Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.mft
File: 4E7WArv2X18jlv2AlcPZhhRnQf4.mft (raw, json)
Hash identifier: Qs68cLF5YR8jTWJ5is8gpjYCF7cfsMNfQl+F4gkdRsE=
Subject key identifier: 1C:E9:94:59:BC:23:D5:BD:C0:55:A8:53:71:66:39:0F:C6:07:31:DF
Authority key identifier: E0:4E:D6:02:BB:F6:5F:5F:23:96:FD:80:95:C3:D9:86:14:67:41:FE
Certificate issuer: /CN=e04ed602bbf65f5f2396fd8095c3d986146741fe
Certificate serial: 01A1705CE462D0FCCEA4CA14623AE0260DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4E7WArv2X18jlv2AlcPZhhRnQf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.mft
Manifest number: 0138
Signing time: Sun 25 Oct 2026 00:01:38 +0000
Manifest this update: Sun 25 Oct 2026 00:01:38 +0000
Manifest next update: Mon 26 Oct 2026 00:01:38 +0000
Files and hashes: 1: 4E7WArv2X18jlv2AlcPZhhRnQf4.crl (hash: bk20w/L809MRNnMqe89RhLfsGbjndwgSrp+N8PAtyQ4=)
2: ZaoftZNK70ijBezF-hPekywKJp4.roa (hash: /YydUnIu0lwQr4MU0CkW6JlqBtskYtFFQEmrq4eHBP0=)
3: qS5pyl9pypw36FT-lbjeONyk28Q.roa (hash: 3XhF5aY0cvvvNLZA18eCkajF3VHk7yUuOdxjn+SLuVQ=)
4: w-g9EUxKOtgFE5rf6jRVRa8B7aQ.roa (hash: V67Y6C537HMNAsGY9bRCuGZ6echEOhzyPmdBPlRkQsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4E7WArv2X18jlv2AlcPZhhRnQf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:5c:e4:62:d0:fc:ce:a4:ca:14:62:3a:e0:26:0d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04ed602bbf65f5f2396fd8095c3d986146741fe
Validity
Not Before: Oct 25 00:01:38 2026 GMT
Not After : Oct 26 00:01:38 2026 GMT
Subject: CN=1ce99459bc23d5bdc055a8537166390fc60731df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0a:38:93:4d:c1:b3:53:d8:71:a9:b9:d7:ac:
03:5a:16:e4:9b:87:d2:55:74:62:d5:59:83:ea:fb:
af:6e:4f:db:64:3f:29:bf:3b:23:fc:0c:99:8b:a4:
22:0a:d8:c5:58:be:3a:16:5b:ef:6c:fe:c1:5e:82:
ab:35:6c:1e:29:ba:d1:8b:ac:47:bb:09:96:f6:38:
e4:9a:9c:e1:07:5b:b1:60:c9:65:b1:58:85:65:5f:
23:df:d9:53:d5:09:5b:12:2f:57:63:ef:61:4c:07:
d5:b1:36:ac:6e:34:c7:b1:b8:da:58:14:6b:64:65:
7d:5b:de:bd:9f:26:3e:d5:a8:03:72:45:7f:cb:22:
11:bc:f4:7a:cb:a4:9a:9f:33:a1:14:37:6e:63:d6:
e0:6a:d0:ac:3b:8a:14:26:42:25:5c:fb:38:bd:2f:
fd:5e:be:28:45:fd:a8:2b:99:4f:d7:e2:d4:27:ef:
45:5b:2e:0d:67:3e:27:c2:fb:3a:7a:53:57:17:e9:
84:24:2d:43:b6:a2:47:15:82:23:49:fc:48:7e:e1:
51:b7:2f:02:8a:9a:9d:09:7e:c3:29:4c:64:f1:f8:
8a:e0:41:3b:39:fd:a9:d2:21:e0:06:dc:59:c4:b3:
1a:26:b0:b2:c1:e9:bc:1f:a6:f6:df:de:92:69:f9:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E9:94:59:BC:23:D5:BD:C0:55:A8:53:71:66:39:0F:C6:07:31:DF
X509v3 Authority Key Identifier:
keyid:E0:4E:D6:02:BB:F6:5F:5F:23:96:FD:80:95:C3:D9:86:14:67:41:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4E7WArv2X18jlv2AlcPZhhRnQf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:7f:a6:09:87:8a:a7:5d:09:86:0b:b6:93:78:a1:2a:6c:7c:
b7:ce:61:33:f2:36:ab:4f:1b:fa:7f:bd:90:9b:68:5a:98:eb:
83:b5:a3:86:65:c4:6c:00:e7:24:ba:52:b7:35:b7:22:7f:4d:
31:f5:4a:65:26:e6:8c:f9:ed:7d:4e:62:18:f1:1c:c6:ad:88:
2d:df:b8:ac:6a:a7:84:c8:9b:47:3b:c8:36:67:3e:02:42:d4:
ad:5c:24:eb:62:05:43:14:a9:77:2d:7a:4f:dc:7e:f9:b8:79:
a6:fa:e7:4b:e8:9f:fa:b5:e4:f2:2c:97:ed:2c:da:29:4a:41:
89:a7:14:e1:dd:34:2f:31:f1:7e:57:29:67:81:b9:36:5e:4a:
bf:77:28:d1:13:dd:1b:5d:ee:51:0a:3a:fb:f1:f6:82:e1:a4:
cd:c5:de:21:67:d0:f7:aa:22:fe:11:56:a1:18:34:ce:3c:68:
83:ab:f8:51:8c:14:66:34:c6:61:b5:ed:ac:49:16:de:b2:03:
9b:d3:20:4b:5e:ff:40:00:64:d2:0f:cc:40:2a:83:2d:38:0c:
00:38:22:31:3b:1e:b4:58:62:ad:d2:2b:e7:b8:c1:4b:20:0a:
85:db:75:d7:23:c2:a7:9e:1d:27:19:69:62:86:99:8d:aa:c5:
46:c5:16:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:06:05 2026 by rpki-client