Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: QV7E9SbhN2Dgt5jKcRs/IX2FTJLEp7st/dZE2e8euxY=
Subject key identifier: DF:A4:56:12:EF:B7:21:41:93:36:5B:CC:3B:4F:C2:53:8F:3C:16:63
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 01A0C746300650ABD56A8325F1BBD5557C1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 18FB
Signing time: Tue 22 Sep 2026 04:01:00 +0000
Manifest this update: Tue 22 Sep 2026 04:01:00 +0000
Manifest next update: Wed 23 Sep 2026 04:01:00 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: J8WF/ijgbPlad8z7cvkxq+tbK0gfKuF7DCp1o3qaCiE=)
2: r2j9KB_d9qlo6DM4VIzlnk-FGnA.roa (hash: EzpW7vs8EG39ibzlPvK/9rhPpBxeklGzxbYhWxFufes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:46:30:06:50:ab:d5:6a:83:25:f1:bb:d5:55:7c:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Sep 22 04:01:00 2026 GMT
Not After : Sep 23 04:01:00 2026 GMT
Subject: CN=dfa45612efb7214193365bcc3b4fc2538f3c1663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:52:b2:ba:f3:5d:f7:0e:b5:26:38:c9:95:45:
98:38:7a:0d:93:3d:26:79:3a:7f:c9:62:2b:bb:57:
98:bd:3a:8c:a0:c1:ff:6a:6f:f9:93:b3:d6:7c:1c:
70:f0:b4:a7:cb:cb:01:aa:cb:30:95:24:7c:a1:6b:
d0:a0:0c:c9:35:16:05:af:e6:0b:4c:d0:69:84:98:
14:eb:66:c1:e6:de:f9:ee:2d:a9:05:99:9f:98:96:
2c:e9:d0:a5:c8:84:5d:46:25:7e:f7:c3:0c:a9:70:
36:47:d2:3e:91:19:45:0f:8c:0e:1e:26:c6:fd:7c:
af:c3:ae:90:f0:43:7c:c4:44:59:99:d8:8c:f9:6b:
67:31:7d:6b:fa:c3:fd:a1:18:5e:4f:14:85:c6:69:
8a:32:48:62:94:3e:65:d7:af:5c:89:73:55:86:d8:
c9:e2:da:f4:c3:ee:f5:0a:b7:b4:93:09:8d:f1:40:
03:99:eb:c6:13:3d:a4:5a:6a:e5:c7:21:a3:bc:35:
7f:30:33:5b:9d:76:fb:13:5a:cb:3e:03:17:9c:52:
18:66:0b:df:4b:90:38:98:90:91:06:24:e9:3c:86:
1e:61:4d:10:fa:cc:6d:09:4f:09:93:f1:c4:5b:6f:
b4:5b:60:63:ff:a2:77:56:9b:d4:ac:ed:cb:0a:0e:
dc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A4:56:12:EF:B7:21:41:93:36:5B:CC:3B:4F:C2:53:8F:3C:16:63
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7a:f9:a7:16:14:3d:3b:9e:3c:73:b1:94:25:ee:15:69:2b:
87:dd:29:7a:96:0b:91:8b:40:c7:c2:67:2d:70:91:26:a5:7d:
c5:22:3a:36:58:f7:c3:b8:9f:15:7c:cb:6d:4b:38:9d:f0:f8:
ba:b4:f0:c8:ae:26:0f:40:b8:d3:77:01:2a:96:c0:e3:0c:2e:
cb:83:94:83:74:71:a4:1f:19:1b:03:e0:57:ef:74:54:64:a6:
f4:d0:83:d8:20:56:36:16:4a:a8:e2:2c:8f:79:55:3e:dc:35:
e1:e9:06:13:57:39:fa:31:aa:92:c4:e0:98:78:ac:b7:c9:a3:
d9:60:55:cb:00:be:0f:00:3d:51:59:14:80:73:5d:92:d4:2a:
37:bd:0c:aa:10:1e:56:53:75:dd:4a:0d:aa:07:0f:ba:61:d8:
aa:4c:01:dd:3b:32:67:45:50:c9:2b:c2:21:4c:a8:9f:60:44:
f6:c8:e5:7c:75:f3:17:06:30:43:09:25:1c:86:67:61:4a:76:
3d:9c:db:59:b9:11:90:36:b0:cd:ea:58:fb:af:89:55:44:d3:
8e:8f:c7:97:d8:cb:7f:26:e9:b6:50:09:7c:40:0b:24:0c:e4:
91:5b:91:3a:25:5f:bb:91:2b:d0:7b:23:4d:76:a8:31:d3:cb:
6f:18:40:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:54:32 2026 by rpki-client