Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
File: 4TbBQNV8BgOYHZBG1McqrcZJe48.mft (raw, json)
Hash identifier: s1z4YTEIhQ8fKzdMS3/+4GI3rnHo9lIICkas3yf9xl4=
Subject key identifier: 61:C6:59:EF:5D:A2:8A:43:28:1E:00:66:4E:E8:A8:CF:88:64:E8:4F
Authority key identifier: E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F
Certificate issuer: /CN=e136c140d57c0603981d9046d4c72aadc6497b8f
Certificate serial: 01A17325EFB9CB4867A54D8E41366FC85C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
Manifest number: 024F
Signing time: Sun 25 Oct 2026 13:00:28 +0000
Manifest this update: Sun 25 Oct 2026 13:00:28 +0000
Manifest next update: Mon 26 Oct 2026 13:00:28 +0000
Files and hashes: 1: 4TbBQNV8BgOYHZBG1McqrcZJe48.crl (hash: DbGzXHIAXSRxJmZodN40ukZH208ESL4/wWRUsKAkrs0=)
2: flO6XJpnIFOsdZyjDNefmOQ-G_w.asa (hash: MR9nPjOlXBd3N+fXKFHrapKtNEWrnTEaOnHmqRgXcfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:73:25:ef:b9:cb:48:67:a5:4d:8e:41:36:6f:c8:5c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e136c140d57c0603981d9046d4c72aadc6497b8f
Validity
Not Before: Oct 25 13:00:28 2026 GMT
Not After : Oct 26 13:00:28 2026 GMT
Subject: CN=61c659ef5da28a43281e00664ee8a8cf8864e84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3c:69:5b:fb:2b:ce:bd:e3:8d:66:ae:34:ff:
83:1f:e7:cf:ac:e4:96:56:3e:b9:cd:1c:fd:fc:06:
22:ac:40:b8:18:c6:a6:9f:0a:6a:56:23:55:8c:1c:
f1:ac:86:81:e2:ee:41:c1:e9:5e:9c:53:66:ef:92:
82:ca:86:92:6c:ae:5b:fb:9e:ea:b8:a7:49:52:a5:
4b:26:24:40:d7:81:9b:9c:c0:f6:c5:fb:94:96:a0:
66:8d:f7:df:98:c5:aa:56:fe:29:ab:6d:d0:4b:a6:
a7:de:11:ce:61:ca:5f:2d:80:0d:ab:41:1d:1c:fb:
42:3e:3c:c7:7a:ff:91:b6:dd:78:cf:86:f3:b2:48:
ad:09:71:ae:6c:a1:10:01:1e:03:2e:96:42:e2:8d:
12:28:a4:13:47:96:a4:c6:03:b6:24:05:30:07:e9:
5c:cb:b3:a2:e4:b0:0a:0c:86:fd:41:8b:60:8f:8e:
15:f3:32:b7:0c:07:57:35:52:28:f1:e2:89:f2:08:
d0:be:32:9c:2a:4d:00:3c:e8:ad:b2:ba:11:c4:a5:
b0:e1:47:59:04:52:45:e6:11:72:be:4a:5f:6b:57:
94:9a:83:0b:d8:8c:a7:29:62:1b:ed:ea:49:a0:19:
2c:39:2b:ab:a1:6d:ed:51:a8:3e:f6:9c:d3:c6:95:
e4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C6:59:EF:5D:A2:8A:43:28:1E:00:66:4E:E8:A8:CF:88:64:E8:4F
X509v3 Authority Key Identifier:
keyid:E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8c:c6:15:13:49:03:72:72:b2:0e:e0:d0:26:2c:a8:5e:93:
17:a5:a4:cc:7c:1f:bb:bf:a5:d6:20:33:6d:de:09:7c:f8:0e:
ff:43:8c:fc:18:42:93:8d:9e:f8:cc:cb:a5:8b:7d:8a:6b:99:
fb:df:90:27:ac:d8:07:75:f6:80:74:dd:ab:d2:55:38:d7:44:
4a:f2:2e:d3:5e:0d:8f:0d:7f:56:75:2d:b0:2f:af:8a:3e:ac:
75:ba:a1:6d:bc:4f:52:0f:58:9a:73:f5:a0:21:f3:e6:28:9e:
8a:07:ee:f6:87:6d:b7:69:c5:33:14:80:de:6a:e4:23:8e:f3:
7c:e9:da:ae:ea:d9:c2:ec:13:00:10:58:d8:04:e4:ba:34:81:
4e:5b:1e:b9:dc:30:96:61:f0:39:21:50:ea:ee:10:61:f9:d9:
bd:6a:a1:ab:7f:ac:4f:50:49:a2:7e:f5:10:62:a2:6e:c9:46:
18:08:99:49:25:91:9a:7f:0b:bf:8b:1a:f5:ad:9b:5e:ca:cd:
d5:b3:c0:7f:f8:f3:be:e4:fe:36:80:3d:4b:07:a1:27:a9:63:
b7:aa:fc:12:59:cd:c4:b3:95:1d:ee:90:d6:c6:75:df:03:ba:
76:9d:1d:ea:4c:45:ed:35:6c:73:d1:ef:94:9a:39:d9:23:6c:
de:2b:be:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 23:09:45 2026 by rpki-client