Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier: rYOfeQGOvYdLLHTvFDcCHT90Sx7zxaUfvqeXa4B21t4=
Subject key identifier: 86:9E:C0:23:20:04:BD:DF:FD:7E:70:7C:79:AE:05:61:66:A6:98:27
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial: 01A1DF1558CF39319556C334A20E3945676E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number: 07CD
Signing time: Sun 15 Nov 2026 12:01:20 +0000
Manifest this update: Sun 15 Nov 2026 12:01:20 +0000
Manifest next update: Mon 16 Nov 2026 12:01:20 +0000
Files and hashes: 1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: UfvCAxwIgCkRrWcJE7J6QlYzWTWUwsN59vyPgGJntsM=)
2: kAQRnXnn1bepnTjDte_6dOnnntw.roa (hash: fvCT2Eh+lUDVebIFnLuZITE86ooUogC2tmwd5l7+wO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:58:cf:39:31:95:56:c3:34:a2:0e:39:45:67:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Validity
Not Before: Nov 15 12:01:20 2026 GMT
Not After : Nov 16 12:01:20 2026 GMT
Subject: CN=869ec0232004bddffd7e707c79ae056166a69827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:04:32:1e:88:0d:29:79:6b:5a:f9:d6:5b:
6f:04:dc:de:31:ee:c1:cf:69:fb:6e:c0:ba:b9:77:
16:64:4d:8e:9b:e4:c9:2e:01:a4:2b:cd:8c:ca:95:
9b:b6:20:ea:fc:7c:2e:03:fa:a9:41:7b:e0:e5:48:
e9:dd:51:4a:55:22:8a:d4:05:c0:d6:b1:43:91:0e:
28:f3:0d:76:67:a2:de:77:8b:8e:66:16:1a:b8:e5:
94:37:0e:39:df:87:ee:29:38:1f:14:18:2b:35:bc:
85:10:30:b3:bb:16:6d:bc:dd:61:10:32:e1:95:ae:
14:b9:4e:e9:e5:72:e5:9d:81:86:96:b5:6f:7c:ef:
97:bf:73:12:64:ae:20:1e:d4:e1:c5:15:26:84:49:
8a:0e:1e:b2:94:9a:a4:8c:71:d0:18:f2:ae:1a:a9:
b7:e7:3e:29:b4:b5:66:50:fa:53:10:9e:80:4f:fc:
93:38:1e:5e:66:c3:9c:7e:9d:dc:c9:66:35:e2:fd:
28:a2:66:68:62:1a:26:a2:1a:7f:ba:5c:3b:80:42:
46:fa:ed:56:2b:6e:98:7a:f5:57:23:70:89:e2:42:
5b:5c:79:24:e2:49:26:0f:5f:79:b8:19:42:29:fb:
d9:a3:c3:4e:bd:ad:3e:ad:a3:d2:10:b0:ec:10:15:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9E:C0:23:20:04:BD:DF:FD:7E:70:7C:79:AE:05:61:66:A6:98:27
X509v3 Authority Key Identifier:
keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:89:d4:05:20:2b:1b:b6:b7:a0:8f:7b:38:94:6e:2f:bc:bf:
7f:34:53:ca:fb:31:b5:e1:30:84:35:f2:3c:ab:1a:4d:b3:29:
cd:25:81:7d:68:be:e9:af:0f:d0:df:8d:e6:b8:00:41:12:98:
c3:b0:dd:ec:b8:76:90:9b:da:8d:3b:58:a0:73:13:4a:b8:23:
54:04:a0:0a:76:a8:f0:0c:f1:73:91:c0:99:69:43:b3:d7:95:
2e:6b:a9:1e:84:d0:ef:82:ed:d5:82:73:ab:76:fc:b7:0f:c3:
f4:0d:43:58:5a:62:28:31:d2:1b:17:54:14:3b:0a:d7:2d:63:
33:25:fd:26:f8:27:60:1b:a2:7c:8f:a3:2a:6a:43:48:f1:e3:
e8:93:fb:35:5d:b1:21:7a:bd:bb:6d:69:3b:a2:c4:de:15:3c:
10:80:c5:0d:ff:7a:cd:49:6a:58:5e:92:ad:39:47:dd:e3:2c:
bf:b5:2d:2a:ae:d3:98:92:7f:c2:b9:31:6b:8c:05:5c:b2:bb:
50:a0:64:84:00:24:7b:5d:c9:72:69:3f:15:1a:40:19:b1:42:
50:15:72:bd:95:b0:56:1a:d7:10:51:b2:02:bf:c1:8a:78:39:
13:b1:7a:23:33:47:0c:ce:60:54:a0:4a:c5:f0:cf:d3:f8:20:
d8:1b:ff:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:03 2026 by rpki-client