Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: yT4uu5wNt3kIsjN7VD0OmIeczBNYCmgFBjOKYUsM2xc=
Subject key identifier: 47:DE:29:8F:D8:2D:97:71:44:85:21:E7:73:7D:D3:29:79:11:22:9B
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 01A0D49465C86E11A3756B213A551C8AD515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 1A71
Signing time: Thu 24 Sep 2026 18:01:29 +0000
Manifest this update: Thu 24 Sep 2026 18:01:29 +0000
Manifest next update: Fri 25 Sep 2026 18:01:29 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: BLRUf6u/VhF/Bfoy38JJTf2u39Y5gy1n6HaWwcIezqo=)
2: BfP2bGOW8HthUfuXXggXfcuAbvE.roa (hash: dmLHFskk9KIm4+573JvglcI2K8WR/PAM7m+/RW2L1vs=)
3: pPHuomO4xh_m0S-r-_OhJE-mYVA.asa (hash: TKq6TnfE0FWP12xkoJvmUbR5i0X/fWByiH3vtL0RFrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 18:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:65:c8:6e:11:a3:75:6b:21:3a:55:1c:8a:d5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Sep 24 18:01:29 2026 GMT
Not After : Sep 25 18:01:29 2026 GMT
Subject: CN=47de298fd82d9771448521e7737dd3297911229b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:08:5a:11:8d:66:3d:f9:3c:a4:f1:4f:5e:11:
99:d7:b8:67:ac:ce:7b:32:80:3c:b6:7e:da:6a:6a:
b2:7f:57:95:06:4f:20:14:03:85:87:14:33:d7:9c:
8f:97:ad:cd:76:9a:e3:61:1c:15:c8:3a:c1:3d:2c:
5d:b3:6c:0b:9a:56:63:d6:2e:64:49:e7:4b:b8:9f:
60:35:04:9c:7f:9f:5c:8d:05:22:dc:8c:62:6f:24:
67:49:e0:2f:01:7c:e3:19:1e:6d:8f:c6:a5:d5:f1:
95:72:ae:cc:f3:c8:cd:f7:6e:04:9a:b0:ff:3d:51:
79:41:58:f2:a6:ca:d3:2a:b5:fc:2e:b8:02:7b:2b:
2f:d9:64:34:64:0e:ee:cb:4b:02:02:73:6c:bf:c3:
ba:d6:1d:c5:3c:75:88:05:1f:44:ce:d7:1a:74:03:
99:d0:bc:38:ea:1d:c0:09:1c:cd:c9:19:93:a1:43:
94:87:1d:12:78:e3:4a:0c:34:6d:4a:d5:32:0c:7f:
9d:72:57:c7:2e:a1:26:12:af:dc:50:7c:29:50:01:
90:a8:e0:80:d8:b5:92:f5:78:b7:26:de:ea:b0:c1:
56:5c:37:6c:f8:03:f3:54:eb:77:f4:a2:37:17:e0:
71:4e:2c:b7:ae:70:3b:ca:54:c4:b7:a3:5e:5e:7c:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DE:29:8F:D8:2D:97:71:44:85:21:E7:73:7D:D3:29:79:11:22:9B
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9b:f9:1b:6d:f7:9e:fe:90:34:bc:62:6d:47:13:4c:2e:d6:
03:75:4e:86:ed:8a:63:09:06:30:a2:74:0b:d7:3b:2c:79:1a:
0f:bb:6b:1c:8e:08:68:09:8f:2e:45:79:87:ef:9b:00:98:8c:
e3:0d:55:c7:9b:9c:5f:e2:66:fe:50:c5:70:dc:b6:0a:31:fe:
14:40:1c:8a:09:e3:cc:db:87:e2:c3:e6:40:ae:2a:26:e9:d6:
ba:e2:ad:57:80:33:30:0b:b6:97:bb:2b:e1:e1:e8:12:3d:7b:
6d:ce:99:f0:73:8c:b6:df:69:68:d9:82:38:22:2f:f0:21:25:
8a:83:8c:84:2c:a4:05:0f:56:d2:f2:a5:6f:10:63:ca:ea:61:
e9:85:a4:6c:bc:44:74:c5:71:42:d3:38:4e:90:38:e5:3c:e7:
81:97:17:73:7c:42:03:03:2e:ee:e0:a1:f7:7d:b8:45:3a:1d:
20:5f:f8:7a:d5:55:0c:09:d5:d9:9f:20:79:3b:ea:e6:96:f1:
d0:e1:1a:eb:ea:70:05:df:42:01:67:28:19:27:54:ae:9f:bb:
05:67:b7:2c:d4:5f:36:56:87:15:99:08:5d:83:3f:b3:e0:1c:
03:76:1a:b5:03:ff:55:69:5f:ca:9c:e6:8b:00:5a:30:af:e4:
52:fc:db:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:17:41 2026 by rpki-client