Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier: ICG6WJvaQJT8hjagCmYHoR1u9r5gco1VpbGpXRBDNkI=
Subject key identifier: 70:2C:29:95:A1:D6:87:6C:BF:A2:0B:77:01:AA:CB:6D:06:6A:FE:F4
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 01A1DEDE780C2A3D6C046C8441A07DEF6E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number: 1A36
Signing time: Sun 15 Nov 2026 11:01:23 +0000
Manifest this update: Sun 15 Nov 2026 11:01:23 +0000
Manifest next update: Mon 16 Nov 2026 11:01:23 +0000
Files and hashes: 1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: /bZ0G01fsVhvstRcGbV57djqeEx1ei/rNuHlGen1yxE=)
2: pZ2DG9liFeCKNbzetKHvN52UJO0.roa (hash: ngpoJdoTiDK1ogZAlMttmztrBQw9vwYksg/OwsA6X2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:78:0c:2a:3d:6c:04:6c:84:41:a0:7d:ef:6e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Nov 15 11:01:23 2026 GMT
Not After : Nov 16 11:01:23 2026 GMT
Subject: CN=702c2995a1d6876cbfa20b7701aacb6d066afef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:54:de:3a:d8:ff:67:89:7c:b1:c3:d4:cf:00:
08:c9:80:0a:69:2f:df:78:b8:77:fe:f2:e0:ae:fc:
ee:de:bf:59:fc:a1:d4:f2:c2:19:c1:58:04:7b:f8:
4a:40:7e:0b:cb:10:45:e7:b7:47:40:e4:33:ab:53:
66:95:fd:7a:27:c9:c5:b2:91:db:30:ca:2b:60:08:
62:1b:53:67:10:86:61:ce:43:59:05:78:02:da:d3:
09:f8:3c:65:ae:01:ef:a9:7e:fe:31:fe:c8:d8:f1:
27:50:fc:b2:93:b2:04:f7:97:fb:14:e8:dc:28:54:
6d:0c:d8:a7:10:0c:bd:51:3c:f4:98:05:96:6d:5b:
6a:d3:20:1d:22:1a:5f:86:a8:4b:97:4a:75:a5:ad:
cc:68:b8:2f:08:75:79:1d:74:0d:5f:6b:82:ff:2c:
15:46:b7:d0:f4:af:37:59:46:c2:42:ab:3e:98:f2:
ab:4b:7e:50:c0:02:b5:18:52:9f:9b:88:6b:73:fe:
29:5b:bc:18:d4:d5:9a:bc:f5:8a:b5:cf:53:53:13:
32:10:b9:c8:49:f5:3f:42:ab:d5:c2:c9:9b:72:e4:
6f:75:61:51:6c:2c:91:c9:3a:f1:ba:20:40:f0:2f:
84:70:8c:17:ad:43:bd:58:8e:44:8d:8d:ff:f1:36:
df:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2C:29:95:A1:D6:87:6C:BF:A2:0B:77:01:AA:CB:6D:06:6A:FE:F4
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0a:39:65:19:e4:4e:27:1c:6b:64:a1:cf:aa:cb:20:49:97:
8c:39:46:7d:cf:97:9b:6f:25:fe:21:ed:0e:83:48:98:5d:3c:
c2:91:98:2f:99:a5:02:21:e2:a0:72:85:9d:c6:b5:2d:50:56:
45:72:ae:21:43:7a:1a:ee:70:73:4e:87:fc:6f:01:cf:8a:89:
24:8d:83:05:6d:be:75:57:c0:a6:fc:8f:60:de:f9:5a:7a:67:
2a:93:f4:4a:1f:5e:c9:01:80:09:2f:64:1a:1b:d4:9e:c3:62:
03:cc:f0:19:48:30:44:55:89:da:9d:dd:62:31:96:a0:15:8c:
8c:0e:b5:1e:22:7f:64:0e:c5:ba:c1:db:c2:0d:0b:98:cf:dd:
6a:32:77:01:a4:af:0f:9c:77:0f:da:bc:6e:3d:64:e1:ab:3e:
8a:39:84:48:84:93:51:59:a2:eb:92:fd:e0:61:d5:0c:e1:71:
f8:b1:b7:a9:0c:80:92:6a:39:64:63:41:34:84:40:79:68:7c:
f9:62:90:e3:a6:f4:0d:89:73:7b:51:83:13:f1:04:cb:95:b7:
de:59:72:91:0e:de:bd:22:33:8c:d3:fb:d8:30:4b:f8:cb:44:
39:e5:25:a5:5d:3c:08:c1:e3:c2:9f:38:3b:90:ce:69:30:f4:
cc:25:b1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:47:34 2026 by rpki-client