Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json)
Hash identifier: 8ubDJ9KRBIsqhnfRAxycRi20UF8jNgl0ZlFpCa3uLeU=
Subject key identifier: 97:4B:5A:62:B0:40:0C:2D:03:81:41:E2:AB:C6:B7:02:7A:9C:53:3E
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 01A0C5C547812E723A2C1FCB3B61EDC30333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 21:00:35 +0000
Manifest this update: Mon 21 Sep 2026 21:00:35 +0000
Manifest next update: Tue 22 Sep 2026 21:00:35 +0000
Files and hashes: 1: 3VLJL7-f2gIaDHt9s5O08zvl02o.roa (hash: nvn//iDJID27yb0p4DmlRMNLDXzJBDmTCGYaGUQJ1lA=)
2: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: s6k8bBmjvqzqk11kOI/5LyLV6vME2+PYuWVPv78l2Do=)
3: AK-YlCPEVbLAZegzYkNrI96Oefg.roa (hash: TQp9SWZ90VsXFNcjm672V8NJs6N2oP9XQNZuCEin7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 21:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:c5:47:81:2e:72:3a:2c:1f:cb:3b:61:ed:c3:03:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: Sep 21 21:00:35 2026 GMT
Not After : Sep 22 21:00:35 2026 GMT
Subject: CN=974b5a62b0400c2d038141e2abc6b7027a9c533e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:17:5a:43:7f:25:7b:40:25:d1:33:87:5c:92:
80:a9:d0:b2:b1:d8:9e:91:09:44:12:86:6c:3f:40:
d7:4e:02:c0:6b:19:6b:41:55:a2:d0:57:69:44:6e:
04:39:37:fe:81:f4:3e:d3:e7:7a:86:af:dc:9a:d0:
f9:ac:16:44:9d:b8:22:b0:77:ee:64:27:5c:04:a2:
5d:5f:8c:4d:fc:09:87:cc:06:bb:b1:61:65:b7:3a:
71:e1:6c:2d:71:d2:86:5b:98:16:47:1c:70:0a:e7:
c5:b9:c1:a1:63:93:ef:c9:74:ea:1b:77:1c:0e:59:
4f:b3:d9:eb:a0:6a:d2:00:60:d4:97:0c:12:1a:c8:
eb:47:bd:78:0a:b6:e5:ae:30:a2:c2:23:36:63:95:
8b:bc:3a:6d:1e:6e:d0:b2:3c:64:68:2d:9f:d7:22:
f2:43:bf:c2:35:71:ad:58:bc:47:35:20:25:8b:26:
02:ec:97:fb:9c:46:aa:df:06:ed:3a:a6:32:62:d7:
f4:31:1a:15:93:36:50:11:bc:99:82:62:e5:84:3f:
72:d0:6f:07:0f:7c:07:a2:d7:61:fc:84:cf:d7:51:
c4:0f:20:7e:e6:79:b6:f5:a7:c8:e2:44:c9:dc:7a:
c3:36:ba:34:c9:8b:f1:c1:25:f4:cf:11:62:3b:75:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4B:5A:62:B0:40:0C:2D:03:81:41:E2:AB:C6:B7:02:7A:9C:53:3E
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ea:03:e9:cb:b1:04:88:cb:56:6c:79:25:1a:99:42:30:78:
bd:1e:26:ca:44:29:1c:3b:9f:c8:8a:70:76:2f:ec:fb:63:b1:
c0:f3:a2:bb:fa:43:cc:fc:07:e0:9f:b2:95:bb:f8:cd:7b:36:
21:e8:64:37:5f:ca:5b:54:a1:b9:b2:55:71:a0:12:44:0a:ed:
8f:43:80:a4:1e:18:29:4d:05:87:9d:cf:83:d5:f2:fb:2d:3e:
4f:d0:da:66:fa:2c:ce:db:cf:bf:0d:9d:e4:90:6b:9b:b3:49:
74:47:07:b0:1f:40:86:13:7b:87:8b:0d:f3:cf:61:f1:45:8a:
04:9f:df:2a:f6:52:27:2a:78:78:d9:8e:94:60:69:25:a3:25:
5f:01:57:d1:a9:93:15:2d:37:28:00:ad:8e:e3:71:c0:2b:be:
a7:e7:f9:eb:d5:a8:b9:26:ad:8c:3f:65:d6:52:9d:db:d8:fe:
72:ec:bb:d6:cf:0b:5d:6d:81:06:39:c0:f7:10:55:d9:5f:b4:
9f:02:8f:60:2a:7b:59:08:69:b4:69:a4:c4:29:b4:25:62:68:
3e:f7:b2:27:ef:b8:31:77:2d:4f:48:df:98:57:53:7d:92:c1:
de:73:75:20:0d:76:6e:6e:82:7e:05:73:22:23:0b:20:ee:d2:
62:c1:ce:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:33:28 2026 by rpki-client