Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier: Dx8P6rxtSDXQGz1Z3YjJmO/Cy9tx8Y3+l4J7tl1p7SQ=
Subject key identifier: 34:6D:AF:43:14:86:32:DA:7B:8C:E8:F3:ED:96:8C:6F:D9:3F:49:AA
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 01A0C17B4CED98EBB38B38AAB002E06A3587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number: 1A76
Signing time: Mon 21 Sep 2026 01:01:18 +0000
Manifest this update: Mon 21 Sep 2026 01:01:18 +0000
Manifest next update: Tue 22 Sep 2026 01:01:18 +0000
Files and hashes: 1: 1-nIDHjjDOfK0qkT3T38aF1CybZo.roa (hash: wfNaZ1sAvLj/BXad973SBMXYEOp2AK12GK1yxn0qtHA=)
2: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: oiRmkNXR17toPubDUvG6ykZoaGnslKWCDw5ZfM1ptEc=)
3: 7cNt7nS6Ga02pEEvUGwXFcclfa4.roa (hash: IhtCXpz8Ziv5ADSE80GH1TqeWkIm73cJMRq8OxzR0jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7b:4c:ed:98:eb:b3:8b:38:aa:b0:02:e0:6a:35:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Sep 21 01:01:18 2026 GMT
Not After : Sep 22 01:01:18 2026 GMT
Subject: CN=346daf43148632da7b8ce8f3ed968c6fd93f49aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:51:46:af:16:a9:6d:c3:38:65:f1:e5:42:
5b:8e:70:4c:8f:8e:63:63:84:35:d3:9e:83:fa:92:
be:f2:30:a9:49:5f:e2:92:e5:f0:e1:59:74:6e:07:
66:1a:00:2e:b9:10:40:5f:cc:5c:25:69:13:3e:a7:
b9:ef:51:3f:c0:fa:d4:a0:c3:55:ee:c8:48:41:cb:
a1:00:31:b4:b2:61:ae:20:81:67:7c:c7:80:d6:35:
f9:46:6c:43:33:33:d1:e3:f2:38:54:f8:70:e2:93:
e8:01:88:77:3b:d2:4c:1b:c6:d0:3d:83:94:d1:1c:
64:f3:80:62:12:5d:00:fb:3b:fd:4d:06:e2:47:c7:
77:fa:28:36:62:17:2f:e1:54:74:5b:ed:57:c3:2c:
29:28:eb:d9:84:da:28:ee:ca:8c:a6:6a:f4:09:22:
59:34:f7:cc:84:04:44:9f:b8:86:06:07:aa:8e:87:
76:b8:e1:6e:70:fb:46:66:95:19:fe:4c:7c:ab:72:
03:8c:89:9f:11:0f:24:e1:d1:92:3c:d5:85:fe:3c:
67:fd:3b:1f:c1:c3:86:3f:e5:06:01:60:9a:01:de:
a2:17:72:48:50:26:0f:c1:ba:07:6a:f0:e1:3d:e9:
5b:3b:d6:ff:bf:d9:c6:75:fe:1e:f6:4f:90:61:27:
d2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:6D:AF:43:14:86:32:DA:7B:8C:E8:F3:ED:96:8C:6F:D9:3F:49:AA
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:15:ad:7c:d0:e2:f3:0f:33:af:4a:da:14:16:38:68:fe:fd:
9f:59:5f:51:cb:ff:50:1d:75:d6:ef:35:db:b2:b8:a0:70:a8:
6d:50:0f:45:12:e8:9d:f7:31:20:e3:f7:6c:c2:1a:66:0e:97:
a5:4a:db:5e:d9:02:b2:1f:77:21:50:5a:51:90:9e:8a:fd:23:
22:6b:a8:53:f2:b8:1c:98:e8:3d:1d:2a:f5:83:15:3e:6f:d6:
01:a0:5e:5a:4f:f2:00:0e:bf:ca:39:51:b0:31:fc:2e:e6:d2:
ad:f2:69:33:e1:0f:44:eb:12:da:3b:18:f6:5e:0c:86:e9:6b:
dc:a1:7a:da:cd:ec:57:88:c2:b1:67:30:d9:5a:f2:bc:da:c2:
1d:8d:b6:ae:95:ed:a6:f1:8a:0a:c3:62:12:a3:bf:be:f4:62:
1e:1b:88:95:14:40:5c:72:35:57:b4:1a:ec:23:a1:7c:96:bd:
ef:e4:e6:7b:f3:a5:e6:2a:64:86:f2:bc:57:e0:a1:d9:da:50:
ab:14:01:04:f8:f3:45:0c:fa:07:83:79:61:bc:13:10:ce:f2:
ba:36:64:54:74:09:23:89:1a:94:de:5d:db:cc:42:82:ee:88:
cb:da:65:7b:69:e9:bb:00:e5:84:20:08:35:10:26:ba:68:f2:
f7:38:62:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:48:38 2026 by rpki-client