Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier: st5MTBWiiuff0/d+u1qKiNruSI1cauQk5rMKf5HFZGA=
Subject key identifier: 6B:FA:54:72:F7:1B:DF:3C:A8:65:5A:32:05:E3:81:C1:EB:6E:37:CA
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial: 01A1DF83656751EF94C3DBCBC1589D7AD30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number: 1AF8
Signing time: Sun 15 Nov 2026 14:01:32 +0000
Manifest this update: Sun 15 Nov 2026 14:01:32 +0000
Manifest next update: Mon 16 Nov 2026 14:01:32 +0000
Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: hQTWDW7NuZLIsGYOQALEn6Ki8oSpVv1tpDRN9YRUW8Y=)
2: SZ7uQjj18-cU4bIpWv5dSgIvGBE.roa (hash: rmE3xiiuA8FInWGbe7SdLUBpAe5mfXQkxmyusGShZtQ=)
3: XphaguuWFSP8UQVU9jupgKQKPTw.roa (hash: 7KRxLds07r+kpPQbo12VWuWgRVl+sWP2XMsAOWnoAcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:65:67:51:ef:94:c3:db:cb:c1:58:9d:7a:d3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
Validity
Not Before: Nov 15 14:01:32 2026 GMT
Not After : Nov 16 14:01:32 2026 GMT
Subject: CN=6bfa5472f71bdf3ca8655a3205e381c1eb6e37ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:25:9f:18:29:38:98:6f:ae:9f:a8:86:d5:3a:
ae:f0:12:47:36:3b:12:c0:b5:55:a5:70:c3:a2:a5:
f3:9b:0d:39:fb:82:8b:1a:de:9a:2d:36:e3:e3:79:
68:31:72:54:af:2a:ce:1c:1b:de:1f:31:b7:23:5a:
1f:b4:4a:26:fc:85:81:2d:8a:7c:b4:d2:3e:51:51:
42:ab:6b:06:36:0b:1d:2f:c0:cd:93:e7:0c:55:c4:
93:53:75:0c:2b:d2:33:d7:38:79:72:ac:e0:76:23:
4b:07:90:f2:63:52:48:32:be:9d:10:c6:cb:0e:7a:
45:25:70:0d:49:eb:51:21:fe:31:ef:8b:e0:0b:b3:
4b:b8:f7:c1:f8:7d:ae:be:f3:b1:4b:fe:68:3c:c2:
9e:d3:0c:46:fc:f8:b3:59:94:9e:1a:67:d6:72:0b:
d3:d9:ca:76:43:7b:ad:fd:db:00:cb:b5:92:37:e8:
40:f6:c5:4e:05:28:2a:b0:1a:39:ab:74:21:1b:9f:
6e:5b:95:8b:bf:c1:12:d5:77:e4:e1:ed:f8:87:3f:
ec:ae:14:5a:7e:ee:88:a7:d9:6b:6f:5b:aa:d8:49:
25:1b:d0:fa:9c:51:9f:8e:9d:f1:15:61:c9:ce:77:
0c:8e:d0:8a:c5:9e:3f:0e:6f:15:8a:d0:4c:35:d8:
91:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FA:54:72:F7:1B:DF:3C:A8:65:5A:32:05:E3:81:C1:EB:6E:37:CA
X509v3 Authority Key Identifier:
keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:a8:63:33:2f:f6:76:63:15:31:cd:e8:0e:35:2e:ba:af:a3:
8c:28:23:c1:10:8c:03:4e:83:07:d2:76:ed:b5:c6:2e:f2:67:
a9:4a:8b:be:c8:9f:a9:da:9a:b7:9b:01:2c:4a:dd:d3:e4:dd:
8c:d8:75:1f:0c:e4:27:f3:0c:a9:77:22:c9:b6:45:31:ac:ab:
d0:09:c7:de:01:43:39:9f:11:b2:34:3b:54:fc:98:d6:d0:e9:
c7:e3:51:1a:7a:85:a5:63:b2:04:8b:d5:b0:d7:51:8a:9e:b8:
e7:c3:0e:c3:0f:8d:f0:30:fc:45:11:4f:19:ca:d1:2e:8c:f2:
82:41:e9:3a:7a:93:26:37:3d:97:26:58:d9:70:5e:9b:7b:e1:
ed:4f:ac:13:b0:b2:e8:23:ca:fd:3c:d0:43:81:b1:c7:da:b8:
a4:b2:ca:99:b4:46:f0:49:c0:27:60:cc:13:35:9d:91:b7:2d:
04:81:db:7a:d2:eb:21:74:ee:f8:97:9e:1c:4c:ea:f7:5a:f2:
80:07:0b:08:ae:b2:a8:5c:b7:ee:67:13:43:9d:25:7f:f5:2b:
95:4d:c7:2b:8d:61:66:1e:9a:69:5c:5b:eb:17:b6:3d:ae:f8:
5e:af:ca:60:5d:ad:e9:1a:0a:97:80:73:01:d7:92:af:d4:ff:
7e:65:da:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:43:58 2026 by rpki-client