Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File: 4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier: drpepOQ3vj3zeYr3TPPoI+jCUyNC3jRbcRFme2Bf0zU=
Subject key identifier: F9:EF:C4:D5:F7:10:25:27:B4:D7:34:AD:A8:2F:20:9A:AE:89:11:D9
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer: /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial: 01A0DB04BD09F5C78C837E1ECFD3CDDE4EFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 00:01:55 +0000
Manifest this update: Sat 26 Sep 2026 00:01:55 +0000
Manifest next update: Sun 27 Sep 2026 00:01:55 +0000
Files and hashes: 1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: /aNPSMbNR5T2vuA6bX/kCcs9qXsMIfmfY8e9wzc4ODE=)
2: EC4GBb1LJjJ7pV8_x0txKCEIXSg.roa (hash: 9oW73pfxOP8M7veC/PL5Kk4ZUA5njttoIdfA+gSwRO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:04:bd:09:f5:c7:8c:83:7e:1e:cf:d3:cd:de:4e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Validity
Not Before: Sep 26 00:01:55 2026 GMT
Not After : Sep 27 00:01:55 2026 GMT
Subject: CN=f9efc4d5f7102527b4d734ada82f209aae8911d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:a8:99:65:4d:05:1c:cc:16:41:50:78:ee:
58:37:ed:da:83:6b:5d:98:0b:5b:df:b3:52:cc:f3:
d5:37:8a:36:fa:ca:59:ca:2e:6c:9a:6f:21:d9:b2:
db:37:4e:89:e5:3f:7c:10:2f:18:be:33:4a:16:23:
1d:6b:2b:fd:a8:d0:40:92:77:28:37:92:3c:23:91:
cb:1c:69:8a:a3:6d:24:44:e4:4a:d3:a0:17:e6:0b:
cb:e8:b1:e3:3d:f1:73:0b:04:b9:62:09:60:21:19:
ca:82:92:25:10:57:e5:eb:9c:0d:14:ab:ec:e3:30:
22:b9:fb:e6:a1:cd:21:20:af:b7:07:2d:0c:c9:0a:
49:67:d4:39:e9:bd:d1:2f:95:50:9c:aa:b8:bd:a2:
88:bb:e2:f0:95:27:d9:8b:36:1c:34:a0:41:b0:64:
a6:99:ab:64:2d:4b:6c:6e:85:8a:fb:d1:2e:0e:f5:
f2:98:44:fd:d4:36:a5:6f:3f:8b:59:b2:76:4a:c5:
6e:d6:da:ab:f8:5a:69:d5:3e:e6:44:f3:98:e0:62:
aa:c7:57:78:13:59:2f:9c:5e:62:32:3f:a1:55:ea:
f0:24:7e:57:81:ae:06:80:d1:5f:7b:0b:fe:5c:19:
b3:d8:e6:83:08:57:c0:16:4f:1e:f1:b4:c2:4e:b0:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EF:C4:D5:F7:10:25:27:B4:D7:34:AD:A8:2F:20:9A:AE:89:11:D9
X509v3 Authority Key Identifier:
keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b0:d9:6f:7f:2b:bc:66:77:8a:dd:85:30:04:e4:8a:a4:60:
6b:96:c4:91:ff:ed:a3:d6:4a:a6:cb:64:6a:b9:5e:c4:51:84:
4b:fc:11:d8:de:af:f3:c0:2b:21:c0:54:80:2e:c6:a8:a1:d2:
53:d2:81:45:a9:d2:2c:7b:10:32:69:be:d7:a3:5b:fb:82:eb:
2e:71:05:ff:23:09:04:89:f6:2b:90:25:d6:71:e6:fc:1c:41:
5d:c9:c5:9c:ae:4c:fa:84:f2:ef:91:bc:0b:3d:2a:14:04:69:
a9:bf:f7:f8:9f:25:86:be:c2:2b:af:9a:ed:92:f9:51:c5:4d:
8f:e0:0e:c5:5a:71:5f:8a:b4:dd:34:82:c6:3e:e2:9d:b9:b5:
4d:d7:3b:22:2d:cc:5d:bf:e7:8b:5c:36:8d:d3:08:66:9c:63:
b1:ae:59:eb:49:b7:5d:b5:6a:40:90:f6:3b:e3:9f:1b:f1:6c:
b7:cd:87:9d:ef:bc:1d:40:be:f7:97:a4:9e:53:71:7c:58:dd:
f2:b2:84:36:8b:3a:5d:57:a9:78:1a:8d:5c:48:43:50:ed:86:
dd:9b:79:05:4f:e2:c2:2c:98:88:85:9f:08:df:9a:96:88:f1:
b3:26:b6:a1:01:81:fd:0b:03:0c:04:02:3e:55:d2:fd:29:76:
2f:d2:da:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:16:01 2026 by rpki-client