Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: 8L+ObFUxY9iezZzfI8jUQX9lVMuPcbx+9YJexXdG8Aw=
Subject key identifier: D8:88:A2:BB:0E:8A:E0:B1:62:35:EA:17:1B:E5:B8:96:37:25:76:ED
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 01A0D68288FFE9A880A33930DF37934841C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 0B35
Signing time: Fri 25 Sep 2026 03:01:14 +0000
Manifest this update: Fri 25 Sep 2026 03:01:14 +0000
Manifest next update: Sat 26 Sep 2026 03:01:14 +0000
Files and hashes: 1: 1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa (hash: WqRlSVx1Vu6h+ixUdX0cx9Mi9fCqLKMKSDgwbsVbLZ8=)
2: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: 1IZSrsHXI+eKPMUFBMiGtLFqSymHkMoM8ILc1w8ogTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:88:ff:e9:a8:80:a3:39:30:df:37:93:48:41:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Sep 25 03:01:14 2026 GMT
Not After : Sep 26 03:01:14 2026 GMT
Subject: CN=d888a2bb0e8ae0b16235ea171be5b896372576ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:81:e5:9d:74:e6:6d:e6:9c:12:13:9e:67:
82:04:ef:15:25:57:6e:aa:5b:8c:22:50:9d:de:d9:
e6:ab:6a:ff:47:11:ba:02:d7:8d:ae:c9:1d:9b:b9:
4e:ae:bc:7a:a2:91:f1:40:4a:d1:4e:b7:6f:2f:39:
4a:bd:96:b6:f7:ea:c6:68:b2:98:09:84:ad:d3:80:
83:e7:a3:a9:db:0f:2a:ee:87:a7:ad:91:d9:98:1b:
03:ba:14:73:74:0f:17:6f:ea:f9:16:a6:b2:1f:65:
9b:47:48:59:a7:ea:ad:75:48:42:47:f0:b0:a4:c0:
59:37:9d:7c:07:68:d7:f0:2a:92:74:aa:c0:af:7b:
dd:bc:10:41:b2:7c:56:95:08:8d:5f:b2:d8:37:47:
44:cd:d5:cf:25:0b:9f:c5:b8:dc:cc:f7:9b:7f:e9:
88:a9:cf:05:dd:82:f2:68:94:32:83:a5:a8:9c:ab:
a1:1b:0d:77:79:25:71:71:df:1c:40:49:4e:d5:c5:
92:77:b9:3f:20:4d:f5:2c:db:54:80:85:9f:3b:4c:
07:e2:b7:73:d3:41:0f:3b:06:82:9a:c8:7d:a8:ee:
38:a7:f8:90:57:3c:f1:7c:29:22:f2:ac:99:3e:ee:
30:74:6b:8e:28:54:a7:b9:3d:59:3c:a6:25:29:d7:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:A2:BB:0E:8A:E0:B1:62:35:EA:17:1B:E5:B8:96:37:25:76:ED
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:5a:87:3c:db:43:f2:13:16:d1:bd:9e:14:de:e7:09:fe:7c:
00:6d:a0:4b:b6:9b:4f:39:b4:fa:22:14:f9:20:fc:c2:6a:40:
2c:b5:00:94:e5:21:72:03:d4:5b:a1:94:2c:0d:62:af:41:dd:
8d:c4:fd:7b:ee:2c:1b:b7:e7:eb:d8:5a:7f:97:34:23:1d:8f:
68:45:d2:e5:25:b0:b2:13:e7:d5:02:de:3c:40:5e:47:3f:d5:
fb:cd:8a:b4:d4:d6:d0:21:3f:0e:24:4a:99:3a:de:0e:04:68:
ab:7d:6a:9c:08:2e:c3:80:5e:95:0d:dd:b2:1d:5b:41:48:57:
48:e8:35:c8:83:d7:0c:d1:b7:f7:89:3b:a9:70:2c:30:a3:cc:
41:17:9f:bd:d4:e4:6e:48:96:b2:fc:8f:5d:16:f5:4f:09:cc:
4c:00:18:dd:68:6f:b5:c7:ae:22:cd:fb:9e:c2:9d:48:d5:c8:
20:ce:ac:b3:18:7e:62:64:d8:f5:9f:9a:f7:ef:bb:e2:f0:59:
21:40:97:61:40:c9:b5:7a:0d:ca:ff:32:b1:c7:81:2a:c2:75:
99:b2:b0:e7:73:56:bb:6b:5d:a1:34:ba:45:9a:7d:f2:f3:33:
6f:ad:ea:0e:ef:c5:73:a2:1a:ea:8c:17:f6:af:f3:45:91:0f:
e3:4c:68:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 08:00:29 2026 by rpki-client