Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: xle4cgQVptNc79zQsY613VPGCnpiEAydxEFyjsc3KQE=
Subject key identifier: 2B:72:52:E4:9F:26:D3:B0:B8:07:29:96:CF:33:12:B4:40:F8:D5:B5
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 01A0C9D91D9F98C547991319A9091719C0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 0A20
Signing time: Tue 22 Sep 2026 16:00:44 +0000
Manifest this update: Tue 22 Sep 2026 16:00:44 +0000
Manifest next update: Wed 23 Sep 2026 16:00:44 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: NTDyrgQY110/BClq2nRL0rrc5hQx/AH96Jl5MxD6fWI=)
2: QGMbmM8ll11r2ayfmomjOP9Vi5c.roa (hash: XGhVAar8wCBxCyb0ylA0x+uNoCI6FXRlTU/gvBj/94g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:1d:9f:98:c5:47:99:13:19:a9:09:17:19:c0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Sep 22 16:00:44 2026 GMT
Not After : Sep 23 16:00:44 2026 GMT
Subject: CN=2b7252e49f26d3b0b8072996cf3312b440f8d5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:85:eb:3f:85:02:f5:a1:fa:9f:f2:8d:d8:00:
8c:b8:81:c4:84:8a:5c:aa:f9:3e:3e:ab:7c:73:fd:
ca:3e:06:1c:ce:32:8b:d0:c4:33:09:e5:e2:5e:3e:
01:20:81:0c:5d:58:d0:c4:fa:0d:ba:47:11:ab:13:
43:dc:d6:31:58:02:e4:ab:de:6d:5d:89:f9:f6:cb:
b5:e6:bf:ed:95:30:a2:9e:d6:d4:dd:2e:ee:d2:b8:
de:eb:e1:8c:25:55:4c:56:bf:a3:6f:05:85:74:e9:
3d:50:dc:c8:b2:c2:05:e2:56:b2:8d:14:8d:f9:97:
de:ea:0e:6d:d1:db:42:03:78:a1:a9:7a:ad:a6:bb:
81:11:51:18:17:28:f7:e2:c8:9d:a3:b7:57:8e:ee:
56:35:66:66:47:01:1f:52:93:ec:10:d1:51:6d:d7:
d4:fc:09:ea:d6:63:2a:3f:44:03:67:9b:d2:36:28:
5e:05:7a:46:29:53:af:18:ac:9b:8a:85:09:3b:ff:
fb:e5:6c:83:e8:80:d2:f8:88:d8:db:20:d4:71:ec:
8e:d3:fb:97:6f:72:c0:1a:4e:c1:67:37:c9:25:85:
3e:57:ab:a2:45:3a:4d:a3:e0:3e:55:ab:06:2c:b9:
fe:a5:7b:e6:d3:82:b5:7c:f1:86:2e:3b:aa:ac:ab:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:72:52:E4:9F:26:D3:B0:B8:07:29:96:CF:33:12:B4:40:F8:D5:B5
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:94:68:5f:83:01:02:6c:1a:af:ca:8a:49:fb:0e:ec:b7:b0:
c8:ab:81:cb:0c:7d:bd:00:e6:da:4e:a0:52:18:d6:14:c2:5f:
c7:00:f1:54:d8:5a:db:1a:b6:06:f4:b1:f9:fd:8e:c8:0d:15:
ed:02:87:0c:6e:6e:e8:d8:b0:8d:e3:e6:da:23:d7:a6:36:82:
f9:d0:32:b0:72:0b:e6:07:b4:f6:44:0e:46:69:b6:17:f8:c4:
12:89:e4:ba:d0:5d:16:65:3d:b2:c3:85:41:c5:b3:d1:07:82:
ef:14:cb:ed:ce:a4:45:1e:09:40:f5:15:c3:24:89:5f:8a:88:
4e:d5:3f:54:0f:0e:e3:bd:6c:4a:fc:80:ea:38:82:38:1a:cd:
71:af:91:82:a0:67:85:c2:0f:b7:46:0d:93:3c:4b:0c:2f:b9:
67:19:fa:88:8a:af:ee:a7:a1:ee:21:a1:dc:9e:f8:3a:07:9f:
6c:de:16:d8:d7:53:c3:dd:14:13:b4:f1:26:96:15:72:df:4f:
da:e5:47:ca:a0:b5:a9:86:cb:c9:c0:89:5f:55:28:81:4f:7c:
7e:3e:3a:32:73:cc:20:16:41:7a:d5:a6:ab:c9:28:e1:77:0f:
d9:ab:c9:8a:79:91:77:33:56:c0:08:ba:c5:b2:d0:00:20:1c:
56:d3:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:49:42 2026 by rpki-client