Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: zszW3+PAF7wEgWLognmS5/TJYR0uCZmS5GKWsVtjoII=
Subject key identifier: C2:D0:3E:80:1E:02:C5:5E:DF:58:AD:2C:DF:4C:E2:1E:CC:50:0C:54
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 01A1C6312F7CE0E7E30701DD297C4EE374BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 11A3
Signing time: Tue 10 Nov 2026 16:01:14 +0000
Manifest this update: Tue 10 Nov 2026 16:01:14 +0000
Manifest next update: Wed 11 Nov 2026 16:01:14 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: dVSM5s65IE2WJMT0+dXKvctE/PHaI6F1QZQzukdyTyY=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:31:2f:7c:e0:e7:e3:07:01:dd:29:7c:4e:e3:74:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Nov 10 16:01:14 2026 GMT
Not After : Nov 11 16:01:14 2026 GMT
Subject: CN=c2d03e801e02c55edf58ad2cdf4ce21ecc500c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:01:1b:57:ca:94:89:ef:a2:32:8f:97:75:
35:84:2e:67:95:d8:db:4f:4a:7c:63:73:89:24:7d:
05:04:34:12:ba:9d:dd:69:48:af:e2:5a:b9:51:0d:
ec:51:ca:66:10:dd:a8:5d:31:3c:46:4b:30:ad:e3:
fe:03:89:9b:50:5a:1f:96:92:f0:16:f2:ff:cf:0c:
97:39:c0:8a:07:ef:ca:a2:60:f7:15:29:1e:9f:dc:
8c:fa:a6:70:b7:e8:44:ff:58:43:04:90:6c:89:9a:
d4:ca:25:be:56:6b:1c:a2:c0:8c:0f:bf:b9:3a:6f:
89:bb:2d:5b:c6:df:15:62:ed:6d:50:68:03:f8:81:
19:7d:f7:19:b1:b4:a2:06:e4:71:f5:06:3a:d9:2f:
60:ae:14:3c:e8:78:29:2b:34:31:54:d4:8b:8e:8e:
ae:df:b5:e6:c8:15:a5:dd:90:22:96:d3:cc:4f:d3:
79:61:54:5a:4e:53:86:6a:e1:c0:23:6c:ac:b5:63:
23:3f:f8:0e:21:c3:39:9f:80:fa:9b:4c:5d:20:9c:
b6:59:61:81:b5:1d:35:f9:af:35:d2:a0:62:9a:ee:
f2:13:1e:96:2e:38:0d:80:d4:a3:55:0e:3a:c3:32:
52:98:f7:f1:88:d3:9c:09:85:72:74:5c:a3:3c:39:
64:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D0:3E:80:1E:02:C5:5E:DF:58:AD:2C:DF:4C:E2:1E:CC:50:0C:54
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4f:ea:14:9e:c6:1e:7e:5f:3e:57:71:90:32:e7:20:56:8d:
c1:93:68:d1:12:03:fd:6a:8d:a7:83:bd:c5:70:03:a6:c7:f7:
d7:fa:57:7c:4a:b6:29:34:b2:d5:d8:b8:ae:e2:10:cb:d3:fc:
37:8f:a5:26:72:90:97:5d:fd:58:a4:36:b6:b3:35:83:0b:3a:
d2:c8:98:9d:a1:d2:62:a9:31:6b:1a:af:a7:45:4b:94:d4:0e:
d4:13:5c:b8:29:c4:f6:bc:a1:dd:11:61:ac:76:29:d3:52:fb:
61:0f:2d:3d:be:58:42:49:eb:2f:90:42:ff:b8:29:17:b6:7d:
e1:9b:db:ac:2a:f2:82:f8:82:c3:71:cf:bb:99:c5:5a:4a:3d:
6f:7d:55:de:4a:d1:74:e6:24:7b:4d:41:c0:2f:07:db:50:cc:
99:84:cc:ae:e0:1b:40:e4:52:99:0f:0f:d8:a1:8c:ad:ee:9c:
57:ab:b0:e5:ab:e9:f7:08:cd:1f:6a:92:cd:06:2b:b0:54:bb:
92:d8:e3:5c:e3:8f:fe:b9:74:b6:9a:86:22:41:aa:c1:9d:1a:
cc:dd:43:24:8a:64:40:0d:f9:2a:d5:02:08:1f:80:9a:8f:35:
87:12:70:eb:75:f1:d8:e0:e9:b7:31:12:fb:a5:ca:0b:ec:69:
fc:bd:1a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 20:04:37 2026 by rpki-client