Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
File: 4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json)
Hash identifier: +SX4I5l9T+EiZJkYBJ/Bwaniyi+keus4DggcSBPAcJM=
Subject key identifier: 40:3A:3E:FD:47:AA:CF:24:AC:E9:58:8B:F2:30:95:87:61:00:92:3E
Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
Certificate issuer: /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Certificate serial: 01A140832629AA705C971CFD3EF6BEC1FB6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
Manifest number: 1A34
Signing time: Thu 15 Oct 2026 17:01:39 +0000
Manifest this update: Thu 15 Oct 2026 17:01:39 +0000
Manifest next update: Fri 16 Oct 2026 17:01:39 +0000
Files and hashes: 1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: oPlElUtHZ1ChvnSwrz1Fcltnd3cHC7cbKdvpqkju8Gc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:83:26:29:aa:70:5c:97:1c:fd:3e:f6:be:c1:fb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Validity
Not Before: Oct 15 17:01:39 2026 GMT
Not After : Oct 16 17:01:39 2026 GMT
Subject: CN=403a3efd47aacf24ace9588bf23095876100923e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:f9:f8:b4:77:f6:4f:d9:f4:aa:3b:30:c8:
1e:e4:8e:f9:18:c4:67:c0:67:bd:db:85:05:08:25:
c4:37:33:9f:50:0c:40:c9:5f:1b:bd:36:f3:f6:93:
29:07:d1:02:b6:57:9d:1b:3c:ee:cb:ef:78:49:09:
f1:73:64:74:83:c7:df:d0:fa:6c:23:76:92:c4:bd:
51:20:01:a4:73:8a:16:85:dd:9e:96:a7:14:13:53:
9e:77:36:14:0f:fb:b2:7a:6c:bb:aa:94:59:4c:07:
63:8f:4e:55:3f:e1:8a:79:bc:b6:82:72:d1:e7:39:
06:32:32:b7:03:58:0a:49:61:7d:19:fb:e0:63:4b:
31:33:16:a5:bc:0c:9c:b7:3c:1c:f7:c1:21:08:09:
b3:1f:09:1b:2c:08:b8:99:fa:d8:ab:fe:17:43:6e:
95:8a:8a:fd:56:bd:72:24:5f:9f:70:16:b5:4a:61:
f4:ba:48:64:44:94:0a:79:b0:21:70:51:7f:84:9f:
b9:7c:f5:85:2e:c9:2c:bc:c5:92:dd:8e:89:c9:5c:
08:12:cd:f4:90:b5:d0:55:84:8f:59:bf:c7:6d:ed:
d0:31:2e:b1:d9:57:6b:20:79:00:3a:8b:de:a0:46:
d4:33:4b:cd:8b:45:75:57:49:bc:06:b7:8d:66:1c:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:3A:3E:FD:47:AA:CF:24:AC:E9:58:8B:F2:30:95:87:61:00:92:3E
X509v3 Authority Key Identifier:
keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:61:1e:28:e1:9c:d3:97:34:7a:c0:40:07:04:76:08:71:ef:
b0:99:11:81:3a:9a:de:b8:c2:f8:3f:7e:d7:cc:8a:cf:bc:6f:
4b:ad:60:3e:a2:2e:5d:1b:6f:57:6a:08:56:3c:a1:b3:7c:cd:
2b:07:be:c2:0b:b4:98:58:57:4c:ce:a9:ae:66:ad:ca:1b:fc:
1c:e0:14:8b:44:ab:03:c5:b7:2b:ba:93:88:02:89:de:75:a4:
ab:70:ba:92:24:18:f5:23:7c:7f:0d:1e:3c:fc:6f:ea:b3:4c:
af:d9:4f:ed:23:64:fd:1b:5f:28:f7:47:83:cf:01:0e:2c:45:
e5:92:bf:02:41:fb:ab:7d:1e:02:e0:4a:31:80:c1:5a:4e:bc:
d1:49:b0:52:ed:0c:08:dc:be:9d:aa:1f:2a:01:06:4c:bd:bf:
5d:54:dc:49:c2:4e:a8:2b:6d:ba:7c:dd:85:8d:bc:20:4e:50:
1d:0a:b0:5d:ee:c5:ba:dd:71:97:eb:9e:57:40:53:86:79:53:
ed:b0:7e:51:12:57:5b:0c:ef:ad:9b:f5:00:48:3b:0f:0c:4a:
20:61:ec:77:a7:dd:43:88:56:8d:3f:2c:33:8b:17:3d:02:0d:
26:1b:54:3f:36:cb:f2:73:bf:7d:46:ea:d5:3e:17:cb:07:2c:
22:ea:14:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:52:48 2026 by rpki-client