Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: ujWGa3aUtGyEp+vjT/oGKf4e2DgpTWUHj4iTqkf2Gzc=
Subject key identifier: 52:C1:30:A3:25:8B:A7:F0:9B:AD:40:AC:26:A1:0F:6E:E0:26:B7:E0
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 01A0D2012D2466040EFDCEF1A8B6EEFD6CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0EE4
Signing time: Thu 24 Sep 2026 06:01:27 +0000
Manifest this update: Thu 24 Sep 2026 06:01:27 +0000
Manifest next update: Fri 25 Sep 2026 06:01:27 +0000
Files and hashes: 1: GsRkXOSW1fdFu3DPwvlbZ7bJfrs.roa (hash: LrZFy74UOAGrG2L260gD+OSmEU83mjEYLFF/UUa8s7U=)
2: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: cD9QJFglsfqEqCjQRVfN9wEXfH1ObSMs2ZkJqAk2nwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:2d:24:66:04:0e:fd:ce:f1:a8:b6:ee:fd:6c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Sep 24 06:01:27 2026 GMT
Not After : Sep 25 06:01:27 2026 GMT
Subject: CN=52c130a3258ba7f09bad40ac26a10f6ee026b7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:db:70:8b:4d:4b:5d:61:bf:82:8f:4e:5c:16:
34:46:0a:f6:54:2c:b2:a7:6c:b8:ca:83:80:64:5c:
f2:ba:58:ab:f1:2d:d9:07:cd:df:03:fb:25:17:79:
77:dc:cd:da:ae:7d:8d:2b:01:e9:a9:8e:88:7c:0a:
da:9d:f5:14:70:ed:76:68:7a:00:e7:6b:c1:f6:5e:
fe:bc:03:12:a3:5a:af:5b:c0:e3:e9:8c:ea:b3:83:
7b:f1:ee:31:62:18:fb:39:86:e6:94:cf:23:34:8f:
4d:e2:8d:b1:3f:9c:0b:c8:8a:4d:3a:d5:f0:50:0f:
5b:1d:43:91:83:ed:06:23:25:ca:95:48:6d:ee:72:
a1:ef:dc:55:3c:c3:3b:27:8c:ac:9b:4e:92:33:56:
1e:0c:66:3a:f8:bc:07:41:30:63:94:ed:f1:f3:6e:
99:af:26:b9:1d:d5:28:76:97:e3:f4:e7:1f:b3:f2:
f4:6b:36:f2:48:90:fc:be:88:85:34:1d:59:df:35:
98:d4:23:63:b7:17:6f:ad:68:a2:67:42:24:60:f8:
28:32:e2:05:2c:70:b6:21:27:16:7e:40:33:dd:b6:
2c:ec:d4:4b:bb:ab:2d:07:e5:ef:1b:62:ca:8f:f5:
01:c2:a9:c1:b4:e4:94:2c:aa:71:c5:f4:0a:b7:c3:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C1:30:A3:25:8B:A7:F0:9B:AD:40:AC:26:A1:0F:6E:E0:26:B7:E0
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:54:8d:c9:00:e2:84:c3:b7:31:26:ff:51:08:4f:84:cb:31:
73:e9:43:1c:f7:d6:09:f3:ec:19:a0:b4:42:da:14:c7:d2:94:
12:52:70:65:05:2c:2f:bf:a7:4b:df:4d:ef:42:bf:39:1f:a0:
99:ea:4f:a7:b6:89:63:c2:6d:ea:c2:ed:a1:88:c4:1e:90:2d:
bb:51:a2:97:19:83:a3:fb:74:6b:52:49:c0:68:a7:32:f9:11:
cd:34:2a:8f:11:05:8f:ec:bf:4a:0b:99:9f:f4:42:f1:59:4a:
82:c9:31:19:d3:ee:c3:b1:13:9f:57:5c:70:88:ba:6d:22:28:
80:2e:88:cb:84:25:53:47:75:d7:a5:1a:dd:ab:d2:e1:05:28:
80:08:e5:8a:f4:82:2d:67:85:40:99:e1:b2:33:88:3a:b6:20:
a1:f1:c4:f9:6c:98:81:0f:22:66:ff:8e:61:69:d9:97:0e:0f:
a7:03:5c:9b:25:16:7d:28:bd:bf:0b:73:60:c7:4f:c4:3b:39:
f4:25:49:84:f8:22:78:f9:f4:a0:b5:8f:3d:b0:f3:f1:6a:ef:
1a:ea:46:d9:78:f6:73:dd:89:e3:2a:8d:2f:4a:7b:b1:65:ef:
d9:4f:16:6e:ab:0a:bf:63:95:1a:3b:37:e4:fe:b7:a1:ce:1e:
4a:31:3e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:46:15 2026 by rpki-client