Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: Pd7NRMvrSOZCyCE3xmPLQ1lgUzHO+G5q3iylMOy/hJo=
Subject key identifier: C7:CF:09:4D:22:E7:B6:80:E4:A5:AB:C2:A3:AF:94:88:9F:21:A1:F9
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 01A0C77C668F3B70364EBAD03395CA77ABC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 05:00:13 +0000
Manifest this update: Tue 22 Sep 2026 05:00:13 +0000
Manifest next update: Wed 23 Sep 2026 05:00:13 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: lfg9I280gWSIlASwrI6Uj+e+WWz/45amH6xjjGfV7Ok=)
2: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (hash: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec=)
3: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (hash: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7c:66:8f:3b:70:36:4e:ba:d0:33:95:ca:77:ab:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Sep 22 05:00:13 2026 GMT
Not After : Sep 23 05:00:13 2026 GMT
Subject: CN=c7cf094d22e7b680e4a5abc2a3af94889f21a1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:19:41:60:40:88:8c:40:48:73:c3:07:0f:20:
34:a0:db:52:57:c2:3b:88:ec:26:e0:b9:b9:d5:c9:
17:d9:81:25:97:ff:93:5e:7d:a5:87:b6:87:6c:6c:
1f:3a:2e:69:67:32:b2:7b:54:27:b1:68:8d:ee:b4:
e3:26:1f:a4:8b:c6:a4:fc:72:eb:50:00:30:3c:22:
ad:0c:05:ca:3d:88:07:05:19:95:4b:8b:c2:27:30:
55:25:66:62:bb:57:41:fe:4c:1d:37:21:8d:f9:75:
80:04:fa:c6:21:61:2b:9a:da:53:e0:7a:a6:a0:b9:
78:17:a1:b3:69:6b:02:48:52:33:25:4b:1c:69:a1:
ca:2a:07:5a:59:7e:41:bd:05:45:d5:4d:ad:80:75:
0f:b2:62:fc:90:02:dc:57:98:5e:a5:ac:ef:ca:91:
28:ae:2a:32:92:53:b7:78:57:0e:5d:36:9f:91:62:
af:54:99:07:99:85:74:52:3f:28:e7:5a:d9:d2:3a:
08:10:cd:0a:a7:70:e2:e0:1a:78:5c:fb:91:7b:d4:
d2:90:61:fd:a7:f6:07:ba:4e:d4:bb:a2:ab:2b:38:
e4:f9:83:9a:0f:a4:de:bc:9c:53:74:46:43:3e:c6:
6a:39:f8:80:27:90:53:5f:cc:52:7c:88:1d:bb:c4:
09:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:CF:09:4D:22:E7:B6:80:E4:A5:AB:C2:A3:AF:94:88:9F:21:A1:F9
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7a:9c:d9:90:df:11:7f:70:46:b1:a7:84:2a:7c:85:55:b0:
1e:1d:37:dd:f8:0e:09:36:45:f9:24:33:30:5a:cf:3b:7b:61:
01:75:9e:f8:48:d1:b5:8d:cd:42:4f:36:2c:c8:0c:9d:7c:9e:
6b:5a:1c:1e:ec:d1:b4:f2:b5:be:3f:52:85:9c:97:06:29:6d:
85:79:b7:3d:bf:64:21:08:8b:a6:1f:10:fd:7e:90:4d:e0:66:
70:7f:ae:e5:55:dd:1d:66:19:4d:21:60:e9:9c:3d:65:ff:a4:
b4:10:a7:4b:5d:77:20:8c:c6:99:92:a9:4d:3d:3c:ee:b7:63:
c4:68:9e:6d:32:e9:2b:a3:57:3b:55:7a:1b:7e:a2:90:5e:9a:
4b:87:b5:07:fc:0b:b3:f7:70:64:b6:fe:bd:4b:98:5e:76:dd:
bb:88:0a:3c:8a:5c:12:6a:54:dd:81:db:1b:23:7f:08:16:67:
57:54:e4:9a:9a:37:63:d3:21:32:fa:fa:12:e1:4c:14:68:8f:
68:25:4d:28:82:a3:e8:c4:9b:96:79:87:f6:db:2c:0d:31:a1:
50:8d:a1:88:aa:fa:93:05:40:c7:2d:b1:6e:d1:7d:b2:fe:ad:
f3:90:2f:5c:f4:0a:b9:52:58:fb:e6:f4:7a:5c:51:66:d8:d2:
f9:73:1b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:37:43 2026 by rpki-client