc:94:33:fb:96:3b:f7:fd:27:49:05:c6:a2:f7:
38:92:b6:d4:d7:e9:0f:a7:5f:98:ff:a5:8d:44:e7:ab:a6:67:
f4:d0:50:22:e2:d1:79:c9:01:1a:6a:b3:b1:0c:a3:54:d6:b0:
ea:5a:3c:f0:04:be:91:5d:da:8e:21:37:7b:ef:d0:13:5c:f1:
ac:e8:ec:39:25:5d:d3:ef:1b:59:9b:f7:5c:96:3b:5d:0a:6a:
9e:b9:d1:5e:d8:e2:3e:3d:8f:13:a0:21:9e:8f:2c:f7:04:64:
4f:59:4f:03:5f:93:c2:63:6f:c8:c9:a6:ab:d2:1a:22:03:77:
cc:46:08:a3:30:68:5f:9c:8f:7e:5c:e4:31:b6:05:5b:82:1f:
17:89:9e:10:1d:4f:f1:5a:c4:7d:38:b1:05:86:fe:74:c0:12:
65:5d:87:e4:2e:f9:d0:c2:11:fb:ed:db:51:09:ec:22:5e:f2:
75:5c:1d:e8:7c:9b:eb:ff:6d:b8:f6:24:c6:a3:85:f8:ec:b1:
80:fe:6f:c4:dc:31:c7:c8:c7:35:36:0d:5c:09:18:c0:6a:e9:
f0:45:52:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:16:43 2026 by rpki-client