Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: 5tz5wuPPg5PzSRu8/qVv5H4I555yjZ4S5zGwzYz7mGo=
Subject key identifier: A1:6E:98:AA:32:80:65:C2:41:5C:06:48:20:F1:EA:77:3F:09:6C:00
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 01A0D5021021E43E8EB720BB2D20C4348684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 0859
Signing time: Thu 24 Sep 2026 20:01:17 +0000
Manifest this update: Thu 24 Sep 2026 20:01:17 +0000
Manifest next update: Fri 25 Sep 2026 20:01:17 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: bbHrxdhJ18KJGsON9BiLePNx5g0FPpAcG4l0YV3XpAE=)
2: jm7CLkDkWjLyx0drk5u0jmFrhNY.roa (hash: ammB/HZj8/N3/UAaLNlwGxNZkAQiwMa1PgzKQkDpB6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:10:21:e4:3e:8e:b7:20:bb:2d:20:c4:34:86:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Sep 24 20:01:17 2026 GMT
Not After : Sep 25 20:01:17 2026 GMT
Subject: CN=a16e98aa328065c2415c064820f1ea773f096c00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:6b:94:90:10:ed:bc:9e:68:3a:5d:ba:05:
45:14:c0:21:67:12:11:a7:6d:88:17:e0:47:4e:51:
d6:6f:c7:71:14:b7:5d:46:a2:41:42:6f:fe:3a:dd:
b1:c5:31:cc:83:b7:fb:49:44:ea:70:cc:a9:9c:25:
7d:69:3c:3f:70:b2:96:22:30:dc:5b:2b:7e:30:76:
e4:f4:63:71:bc:2f:20:52:7a:13:29:12:89:84:06:
80:a3:0c:8a:23:1b:25:55:8b:85:f8:b0:43:99:80:
c1:42:bc:c7:bb:f7:b4:5d:7a:d6:96:3b:63:d6:c6:
61:5d:e9:2a:f5:fe:f1:0e:82:4f:f9:fa:08:c2:5c:
24:95:a5:38:20:d5:c3:18:7f:e4:de:d9:4f:1b:73:
6f:93:e1:2f:70:12:8c:eb:7f:13:d8:57:25:73:a4:
f8:3f:f4:37:e7:32:a4:73:9b:9b:48:48:b0:b2:4c:
a8:53:e4:6c:59:62:e1:98:65:db:18:68:28:b1:b0:
b7:25:d9:10:c8:c1:3b:04:72:a0:a9:73:39:c9:7c:
43:8c:a7:44:49:50:47:3c:75:c7:33:3e:3b:18:0d:
d5:ae:6b:11:fd:ce:39:65:aa:d1:af:60:0a:93:3a:
14:38:25:d4:bd:55:69:1e:24:d9:bc:2f:69:c1:8b:
53:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6E:98:AA:32:80:65:C2:41:5C:06:48:20:F1:EA:77:3F:09:6C:00
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:82:53:da:53:a4:e6:70:f0:3a:db:c7:2d:cd:65:85:df:c9:
a8:45:96:b6:47:d4:7a:2f:22:92:d4:4c:3d:ae:b3:f9:66:d7:
9e:61:c7:68:83:b4:03:82:10:ed:58:bb:37:f1:6c:ab:f4:17:
56:79:ac:71:1f:ad:58:6e:d1:e1:09:94:ef:bf:d0:35:34:94:
18:3b:fe:e5:a9:36:9f:f7:33:55:50:cd:89:2a:4d:4b:1f:bb:
e7:f9:ad:39:13:f7:77:9d:82:5c:c4:52:e8:7e:cf:bb:ef:1e:
a0:30:35:81:fc:1a:6f:42:b2:c2:62:cd:53:35:a4:69:bb:21:
5e:5a:d4:24:94:56:11:0e:fd:e5:82:3f:7c:05:97:d9:fd:8d:
1c:29:9f:6d:e0:39:ad:78:d9:e0:22:2c:0e:ef:11:a0:17:50:
09:b3:92:81:87:53:f5:ec:8e:db:52:a0:49:4b:d2:f5:20:99:
97:7a:fc:d6:68:74:98:b4:19:b2:0a:dd:65:71:07:7a:1b:18:
56:0c:48:57:90:7d:29:d7:30:0e:a7:cb:40:8e:0e:e3:c3:ea:
76:de:1b:b4:9b:7d:4b:ca:8e:b6:45:cb:08:fe:f2:3f:c1:5c:
f1:71:43:13:d3:9d:7b:a7:48:91:bc:d3:1c:9f:fc:e5:74:ae:
a0:50:c6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:08:07 2026 by rpki-client