Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: 7KoKd4v0X0VgOy776Fe436Xmmxx5Ljzq95e1uSVcbxE=
Subject key identifier: 49:8E:69:37:5E:C1:ED:C9:01:69:BF:9C:B9:48:04:E4:93:A4:A4:48
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 01A1DE713779497927E41D3626FF592641CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 1B02
Signing time: Sun 15 Nov 2026 09:02:04 +0000
Manifest this update: Sun 15 Nov 2026 09:02:04 +0000
Manifest next update: Mon 16 Nov 2026 09:02:04 +0000
Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: +ldcEWWtaYdqPXgsxmC9kBdT10479CaG/zo3gN5+nW4=)
3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:37:79:49:79:27:e4:1d:36:26:ff:59:26:41:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Nov 15 09:02:04 2026 GMT
Not After : Nov 16 09:02:04 2026 GMT
Subject: CN=498e69375ec1edc90169bf9cb94804e493a4a448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:5e:15:4a:6e:d5:a5:f8:3c:93:fd:de:0b:
bf:34:69:e1:63:07:3d:4f:8d:5b:89:17:42:58:65:
9b:cc:10:61:84:4b:04:93:36:1b:78:2b:40:60:dd:
e5:25:9d:6f:4d:b9:4a:4c:7a:e6:1e:3c:11:71:64:
c2:10:43:bc:a3:3f:11:5c:25:b7:fb:61:53:ce:b6:
c4:20:24:85:77:e8:c4:c1:b8:e5:e4:a8:d3:0e:db:
1f:70:8c:8f:de:07:e6:cd:cb:86:da:f5:cf:b3:e3:
c7:a2:a5:a1:7c:c8:41:50:d7:df:c1:fd:52:5e:95:
2d:76:b7:77:c5:25:fd:b8:cc:ca:ed:87:16:8e:7f:
08:f5:56:aa:97:b5:c0:91:ec:9f:9d:b8:d7:ef:15:
52:da:12:b0:cc:e4:b5:f9:2a:11:93:55:6f:ba:61:
22:b8:f0:c4:51:fa:dc:71:81:ab:26:18:65:b2:d6:
9e:68:38:63:cc:81:5f:71:c2:f5:89:a3:71:85:78:
0c:f7:f1:5f:ee:52:7c:5d:86:f0:8a:7b:5b:6c:8a:
79:00:a4:68:e2:33:56:fc:91:28:ff:d2:bc:00:d5:
72:5a:3d:54:bb:7c:ea:fb:85:2f:e9:1a:42:ee:f0:
44:47:18:f8:ad:ef:b3:d1:cf:f7:97:c5:26:8b:c2:
27:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:8E:69:37:5E:C1:ED:C9:01:69:BF:9C:B9:48:04:E4:93:A4:A4:48
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c7:5b:fc:ad:ae:a8:2f:2b:db:28:2c:bb:98:99:1f:fa:71:
eb:d8:f1:b4:2d:64:92:d4:75:20:78:2e:a9:c1:82:ba:f0:01:
f8:3b:d1:1d:f3:6d:15:63:63:d2:54:45:f0:b5:f9:d8:24:0e:
0b:a0:a0:b2:92:a1:26:03:bb:f9:8b:a4:0c:1a:1d:89:a0:2f:
00:72:78:96:6c:d3:3b:93:a6:78:8a:47:69:92:5e:fc:4a:6d:
ee:6d:c1:75:a0:4d:66:85:a0:50:8f:3f:63:be:bf:b7:b9:6a:
b4:3c:37:14:b9:a2:06:d6:f7:3f:3c:02:d9:3d:7e:0d:80:c0:
7d:fa:3f:f6:71:85:05:15:14:ab:e0:26:0e:a9:4f:f7:23:43:
2a:1b:46:94:31:0a:37:24:5a:df:9e:12:30:5f:08:b8:9f:f8:
36:23:cd:0c:2b:1c:4a:c7:40:9b:1c:b3:35:2b:a5:2f:86:a9:
5a:ae:c5:c2:e0:14:f1:73:cc:6f:83:6b:74:b7:29:fa:be:62:
c0:22:f9:fc:97:d8:ed:92:15:8d:0d:59:99:68:f3:f4:dc:e9:
1d:19:1a:18:3e:bd:23:3a:7e:24:3c:a0:02:36:da:53:21:66:
bc:77:7b:89:30:77:bd:be:e8:3d:b7:8c:f0:ed:e1:8f:68:ff:
93:b0:76:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:44:27 2026 by rpki-client