Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier: HeamauACUVHdxXZ8f0hR76vJbmqaQ8enwnSm4WjsBzM=
Subject key identifier: 98:C7:1D:C9:B8:69:EE:43:0B:61:69:FD:70:CF:90:B2:03:CA:2D:03
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial: 01A0C39FABBC34B09FAB50F38B7C0A73A73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 11:00:16 +0000
Manifest this update: Mon 21 Sep 2026 11:00:16 +0000
Manifest next update: Tue 22 Sep 2026 11:00:16 +0000
Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: SrWyLBq6av9BXwXmmoJ1cil7g1Ne8ZIEGHKLQvUL7rA=)
2: SZ7uQjj18-cU4bIpWv5dSgIvGBE.roa (hash: rmE3xiiuA8FInWGbe7SdLUBpAe5mfXQkxmyusGShZtQ=)
3: XphaguuWFSP8UQVU9jupgKQKPTw.roa (hash: 7KRxLds07r+kpPQbo12VWuWgRVl+sWP2XMsAOWnoAcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:ab:bc:34:b0:9f:ab:50:f3:8b:7c:0a:73:a7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
Validity
Not Before: Sep 21 11:00:16 2026 GMT
Not After : Sep 22 11:00:16 2026 GMT
Subject: CN=98c71dc9b869ee430b6169fd70cf90b203ca2d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:c2:01:1f:52:b3:9a:81:fc:f7:d8:82:60:
65:42:f6:ee:b2:94:5c:df:f5:64:1a:25:72:0d:89:
45:a0:f8:94:9c:71:a2:a4:83:47:82:d9:ed:a6:31:
3d:2f:36:be:80:c6:34:5b:83:76:56:51:4c:09:27:
4e:d6:96:a3:6c:73:c3:0e:fb:25:00:c9:56:ef:49:
f3:88:6c:44:df:cd:d2:8c:72:37:4b:f5:3b:d4:34:
20:53:57:97:74:ce:7f:08:dc:e9:73:bd:f6:d5:ee:
76:cb:2a:63:94:26:2a:a7:31:3e:d4:c7:3a:c6:1e:
d9:f8:3f:c0:cc:bc:64:a2:33:fa:09:f0:f5:bd:32:
0c:1d:63:1d:08:2b:fa:32:a7:d3:fa:ab:d0:f9:c8:
9f:6b:a3:48:7a:f2:c8:cd:76:58:38:7e:88:a0:13:
1c:d6:ea:cc:0a:d2:e6:9c:59:21:8c:12:57:73:43:
7a:e4:8a:77:e7:25:38:14:26:91:c0:d3:00:fd:db:
cb:11:50:63:13:4d:b0:23:59:f0:8d:bd:39:a4:51:
d8:67:20:2a:94:07:7e:76:8c:67:54:e0:9f:4d:bc:
df:a4:78:5b:d4:b7:1c:ca:44:96:58:74:79:2f:52:
17:7e:dd:ae:c9:86:cb:68:ab:e7:72:9f:39:c0:22:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C7:1D:C9:B8:69:EE:43:0B:61:69:FD:70:CF:90:B2:03:CA:2D:03
X509v3 Authority Key Identifier:
keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e9:4a:cc:22:08:e8:b3:55:48:ab:43:d1:22:8d:62:f4:58:
e7:f1:77:8d:e2:1c:82:40:22:1e:63:6c:f5:9b:f4:fa:7d:0e:
ed:15:51:4b:46:e1:5c:f9:ff:aa:e0:2a:67:d4:08:34:56:e3:
f5:f0:85:51:eb:87:71:dc:ce:43:7b:8e:6a:f3:f7:a3:1b:12:
db:e3:a7:ff:c0:96:b9:1b:c5:3e:a3:f0:f9:35:92:b4:30:ce:
6a:f2:7b:1a:f8:6f:dc:d1:78:4e:09:58:8f:61:c7:de:9d:14:
8c:08:0a:fc:58:c1:71:a4:d9:b7:8e:26:da:09:c9:74:40:0f:
34:80:f9:75:23:90:b8:81:f2:d3:15:c6:04:84:20:52:cf:22:
20:b2:cf:78:fc:17:52:42:9c:f1:98:46:19:e4:14:83:52:56:
1a:20:d5:df:65:78:d7:dd:c5:43:23:8f:05:8e:d2:ca:0e:29:
ac:33:5b:09:27:f7:06:31:cf:dd:a7:8f:b6:6a:78:9b:9b:75:
69:f2:18:4f:f1:73:8e:68:fb:72:9d:b0:35:34:39:b6:7d:91:
48:72:ae:a0:2a:e3:c4:ae:9b:f7:96:5a:ba:46:28:24:4b:c4:
ac:51:ce:96:11:a4:0e:c7:a9:46:8e:82:9b:50:34:e8:16:9c:
c8:b8:26:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:31:43 2026 by rpki-client