Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: ENK0hx0nQSvHHzj+xoa9V5zOD8OBx7RuienBTRu2b4s=
Subject key identifier: F5:AD:B3:04:FA:92:EA:10:BF:7E:8F:CA:8A:77:EE:52:0D:66:05:16
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 01A0C17ACB8F96D5B8740F9CC46B514EAE20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 111C
Signing time: Mon 21 Sep 2026 01:00:45 +0000
Manifest this update: Mon 21 Sep 2026 01:00:45 +0000
Manifest next update: Tue 22 Sep 2026 01:00:45 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: kwBPvxEbFvnuEZ5gL+YS1YFdZG4QgIcs6fEJpbOCw6g=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:cb:8f:96:d5:b8:74:0f:9c:c4:6b:51:4e:ae:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Sep 21 01:00:45 2026 GMT
Not After : Sep 22 01:00:45 2026 GMT
Subject: CN=f5adb304fa92ea10bf7e8fca8a77ee520d660516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3f:3e:55:41:71:e2:d6:3e:b2:6c:d1:1a:d7:
fc:70:72:0b:46:5a:0d:fc:8f:1f:45:75:f5:70:0d:
e2:10:9b:be:17:ac:c4:04:ab:70:1c:4c:06:15:b8:
b8:a7:d9:b7:e5:f3:fc:e6:09:5b:51:6f:92:99:74:
bd:51:41:24:e5:e5:08:3c:36:c8:56:80:a1:f3:f2:
65:8e:96:d8:71:cd:ca:17:9a:b9:08:de:94:ad:aa:
bf:7e:aa:49:63:8d:3b:3d:49:55:15:ea:ff:6b:c3:
43:9e:e3:0a:e3:fd:3d:8e:1c:98:6c:c5:45:50:d9:
8d:64:25:69:0e:56:47:cf:70:85:7d:fb:5d:cd:81:
e9:02:b6:09:d1:5c:a5:9e:b8:c5:3e:e9:a9:d0:27:
29:13:de:cc:8d:80:45:f2:df:12:d2:13:08:f3:15:
c8:01:59:ef:f5:de:d7:0f:f3:bf:fc:33:08:ad:79:
66:1b:a9:7c:ce:88:3d:f7:56:7a:33:ca:60:80:eb:
fe:16:2d:64:5c:51:97:f6:74:5e:60:9b:d3:5a:05:
16:77:34:94:ef:9a:f7:73:03:a6:f0:d4:da:ce:2e:
af:92:07:0b:de:e0:cd:ef:de:33:c9:b3:c0:cc:b1:
0c:fb:74:7d:8a:df:f2:a8:b5:f5:9b:e4:9b:d5:f1:
7e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:AD:B3:04:FA:92:EA:10:BF:7E:8F:CA:8A:77:EE:52:0D:66:05:16
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:38:6b:56:b5:b9:9c:fb:9f:87:04:bd:7c:31:9b:9a:a5:60:
1c:51:6d:71:49:0e:50:84:97:1d:6d:34:3e:30:e6:e5:55:9b:
7d:23:21:37:c3:81:63:9b:47:2b:69:5b:78:82:5b:c8:69:cb:
24:ba:d4:67:28:be:ed:04:bb:51:8a:ef:ab:9f:46:73:cc:de:
0b:c3:f7:ad:9e:18:3f:e3:d6:a2:c5:7a:c1:c2:d0:21:3e:57:
76:14:f2:d3:5d:af:78:54:10:a6:48:ac:d9:8d:f4:d8:48:8d:
04:7c:16:fb:bc:fe:1c:d5:46:f7:e6:0a:3d:84:ac:74:01:b2:
64:08:21:59:2e:60:1a:61:a0:2e:7c:16:33:99:52:cb:a7:78:
de:f7:bc:72:32:4e:36:73:62:56:aa:b6:a7:17:51:a6:33:ec:
0c:eb:9e:5b:8c:09:c3:70:1a:e5:cb:49:30:6f:73:5d:95:87:
33:fb:f6:47:54:4b:07:21:6e:51:31:93:c1:db:04:db:10:a1:
3c:5e:39:71:02:72:1d:30:82:2f:d8:38:4c:94:8a:cd:f7:c1:
4e:ba:7b:f6:15:a2:58:a2:6f:05:07:11:51:e9:b9:ee:9a:7f:
54:d7:c3:b6:4f:a9:76:fe:b9:6c:e9:26:4c:0e:7d:99:36:0e:
d8:13:4b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 03:23:26 2026 by rpki-client