Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
File: 4koyJ4zntMsgXfzK14YBSjsK4yM.mft (raw, json)
Hash identifier: QkUXmVA4xvC1TQQLNRcIIXnwtCMB9b9HAV6x2f4m2Vo=
Subject key identifier: 8C:36:8C:7C:90:18:88:2A:0A:42:51:21:A2:7B:B8:66:33:23:07:7D
Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
Certificate issuer: /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Certificate serial: 01A1DE3985C79104BE4E9408432B227FC5D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
Manifest number: 1290
Signing time: Sun 15 Nov 2026 08:01:13 +0000
Manifest this update: Sun 15 Nov 2026 08:01:13 +0000
Manifest next update: Mon 16 Nov 2026 08:01:13 +0000
Files and hashes: 1: 4koyJ4zntMsgXfzK14YBSjsK4yM.crl (hash: 2yWB4VzyiU1vrIkI657GcdJQCFHMIb530yNHRh3Jc1A=)
2: QZoElNh2G2nwMP88BsRDda3tDUQ.roa (hash: Z+CRbrBSzZz6HmMemjR2fLmNJfImRQn2RnMbj7m1gdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:85:c7:91:04:be:4e:94:08:43:2b:22:7f:c5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Validity
Not Before: Nov 15 08:01:13 2026 GMT
Not After : Nov 16 08:01:13 2026 GMT
Subject: CN=8c368c7c9018882a0a425121a27bb8663323077d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:83:95:42:a0:23:48:90:3c:63:61:35:e9:
88:5b:0c:17:8f:3f:93:de:a4:ba:73:e7:26:13:36:
89:7d:2f:da:b0:8d:98:db:5e:6d:3e:a8:2d:7a:b3:
0f:e6:b6:3c:0f:ba:16:53:05:aa:03:65:7a:ba:d2:
a0:fd:57:ba:4b:96:93:73:a0:b4:a2:a1:cb:4c:bb:
99:29:80:6c:54:99:7e:66:02:41:54:61:5f:b2:11:
e3:2c:21:5a:cd:d0:46:02:c6:d7:ef:54:4e:03:ab:
40:83:de:53:75:dd:ea:20:d0:06:5a:86:e6:93:b3:
67:4b:e7:0e:be:5f:9f:f6:77:3f:c9:5e:3c:bb:3a:
97:43:63:23:5c:f6:99:87:22:ac:d0:a2:04:1e:c9:
0e:ae:03:a4:49:ee:28:f7:1d:74:81:6b:65:74:57:
6b:6e:21:07:7b:4a:fe:40:5b:55:3b:b9:5a:42:06:
b5:43:41:1d:c0:81:5c:39:4e:17:c7:5e:3f:c1:ec:
6d:68:5f:9c:1e:a7:6f:07:cc:cf:45:64:dc:3d:01:
13:50:9e:32:1b:16:01:04:ee:24:b1:b6:da:8a:f0:
58:ee:56:83:15:03:25:25:c1:86:5f:b2:92:75:7b:
46:da:b8:0e:a2:f5:0f:7a:e5:f1:ae:86:7f:ae:c1:
94:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:36:8C:7C:90:18:88:2A:0A:42:51:21:A2:7B:B8:66:33:23:07:7D
X509v3 Authority Key Identifier:
keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:7c:c5:da:ea:8c:a8:62:ff:b1:14:72:66:97:bd:17:20:9d:
cd:ca:60:f4:d4:16:18:60:08:a8:34:1b:fa:c8:d9:63:08:50:
50:71:46:28:14:0d:21:51:ea:83:7c:90:dc:43:5d:72:b2:ee:
69:56:74:56:fb:de:8f:0f:88:51:d3:b9:b4:70:3a:95:b4:d0:
f3:78:67:03:c5:54:43:88:e9:e6:30:af:91:ee:ba:25:eb:a0:
1f:5c:f4:58:56:68:48:05:3a:87:8a:97:a2:d8:1e:73:fd:91:
dc:02:71:ff:d9:8d:7e:ad:fd:7d:c2:b6:9f:ed:ee:71:18:01:
a5:05:34:08:0c:d8:8e:ba:42:e6:8c:64:5a:cc:d7:0b:2f:1f:
c8:79:04:3f:c2:0f:81:01:95:10:a3:4f:ee:1a:d4:9a:15:82:
73:b2:9d:e5:e5:e2:cf:9c:f2:7e:67:71:6e:ab:e1:9c:06:42:
a0:c6:d2:0c:a1:d2:21:ac:f2:3d:eb:48:37:16:7c:6c:e8:96:
37:3a:3c:fb:24:73:44:5e:92:d2:0e:61:51:e9:a6:a0:b6:5d:
46:d4:28:a4:2b:b4:7e:ed:ba:d2:07:17:eb:46:88:54:3f:4a:
ca:c4:85:22:6d:14:a5:a3:47:4f:33:31:de:6e:94:73:fd:dd:
28:1d:96:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:45:21 2026 by rpki-client