Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: XxjVw8QcLUV0Vk8vrjHyh2Tx/bP2psQRMQYoWtqDZS8=
Subject key identifier: 4B:F7:CA:1F:18:71:4B:B1:48:0F:A5:45:7B:32:07:7B:52:80:86:38
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 01A0E8893876F5D486810DC1E2BA34CB4CFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 1387
Signing time: Mon 28 Sep 2026 15:01:42 +0000
Manifest this update: Mon 28 Sep 2026 15:01:42 +0000
Manifest next update: Tue 29 Sep 2026 15:01:42 +0000
Files and hashes: 1: GSWx0hsgl2HZ3hZKjw9zmZ1zR0c.roa (hash: 5iJBSAVI32wYt0M+SbccAMVEuoqi4ABnZUSN/2LAKP4=)
2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: Rpf+tSrOT3EB1NdzpJzA9JJHT6djvDHQqghW48hBszM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 15:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:38:76:f5:d4:86:81:0d:c1:e2:ba:34:cb:4c:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Sep 28 15:01:42 2026 GMT
Not After : Sep 29 15:01:42 2026 GMT
Subject: CN=4bf7ca1f18714bb1480fa5457b32077b52808638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:c1:5a:e6:c0:11:ab:1c:37:4e:9b:49:62:
70:5a:01:ae:94:14:38:aa:9f:8f:56:bf:b2:5c:70:
c1:12:9d:e1:f5:93:65:33:37:96:9d:81:d6:1a:1c:
75:79:87:32:52:71:db:f5:71:b4:83:bd:69:af:6c:
0b:50:56:9e:5b:98:4a:e7:c9:08:cb:d5:77:5b:7a:
cd:0d:05:6b:0d:0b:50:00:13:d3:3a:c6:7b:d5:ab:
48:e2:5e:9e:3d:31:0e:53:8a:33:48:90:8d:c7:cd:
2f:23:25:87:41:36:d9:79:fb:e7:9f:4d:38:77:d0:
e7:c4:98:72:bf:88:37:d5:41:56:8c:c5:06:b6:83:
21:bc:58:a2:17:87:ca:d6:76:11:53:cd:e6:ba:00:
44:52:c1:d8:fe:df:85:7e:54:15:4e:29:d3:60:62:
14:5a:89:44:a9:58:a2:de:25:c0:ee:24:18:7f:60:
40:81:37:c5:f1:cb:2e:fd:48:b5:4b:4f:4f:ee:5a:
92:8e:25:24:d4:89:15:17:b3:c1:02:27:f2:55:58:
7a:7e:20:99:c4:02:70:c9:aa:29:fd:a2:01:42:33:
82:e5:6f:18:4b:a8:c8:61:f6:cd:c9:7e:1e:7c:98:
eb:d2:99:9d:70:d7:c5:a0:b7:0a:71:cf:46:4e:5c:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F7:CA:1F:18:71:4B:B1:48:0F:A5:45:7B:32:07:7B:52:80:86:38
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:27:99:46:e8:4b:17:f9:33:6c:8d:6f:45:f1:1c:7f:00:9d:
a9:80:a6:b0:a7:e9:a3:7f:b3:02:f6:e0:c1:65:60:40:d7:27:
78:b8:7c:5e:ab:fe:0e:3c:0c:89:8c:c0:f3:0d:24:51:4d:b0:
ec:b8:2e:d1:41:15:45:8b:fc:16:eb:61:29:d7:a5:cb:2e:be:
48:0b:0b:27:d5:ef:8a:8f:e2:80:7c:fa:e3:75:20:b6:3a:0e:
41:56:cd:f8:16:6f:b9:13:13:ef:76:68:2a:47:6e:9b:a1:36:
c4:b8:87:0f:47:4b:5a:bc:e5:be:9b:e0:cb:82:a7:d1:47:37:
05:7c:a6:84:25:cc:c1:18:f3:49:d0:3b:25:f4:ea:80:98:25:
34:61:c8:2b:52:d2:13:b8:e3:e7:67:e5:0e:f7:29:06:de:c6:
2a:6b:27:de:6c:6a:7b:a1:e5:e9:c7:e3:05:8d:19:bf:42:0e:
9b:13:8c:32:46:e5:88:3b:f8:f3:f1:7e:82:c4:28:d5:59:44:
d9:62:b9:52:9e:64:5e:08:64:10:bb:73:70:fa:53:9d:6d:d9:
8f:11:c7:fd:24:f8:af:12:f9:15:b5:fe:49:48:ae:d9:4c:35:
c4:0a:7d:44:c2:f0:15:94:a5:c2:60:9d:cd:27:86:32:e2:0b:
1b:ea:92:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:24:35 2026 by rpki-client