Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier: HLOzBqWoh8cBu+/1r2Lx/d6VwBvy2FVURBBQYthqJZo=
Subject key identifier: 06:2B:91:92:5D:0F:73:78:A0:41:5C:83:64:5E:36:A5:38:ED:47:38
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 01A0C6D7CAF1588B02544895679E180DCE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number: 19A5
Signing time: Tue 22 Sep 2026 02:00:25 +0000
Manifest this update: Tue 22 Sep 2026 02:00:25 +0000
Manifest next update: Wed 23 Sep 2026 02:00:25 +0000
Files and hashes: 1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: tjixMMLf290AYd5C724VU4vAgmXndfd+FhW7XPUfhZU=)
2: pZ2DG9liFeCKNbzetKHvN52UJO0.roa (hash: ngpoJdoTiDK1ogZAlMttmztrBQw9vwYksg/OwsA6X2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:ca:f1:58:8b:02:54:48:95:67:9e:18:0d:ce:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Sep 22 02:00:25 2026 GMT
Not After : Sep 23 02:00:25 2026 GMT
Subject: CN=062b91925d0f7378a0415c83645e36a538ed4738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:c1:bd:55:4e:b4:1b:93:2b:40:b4:ae:fc:
2f:26:92:77:97:25:8e:ae:aa:c4:b6:dd:66:0d:ca:
00:be:3b:29:be:bd:2d:0e:f2:d3:c6:9a:99:c7:32:
3d:13:d2:df:9e:1c:d3:32:5f:0b:e0:50:0f:47:67:
7a:71:b2:f4:6c:8a:4f:ea:75:5e:0b:54:10:56:62:
ba:10:a2:ff:87:58:57:38:ad:d0:b5:bb:46:fe:91:
11:53:8a:e3:de:5e:7e:45:b0:5a:16:0f:0a:b2:ca:
23:f6:3a:e6:c8:d5:79:a0:ef:1d:f7:62:65:ca:f2:
9d:1b:ea:16:ae:27:73:00:df:91:38:67:ea:9d:65:
b4:6f:63:3d:92:c6:8c:6f:f6:ee:ef:02:65:6c:59:
44:cc:84:5e:a0:5d:6d:e2:84:a9:d7:41:a2:81:23:
6c:01:8f:7f:0c:41:f8:9e:e0:34:40:17:92:22:f1:
1f:93:2d:90:92:a3:c3:b4:f7:28:e0:b3:49:27:ac:
31:33:d4:af:c3:c3:fc:4f:94:60:b1:67:53:6b:67:
04:14:eb:fb:c6:1d:89:4d:9b:69:77:bf:da:4d:d3:
f0:de:ca:32:f0:4a:f6:63:83:70:5f:6b:f1:b6:1a:
bd:fe:68:e2:84:bd:15:d7:d4:ba:39:7f:d7:6c:22:
d7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2B:91:92:5D:0F:73:78:A0:41:5C:83:64:5E:36:A5:38:ED:47:38
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:02:84:87:d0:be:e4:ee:a5:a9:38:53:f8:7f:15:ff:63:0a:
92:03:a1:d2:57:23:64:ac:f5:09:b7:5a:d1:f9:0b:00:9b:19:
5e:67:a2:59:2b:b2:c7:34:77:eb:68:0f:1c:b9:28:48:26:09:
e2:51:7f:fd:cb:12:c5:90:d8:90:74:99:a7:8a:16:75:c8:85:
3d:bd:27:18:20:8a:89:b8:2c:e2:c2:9b:8e:5c:7c:98:0b:cd:
e1:81:93:11:8e:e8:ff:27:a6:42:94:52:0d:3c:12:43:7d:e4:
7a:00:b1:dd:c0:b1:dc:f6:95:9c:e8:c3:1d:b7:e6:a7:be:b1:
45:2d:9e:7e:bb:c4:3c:e4:11:37:ed:fa:64:c4:14:c9:ee:aa:
ba:85:c3:98:82:45:ba:29:09:08:00:ee:9f:3c:4d:36:76:ac:
1e:84:67:0a:d5:49:03:f7:2d:db:bb:a8:b3:c7:59:f9:11:fd:
87:e0:2e:70:99:a5:16:15:6a:bc:47:b3:3c:5d:99:96:d6:47:
b8:ef:3b:a2:be:27:93:eb:b3:a0:8e:bf:d5:8f:17:e0:97:5d:
8a:aa:04:30:21:05:8b:3a:ad:c4:ac:67:64:a4:86:25:53:e3:
0c:21:22:fb:e4:e2:6d:a8:d8:46:a9:b3:03:d1:11:7a:53:87:
cb:d1:fa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:49:19 2026 by rpki-client