Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: TDZJKTW5uF6ARTJtj0ozrxiU71FRc8mByk0l3YUpWKc=
Subject key identifier: DB:65:3B:39:76:94:08:1D:1E:9C:D3:3B:C7:B4:8D:11:31:3E:C5:8D
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 01A0BFC37087C43722F3C0CEE3174154E1AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 131E
Signing time: Sun 20 Sep 2026 17:00:51 +0000
Manifest this update: Sun 20 Sep 2026 17:00:51 +0000
Manifest next update: Mon 21 Sep 2026 17:00:51 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: n0tPgT9XS+VPgpKELQ7QkmmwiiwJ/Nt31ooIfyPtJDY=)
2: uTD6khWcd31ZzRZAtfj7o4AtIHw.roa (hash: 69oOJR8ncC7sjtYVQ8SZHCT4Cq2KZtCn6uWehRleXPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:70:87:c4:37:22:f3:c0:ce:e3:17:41:54:e1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Sep 20 17:00:51 2026 GMT
Not After : Sep 21 17:00:51 2026 GMT
Subject: CN=db653b397694081d1e9cd33bc7b48d11313ec58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:1e:8d:14:30:91:05:20:8d:c3:7f:d7:bd:
7f:fa:82:a5:7f:f3:61:e6:7d:68:37:4f:12:1a:65:
07:8c:54:93:6e:ff:8b:5c:b0:6f:f5:4c:b1:69:a8:
38:c8:fd:1a:77:7d:30:1e:bd:e1:6a:01:a3:87:95:
5f:ad:22:39:40:f6:ca:fa:b8:f2:b4:60:6f:8e:cb:
e6:3d:cf:95:0b:68:b4:4b:15:25:07:3f:ab:fe:7f:
61:e7:0d:fb:e6:40:dd:d6:19:3c:8b:f5:45:09:69:
69:7d:8a:f4:a7:ec:bf:6d:9d:d8:be:6e:99:32:b8:
f1:39:5a:e7:7c:b0:1a:a8:2f:aa:cd:07:0e:a2:4c:
80:eb:80:f3:2f:28:1d:ef:44:7b:48:db:40:ff:1b:
00:16:25:bf:a6:63:49:2f:b2:65:4e:bc:bb:b6:08:
a2:52:4f:45:3a:00:9e:79:99:52:58:23:e8:9f:3e:
c7:18:70:68:2e:c8:b5:cb:e7:a2:18:15:6e:f1:b1:
72:a8:61:5f:62:f8:a9:cf:5f:e1:fc:3b:95:a2:fe:
f5:02:87:ae:d9:fb:94:48:47:45:5f:b3:de:0a:f6:
82:d5:4b:61:3b:d5:6f:83:0e:32:e1:1d:77:e1:d2:
bc:55:f7:97:e8:00:d7:4a:08:7b:5b:f7:ab:96:68:
01:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:65:3B:39:76:94:08:1D:1E:9C:D3:3B:C7:B4:8D:11:31:3E:C5:8D
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ca:3a:0b:89:7e:2f:6b:8c:20:5d:88:09:2b:dc:87:34:44:
97:aa:57:5d:a3:ce:32:bc:7e:be:94:b8:22:f2:c6:ab:41:92:
9f:6c:b7:b9:6b:16:43:1b:77:56:a2:76:59:1b:20:b1:3d:e7:
35:7d:9a:b1:91:67:03:9a:87:7b:20:af:30:ae:99:8f:e7:0b:
80:07:ed:09:70:63:69:e7:34:f5:20:e4:5a:1f:fb:6b:25:e7:
f0:45:bd:dc:f6:02:56:b9:84:7c:ba:dc:dd:ce:ab:e4:fe:e8:
14:e1:a1:0c:c3:54:e3:cf:57:47:e8:ec:29:c0:2f:fd:50:2c:
86:84:6f:c2:cf:f3:23:69:f7:54:19:2c:05:04:e3:3e:d1:41:
32:f0:b6:21:fe:29:dc:fc:e2:f0:15:f2:6b:d7:9d:98:3c:fe:
38:2a:90:1d:55:11:41:f3:10:63:86:b8:bf:ee:4a:22:e3:e3:
19:b1:60:00:0d:6d:bb:ec:d7:06:47:93:16:fa:cf:d2:82:81:
f4:97:f8:d8:bb:1c:1c:3e:4d:42:00:99:f5:d8:34:5b:de:53:
29:00:86:8a:11:38:c5:92:48:03:4b:cb:3f:bb:f9:e0:3a:8f:
5c:17:ee:bd:0a:a2:c2:65:04:76:55:7a:88:94:8b:30:df:f4:
c9:ec:e8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:07:56 2026 by rpki-client