Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier: ZIvZQH+RvFd9mW/BACv3aKe/baycRpZrBCHOgP5/ofU=
Subject key identifier: 26:D6:09:7C:53:D8:AB:96:78:E9:92:53:DF:AA:E7:0B:F8:07:1A:28
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 01A0CFA3AF81B12A9C0D87C211DEE72F6FFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number: 09CA
Signing time: Wed 23 Sep 2026 19:00:05 +0000
Manifest this update: Wed 23 Sep 2026 19:00:05 +0000
Manifest next update: Thu 24 Sep 2026 19:00:05 +0000
Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: j452SHuf2AcYSZbNQI6JKEv6qpVSYlEujCk5ySGubng=)
2: Um8x4FnVBBKSkcy47VZrVv_LDxE.roa (hash: tfl71U6Q8ML7hqI6qdxoHZc1rgsYETV4BNFwPX3unlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:a3:af:81:b1:2a:9c:0d:87:c2:11:de:e7:2f:6f:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Sep 23 19:00:05 2026 GMT
Not After : Sep 24 19:00:05 2026 GMT
Subject: CN=26d6097c53d8ab9678e99253dfaae70bf8071a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:67:07:aa:a3:5c:39:08:bb:f0:25:12:21:fc:
ee:74:f6:63:33:af:1c:9f:63:29:42:5b:97:80:2e:
ae:b2:40:91:cd:e2:47:c1:04:c8:06:e2:b4:11:69:
56:19:eb:ce:5e:ec:f2:71:0c:5e:aa:0a:81:d5:c5:
70:32:36:66:9f:b9:0f:14:80:b1:96:b8:6a:37:f7:
91:19:68:7d:ff:48:2b:a5:c1:40:36:2a:6b:33:d6:
37:b9:f6:b6:e3:84:19:7f:8d:e5:87:d7:e1:0d:0d:
4c:87:da:38:71:77:5e:31:23:1e:fa:97:14:bc:c0:
06:80:85:fe:55:59:21:da:84:1f:fb:81:6c:01:fe:
e5:34:79:61:0c:9f:ee:44:2d:e2:76:9f:34:e1:19:
84:8e:93:ce:74:88:71:91:d1:c1:26:e1:8c:3a:b4:
7b:36:62:71:71:05:f8:9f:25:58:96:ff:57:ed:5b:
67:1a:05:7c:78:78:cc:2a:35:9f:21:d5:bd:49:4a:
cc:11:0d:d0:ac:d0:2d:ca:9b:d2:8d:d5:cc:2a:7c:
36:e0:67:df:aa:1b:b6:3f:73:49:b6:06:e5:8b:2e:
c9:8b:c2:0f:e1:df:67:ab:9d:0e:d7:07:d6:b6:59:
f9:9f:50:85:71:01:df:fe:be:00:5f:9f:af:18:72:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D6:09:7C:53:D8:AB:96:78:E9:92:53:DF:AA:E7:0B:F8:07:1A:28
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ee:f9:18:45:5f:1a:d5:c7:39:88:78:45:70:7d:b4:c8:64:
30:e7:67:55:88:4c:97:3f:df:15:bd:dd:31:7f:f3:e1:0c:0f:
a6:02:6a:33:61:fa:6e:f4:01:83:0e:53:8e:ab:9b:b7:46:fd:
5a:44:4a:a0:14:d5:9d:60:b3:e7:1b:cd:b7:37:9f:b6:48:5b:
9e:36:73:92:85:0a:33:8d:a1:20:c9:b8:91:b9:ce:d1:9b:82:
92:39:b5:6f:35:d7:27:3d:f2:7e:30:13:65:3f:bc:e8:8f:14:
30:e7:4e:71:b0:16:4e:fb:83:45:0d:0d:27:ed:05:72:3d:e0:
25:54:0f:2f:1b:dd:42:c9:77:cc:c2:61:02:39:24:52:b6:e8:
bb:7f:5a:be:89:40:69:a9:9d:23:7e:54:c6:6b:e0:77:d3:80:
9a:ae:70:12:95:dd:b0:6b:b6:eb:d2:71:a3:3d:7a:71:10:cf:
93:fb:b3:19:f9:01:cd:4c:90:d6:d2:bd:63:81:74:31:2b:be:
ac:57:e0:fb:19:9e:0c:65:53:8e:8b:8c:fa:e0:ae:3f:ed:e7:
c9:9a:f8:78:11:db:ef:7f:41:1f:d3:62:a9:9d:2c:f4:fd:72:
83:3b:d6:d5:ba:4c:c1:e8:d8:e5:d8:4d:6a:f5:a6:04:6d:d7:
0d:03:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:06:07 2026 by rpki-client