Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier: Bf0rjXpS8g6UNkVc4e1lHt+5FA7arGlMNP///LvM7c0=
Subject key identifier: 96:4A:DA:4C:F6:66:0E:A9:6C:17:88:22:A1:2B:1D:81:7C:78:C8:28
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 01A0C17AEDC766EA56F91B5472073D9BC4DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number: 1A65
Signing time: Mon 21 Sep 2026 01:00:54 +0000
Manifest this update: Mon 21 Sep 2026 01:00:54 +0000
Manifest next update: Tue 22 Sep 2026 01:00:54 +0000
Files and hashes: 1: 1-No8JnCXoZmNvwGOuPwKrmYYJ6c.roa (hash: 2kZ069SCXyvjYNeKIO+pvEFPTW/9AX8f/8u5tWS3u3U=)
2: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: G2ORm+oa4UKeEE+U3uv4V59AYyEGrp3yORZ9k23Nxfs=)
3: BW5S5s1xvxdYeismlznCSfBL2yI.roa (hash: EtWeWpCD+suUmysPule/ohTEye/jj6Q4dBOVaR6L3gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:7a:ed:c7:66:ea:56:f9:1b:54:72:07:3d:9b:c4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Sep 21 01:00:54 2026 GMT
Not After : Sep 22 01:00:54 2026 GMT
Subject: CN=964ada4cf6660ea96c178822a12b1d817c78c828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:23:a2:86:de:66:da:8d:da:c7:1a:7f:04:
92:85:10:59:47:71:15:76:16:4c:de:19:d7:18:24:
c6:a8:cf:e5:4a:cb:47:35:14:20:2b:8b:a4:a7:e2:
22:67:13:bf:03:7c:a1:21:d9:e5:73:25:c7:18:c6:
39:e5:86:cc:81:59:01:01:28:0a:f6:6a:dd:b0:22:
e4:48:a9:d5:60:35:87:dd:81:7f:24:40:c8:a9:67:
2f:94:96:5e:79:bc:17:01:40:e7:ba:c8:ec:ce:eb:
db:df:fb:99:8d:3f:e1:0a:af:f3:33:3d:db:c3:f1:
1c:af:7a:e6:69:85:17:c1:09:81:36:e1:c3:ea:21:
6f:ab:05:88:bc:f9:6c:2c:a3:e1:44:34:7d:ac:7b:
a3:9f:31:be:11:64:ac:02:5b:50:90:c0:23:7a:ab:
e6:8d:c4:67:28:af:3b:ed:24:3c:f5:8e:4a:71:77:
75:21:31:dc:a5:79:62:cd:d7:de:98:3f:e8:43:21:
b5:4c:52:50:33:c4:28:3b:16:a9:f6:02:f2:27:a0:
70:ea:5f:d4:26:da:89:58:d6:d6:ff:33:4b:23:61:
94:16:d8:50:15:44:87:72:f6:43:d2:f8:ef:c4:d3:
f0:26:c9:ac:67:47:9d:00:4b:d2:0b:33:2b:2f:73:
de:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4A:DA:4C:F6:66:0E:A9:6C:17:88:22:A1:2B:1D:81:7C:78:C8:28
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c5:84:ca:d6:f4:0c:7f:21:b8:4e:8c:4c:c4:64:cc:24:24:
87:3d:58:17:c9:05:8b:9d:5c:61:fe:19:4b:4e:f4:8f:e0:ae:
11:32:dc:24:38:aa:05:ae:70:0f:b5:7d:d7:bd:12:29:84:2e:
f5:1c:13:90:5a:f8:ef:6b:29:91:25:98:59:dd:03:d7:fd:72:
75:c7:0a:94:b9:f4:dc:2c:47:7b:b5:ac:d3:5b:45:8a:0f:23:
92:14:01:8b:9e:73:cd:3a:a2:db:eb:10:f3:01:80:16:36:e4:
81:53:8e:ef:51:e9:ca:4a:04:1c:94:b9:e1:83:41:6a:2e:18:
dc:23:59:f2:db:82:6e:92:33:8f:64:40:e6:a2:86:07:39:4e:
02:b5:0b:33:b4:95:82:5b:78:cc:b7:73:ab:57:cb:b6:8e:96:
ba:00:64:1f:34:1c:83:1f:27:10:e2:34:74:c7:59:54:65:85:
3a:ae:dd:20:b3:ba:c2:9b:19:64:70:4b:37:89:97:3d:d0:0a:
18:dd:d9:25:92:8d:2a:d0:4a:8f:d2:7d:48:da:aa:68:e6:fe:
ed:57:00:ac:c9:7c:72:6e:95:e4:ec:6e:90:54:69:ae:99:22:
e2:7c:d9:d1:44:e3:22:bb:bb:0a:27:83:e4:c3:af:4a:82:8d:
85:b1:69:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:09:46 2026 by rpki-client