Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier: wYq02aeYEwuCWYX3O2JsmjIWYR5ZpwkQd2jwh9h4OIY=
Subject key identifier: 6F:75:C0:58:57:3C:BB:9E:B4:8E:3F:0B:5C:EA:53:5A:DF:3F:9E:99
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer: /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial: 01A0C3D67E47070DF294F38E075C3AFDFAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number: 0D80
Signing time: Mon 21 Sep 2026 12:00:09 +0000
Manifest this update: Mon 21 Sep 2026 12:00:09 +0000
Manifest next update: Tue 22 Sep 2026 12:00:09 +0000
Files and hashes: 1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: uzsWTkJjhdLMOvxtRuYsa1qIQprIe332yV2ZuuYJsVs=)
2: G_3AbkBvxlIP88eiGt3CS6nBjms.roa (hash: HxmAkTnKX1MXFmf40b0A8DoHMlH+AhQxL52OcvMUs9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:7e:47:07:0d:f2:94:f3:8e:07:5c:3a:fd:fa:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
Validity
Not Before: Sep 21 12:00:09 2026 GMT
Not After : Sep 22 12:00:09 2026 GMT
Subject: CN=6f75c058573cbb9eb48e3f0b5cea535adf3f9e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:af:9a:7e:34:cc:a7:a5:03:23:96:06:39:88:
28:1c:db:1b:c0:38:ec:9c:c9:9b:e0:bc:6c:aa:4b:
b1:34:49:d1:04:6e:2a:ce:13:99:21:1b:b3:92:9e:
67:c0:5a:16:06:2f:12:2f:fa:0c:46:fb:6b:6a:82:
a6:a1:27:ba:52:9f:b9:43:c7:86:3c:61:18:d9:b1:
36:bc:ee:ff:b0:e2:c1:a4:1e:dc:86:bb:50:69:d0:
e1:21:20:e2:e3:64:96:f1:92:72:bf:6f:66:68:2d:
91:54:65:24:16:eb:b7:86:e6:6d:82:36:91:37:05:
e0:fa:af:fb:da:71:60:49:7d:5d:44:d2:27:7b:43:
4e:9a:35:50:f2:25:be:92:f2:08:69:63:3e:5f:70:
b5:f7:74:69:7b:91:73:c3:c7:0d:a6:44:6e:9e:06:
15:d5:d5:a7:6b:29:6b:03:85:3e:41:26:02:e7:e8:
72:00:5d:f7:9d:0d:cc:c0:80:bd:89:1f:0b:46:77:
15:b6:30:0e:c3:c1:00:04:d6:f1:44:9e:3a:4c:65:
15:cf:14:75:f1:0c:54:b3:1e:b4:1f:fa:0d:3f:ff:
3e:93:35:c6:cc:1c:9d:96:36:14:c9:39:0d:1b:34:
cf:5d:f8:8d:33:81:2d:b0:e3:ab:16:d4:27:32:c6:
5a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:75:C0:58:57:3C:BB:9E:B4:8E:3F:0B:5C:EA:53:5A:DF:3F:9E:99
X509v3 Authority Key Identifier:
keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:9c:a9:23:42:f9:d7:ef:a3:4f:51:e5:6d:ec:6e:33:32:19:
a7:bd:79:5b:57:a0:16:06:cf:d2:c0:82:70:6c:f8:ee:fb:29:
37:d5:53:af:cf:53:14:8a:a0:81:6d:89:a9:12:66:47:79:cf:
33:08:a3:16:f7:1f:8e:92:f7:b2:75:c0:b3:60:b0:03:1d:08:
70:df:13:31:1c:eb:37:50:29:96:df:62:16:8c:17:99:5c:2f:
d6:3a:5d:21:35:5a:56:70:db:ea:3e:1a:c5:e7:24:b5:7e:d9:
b5:2a:71:54:ed:58:1c:2a:fc:a3:1c:d8:89:a3:b3:50:60:68:
75:a9:83:c4:00:61:9e:26:ee:79:b3:8f:84:43:56:f8:3f:24:
13:b9:56:ff:cf:6e:d9:18:28:9e:8f:e0:e9:dc:df:fa:6e:a1:
b9:93:5d:95:45:fb:42:3d:ca:98:5d:df:fc:8c:46:b2:28:fd:
bc:e6:1a:d3:e7:a7:85:9b:d1:d7:f9:10:a5:21:ae:7e:44:37:
36:b3:94:fd:97:e2:a1:7c:63:9b:20:fe:6f:77:61:22:b0:89:
6f:60:30:a5:af:5c:72:3a:d5:d1:54:c4:da:d1:54:06:11:4e:
93:f3:90:29:20:1a:a3:26:97:47:16:5d:5e:64:9d:86:de:c6:
ec:68:4a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:09:43 2026 by rpki-client