Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: 9+tJOGMiHTSz8HaAeVmfD2EYcA11TsXJVGV34mag5mc=
Subject key identifier: AF:0D:9C:3B:E7:81:57:6F:EE:AD:F5:F9:CE:CA:41:7C:19:C0:66:6B
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 01A0DB047EB988BD62EEAB83992E90E2C9BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0E9D
Signing time: Sat 26 Sep 2026 00:01:39 +0000
Manifest this update: Sat 26 Sep 2026 00:01:39 +0000
Manifest next update: Sun 27 Sep 2026 00:01:39 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: WQVmxoOfdG6P/SXQUAZd+mkGbGg+Ko5k8fYXUFV8ZoY=)
2: 6c0GmPSIo0E5XPLL6BcvGXFoeoU.roa (hash: XKGNTxIctVAHlMjqMo1n+V2kjvQsJG2Ze8aGQf0oQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:7e:b9:88:bd:62:ee:ab:83:99:2e:90:e2:c9:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Sep 26 00:01:39 2026 GMT
Not After : Sep 27 00:01:39 2026 GMT
Subject: CN=af0d9c3be781576feeadf5f9ceca417c19c0666b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:9a:7d:4e:cc:49:33:fc:44:ab:b9:70:bf:
d1:b4:e7:2a:be:d6:aa:21:85:6b:68:be:62:4c:70:
a3:7f:9c:df:75:fc:71:32:42:ac:10:64:cc:b0:c0:
76:9e:2a:95:85:a0:4e:fc:5f:a3:91:90:f9:e5:10:
df:03:4c:5a:6b:e7:8d:99:5e:2e:2b:cc:76:af:61:
5f:5f:60:d0:de:73:04:f0:bc:ce:6e:14:bb:4a:9d:
f8:6b:f3:7e:98:ef:6a:21:d8:a6:87:51:2e:0b:7a:
41:59:01:dd:fd:2e:c4:2c:f7:d7:06:77:ab:83:37:
ce:4d:de:fc:96:83:9c:68:11:33:dd:f1:dd:dc:cc:
6a:69:e5:4a:cc:26:98:3f:fd:58:4b:84:b0:bc:ac:
59:0b:fd:16:66:d9:8e:7e:59:8a:0a:14:59:bd:cd:
0c:75:0e:d6:e8:6a:49:af:16:53:d0:c5:e4:83:7b:
3b:9a:b9:a7:ef:97:00:b8:66:08:89:3f:5f:16:73:
3e:67:5b:c4:ab:b0:4d:d9:07:86:6d:d4:78:7c:d8:
02:5c:11:ad:bc:00:7a:4d:dc:7a:42:65:ff:ac:a9:
f3:dc:55:8e:6d:55:b7:61:3c:ab:64:d9:8e:13:40:
f1:ab:aa:c7:a9:96:ea:e1:66:4e:75:74:30:59:78:
e0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0D:9C:3B:E7:81:57:6F:EE:AD:F5:F9:CE:CA:41:7C:19:C0:66:6B
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1a:18:de:12:fb:b6:60:52:32:9a:0f:be:ae:1f:bd:e0:25:
a3:9a:1a:40:d6:46:0f:5d:3d:c6:19:ce:9c:74:6b:3c:22:3a:
4f:f1:8b:e6:2e:54:3b:20:e7:2b:97:cd:a6:21:1f:a7:1d:0f:
d1:d9:3d:ec:85:46:25:41:73:8e:8f:56:19:4d:58:c9:17:29:
a8:f5:73:43:3e:4e:25:4f:86:14:f0:de:99:c3:3a:7b:a6:80:
6e:e6:f1:a4:02:f0:21:31:1a:07:95:d5:53:d9:69:f2:f0:7f:
fe:b9:23:f6:f7:95:b3:29:e3:6d:8b:fe:6c:5b:d2:b0:26:49:
5d:be:05:84:4f:2c:9f:1d:c6:51:af:67:59:45:34:49:50:d8:
dc:6f:55:eb:81:7f:2a:7a:a8:30:08:ec:c2:c2:d5:70:64:be:
93:52:e2:2d:00:a3:35:4c:ae:a6:07:98:da:a9:9e:64:54:2e:
ef:52:87:a2:75:40:b5:64:21:04:38:07:cd:81:ea:77:24:ea:
e8:c3:b4:55:20:db:c1:2b:58:7d:d8:b8:bc:12:cc:20:eb:09:
d7:6f:10:71:d4:8e:02:39:47:e8:10:7e:41:15:c8:af:5c:e6:
1a:bb:ea:98:96:21:05:6c:bd:25:f7:26:5c:5c:92:58:ca:da:
21:bf:57:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:44:56 2026 by rpki-client