Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier: sw92GYZRKq+fZCZ3rTnJeFemfex4YWD8Zl+z/Tx/aog=
Subject key identifier: 94:DF:B3:28:67:71:58:00:FB:84:44:EF:61:D0:0E:77:C6:E2:E8:0B
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 01A0C5FCEDC2B1A8B9978CE45D52F03A9332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number: 0FBE
Signing time: Mon 21 Sep 2026 22:01:22 +0000
Manifest this update: Mon 21 Sep 2026 22:01:22 +0000
Manifest next update: Tue 22 Sep 2026 22:01:22 +0000
Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: kg1077j2elNwQDe/eOuvAur6PyPOaqKX5mLjEi6qQO4=)
2: QtPhnyLsRRN8U6hpcPXp4Z0oWqY.roa (hash: i0nu2P6NxLQ5ERHa8d6GR72neeBYjpf7KkNPNvBe0Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:ed:c2:b1:a8:b9:97:8c:e4:5d:52:f0:3a:93:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Sep 21 22:01:22 2026 GMT
Not After : Sep 22 22:01:22 2026 GMT
Subject: CN=94dfb32867715800fb8444ef61d00e77c6e2e80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:11:91:85:ed:6e:50:fc:d8:54:5b:4e:e1:
15:85:f5:d6:5f:56:c0:9e:f3:6f:b1:13:39:a2:3d:
d8:70:94:9c:c7:75:47:57:99:01:bd:3a:ca:e5:26:
34:47:b0:f1:c2:9e:12:c9:a4:51:6a:10:87:ef:a5:
57:e3:7e:ed:b0:2e:6e:5a:53:b6:8d:bd:3c:29:7b:
6e:64:2e:3c:01:bb:f1:7d:26:a8:25:fe:6c:b0:ac:
6d:71:6b:ca:56:96:c9:43:f2:45:a8:cc:11:82:03:
38:52:68:d8:b6:b1:dd:e1:64:c7:2c:92:b9:71:44:
85:5e:ea:91:66:41:26:6b:0b:00:7e:a1:94:3b:c5:
0d:9b:a7:ab:aa:3f:22:de:d8:c9:9d:52:10:87:ff:
72:f1:2b:73:bd:64:c8:9f:e8:6b:86:46:95:9c:96:
30:89:05:30:ce:21:25:98:4e:ba:79:a8:9e:c8:20:
2b:51:c9:b8:78:62:60:d3:1e:e0:79:8e:00:62:43:
e2:e2:06:5b:1c:ec:65:df:04:61:f7:58:67:42:b5:
ac:3a:14:c1:98:54:d1:1b:c9:1c:5d:96:08:c0:d3:
2e:80:d5:05:ca:df:ec:ff:ae:52:48:3d:ca:8f:9b:
31:d2:73:33:82:25:fd:50:b4:00:d0:74:f0:8a:f7:
0e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:DF:B3:28:67:71:58:00:FB:84:44:EF:61:D0:0E:77:C6:E2:E8:0B
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e9:ab:35:91:00:f6:c4:18:f1:2e:b4:db:79:be:ce:55:4b:
c1:d8:ed:7c:77:c8:f8:e4:07:aa:b2:ba:ed:ed:ad:d7:aa:0a:
c9:a1:05:f9:ed:98:33:e6:70:4a:4c:27:0a:af:80:30:68:fb:
b4:f1:3d:05:8b:37:8e:85:34:a5:ce:64:e7:a8:24:fd:86:6c:
6c:14:cf:6f:7c:63:74:75:b1:37:0c:88:25:c3:ef:af:92:75:
2e:4f:c7:49:bc:8e:16:a3:93:50:67:76:ea:cc:49:d3:56:59:
ae:d5:34:eb:fd:1a:89:34:16:0d:7d:b3:a0:ae:0c:8a:bf:3d:
17:1d:e4:be:cd:55:5b:a4:bb:6d:17:41:6e:27:c6:94:fc:b3:
b2:59:c3:5d:04:0c:b1:c9:ba:23:12:75:90:b0:33:8b:7a:1c:
1a:b3:e9:fa:fb:2c:e1:fd:0e:95:f9:2d:e9:0a:76:9e:49:6e:
f3:b9:1b:44:19:44:3e:df:0d:b2:74:96:21:ed:8b:2d:77:30:
39:72:0a:58:05:49:d2:a7:80:aa:d4:17:41:15:2b:32:b3:03:
2d:59:26:b9:58:9f:54:c3:87:be:06:9c:2b:9c:dc:3d:4a:36:
22:0e:e4:b2:dd:55:94:8d:5a:41:77:3b:d2:ff:ea:3c:50:b1:
7d:df:72:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:50:32 2026 by rpki-client