Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File: 4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier: +HtI9BgUAH5RSkksnNL9r/HE7szoD0wVbKDKwscxFL8=
Subject key identifier: D6:45:65:71:6E:F0:ED:79:34:E5:11:90:D4:E3:E0:34:AA:9A:B2:BD
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial: 01A0E519AC090612FADC393B7BB39FCD44C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number: 1A82
Signing time: Sun 27 Sep 2026 23:00:59 +0000
Manifest this update: Sun 27 Sep 2026 23:00:59 +0000
Manifest next update: Mon 28 Sep 2026 23:00:59 +0000
Files and hashes: 1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: O07ISZgtWtM8J2cIKxXVTYbsnoSEDtoX8LoDySvXZX4=)
2: 77se7qJXk55SeOZEcLQG-rbxsr8.roa (hash: OQDmgPfY6EApBYAHydMcNAqVcKBYMQ02TGKDG7szY/E=)
3: BpG08GkHB-QsJpL9txO9DOn8Gqo.roa (hash: qk9A6y/PVuHMQUNTyaAzAHkiLugBm0Npe2/tYgpiKkw=)
4: N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa (hash: LqroIaOJcyhk3jhpQNNYhhn2nTyn7BAqMOWhnDZAcrY=)
5: S3wAJAuRML5Do5HIcNyZi2_zrRU.roa (hash: AgpqUaFG2QBQhnJTxXP4ibifKNaKINVjwUQ+PyAUUno=)
6: mtJz-hUI0Cx0jLgkDLzYwDMbWdM.roa (hash: CKUhSDm/qBK/JCbTgbEQJEgA0HKSbKEajcNdo2qCwys=)
7: pYQ5IyUbzq5qvpxuz6__bErWTAk.roa (hash: EPZHqA+xkmohjRcec6HU5g8Eeu99YhgqZrcWYKO20oU=)
8: uZvBL7Adjps3YJPzPab2422Kfhw.roa (hash: jc1WIld0OO6y7I+8/9pDJkxR96M4dxWB/ebX7E2Vo1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:19:ac:09:06:12:fa:dc:39:3b:7b:b3:9f:cd:44:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Validity
Not Before: Sep 27 23:00:59 2026 GMT
Not After : Sep 28 23:00:59 2026 GMT
Subject: CN=d64565716ef0ed7934e51190d4e3e034aa9ab2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a8:7b:a9:54:bd:e5:0b:4e:51:b7:ed:03:08:
9e:a8:12:20:a2:b3:20:b9:f0:e6:c8:84:31:a1:ea:
2b:7b:5f:7b:5a:eb:e8:b4:d7:08:c1:2a:67:14:d4:
05:bf:df:a5:d1:48:f7:25:34:7d:25:53:bc:92:ec:
91:a9:7f:fe:3c:f5:72:62:91:5c:f4:b4:e9:b9:88:
74:46:72:1c:29:c1:26:bd:c9:bd:33:57:79:4d:90:
b3:16:24:c5:25:06:4a:2f:38:be:06:bf:85:25:56:
4f:2a:ec:d3:4a:01:d5:3b:17:c6:b8:66:60:40:09:
89:df:9b:77:36:6e:96:87:e1:77:a2:13:51:f2:1e:
a5:f4:03:f4:7f:9c:07:cd:b7:b3:3b:cc:70:df:5c:
5d:ac:b9:ef:72:d3:8a:e4:ce:6b:59:d4:5e:47:e4:
cf:f5:6f:a2:19:cc:9f:7f:07:46:db:81:94:3b:47:
04:5f:c0:f0:6f:cd:1c:1c:01:a1:76:27:eb:be:c6:
48:40:d9:33:10:55:2a:d6:e4:f6:28:1a:c9:16:f6:
be:28:7e:4e:b7:32:95:64:ad:f7:00:a4:76:92:9e:
a8:66:14:e3:3a:06:f8:58:c6:24:ea:17:21:21:39:
e2:3b:1b:89:bd:3f:dd:8c:17:a8:29:db:da:ea:52:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:45:65:71:6E:F0:ED:79:34:E5:11:90:D4:E3:E0:34:AA:9A:B2:BD
X509v3 Authority Key Identifier:
keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f2:89:12:33:d8:ae:39:b9:56:3f:a0:f6:76:78:61:ea:32:
de:8c:88:96:6c:44:54:5a:46:6a:22:17:e6:a9:ea:bc:a2:fc:
3b:6e:99:61:c5:75:78:ae:8f:d4:14:3a:4a:d1:e5:b8:a2:08:
bc:c4:a2:a0:20:28:ee:db:f0:1d:70:4d:56:6a:34:59:02:52:
3d:8a:50:80:1d:a9:21:19:ba:47:5b:56:5f:b2:12:96:08:ff:
fa:24:47:93:0d:96:a7:21:89:d3:86:5d:da:0a:ab:3b:b0:c7:
0e:44:35:a0:7e:59:13:b7:7b:6d:ac:c3:e1:6d:bc:1e:70:86:
89:cd:e1:b0:aa:38:9d:a8:9c:90:44:d0:b8:cc:0a:58:b1:76:
ed:7d:59:e2:01:3a:97:33:e8:54:e1:8f:d4:f5:8f:7c:ac:74:
1c:6f:a2:89:8b:61:72:14:58:c8:b5:35:1c:eb:a0:f6:fa:54:
93:2b:8b:a7:a0:be:4c:5d:ec:f7:58:6b:81:15:2b:1b:55:07:
ff:1d:5f:ad:db:ad:0d:58:ad:32:76:79:e7:62:cb:e4:a6:d1:
4d:0e:23:b0:e5:de:14:fe:c9:00:09:2a:af:33:9c:06:f8:87:
65:e5:2e:b4:3f:b2:70:d1:95:29:9d:c0:af:53:00:ae:3d:af:
4e:6a:f6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:49:33 2026 by rpki-client