Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
File: 4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json)
Hash identifier: P0IzBDaWogDcFsWUCnKxqRUFWiaB3M37rkGEuhsGyso=
Subject key identifier: A0:39:84:C1:B2:B4:A7:E8:FB:32:FF:25:E6:8E:08:90:B1:6B:3D:49
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial: 01A17100B42C14BEDE88DDB54E7B6464B0BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
Manifest number: 16EC
Signing time: Sun 25 Oct 2026 03:00:33 +0000
Manifest this update: Sun 25 Oct 2026 03:00:33 +0000
Manifest next update: Mon 26 Oct 2026 03:00:33 +0000
Files and hashes: 1: 1-TdHN98FGVFEolCtJz5D4Qn8oUU.roa (hash: XtPiDy65/rIGNdB1DOR8MKSXwZBD4oJVNpwQPU3xeNQ=)
2: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: g6RgGq/2wTepO6kLaL635P0fHQpC4hqyMmB7V1d+QVU=)
3: RWwBA-mE5T1DeX90DO491TVULLY.roa (hash: MNPZj/RKM4/KkE55j9h8f2IORoXisvl/h9C3t/o3a6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:71:00:b4:2c:14:be:de:88:dd:b5:4e:7b:64:64:b0:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Validity
Not Before: Oct 25 03:00:33 2026 GMT
Not After : Oct 26 03:00:33 2026 GMT
Subject: CN=a03984c1b2b4a7e8fb32ff25e68e0890b16b3d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:21:7d:88:3b:ba:32:10:86:5c:21:2d:5e:44:
44:40:b9:61:bd:9b:37:73:bf:40:95:4f:3e:54:5c:
27:68:51:9c:5a:28:2e:54:37:b7:02:cd:97:34:de:
00:f3:13:c4:49:e1:67:ad:27:c6:1b:4a:55:12:e6:
0a:fa:a8:a0:61:7f:84:ac:62:8a:2b:83:af:39:e4:
f9:4c:e3:be:48:b9:60:dc:77:fb:3e:53:37:cd:4c:
d9:05:8e:ae:da:06:6d:9b:52:0a:0e:4c:71:3d:f2:
de:4d:74:15:82:24:54:74:3f:18:27:ad:43:e7:7a:
0a:e7:e5:15:19:9a:4d:10:3f:ab:cc:33:b8:5a:6a:
86:86:61:2b:f1:3e:b2:aa:6a:04:86:8f:f8:cd:b4:
88:09:7f:11:fc:7f:18:c0:64:ef:45:2a:e6:0f:fa:
b2:10:c9:ea:64:be:7a:9d:41:bb:58:20:da:c8:0c:
24:81:e5:55:40:8e:64:cd:5f:38:8c:e8:7d:83:28:
84:da:bf:28:07:b5:aa:c1:b3:2f:15:7d:02:03:be:
f8:18:c7:0e:73:3f:ef:9f:0e:67:59:65:cd:00:24:
8f:95:34:d7:7b:4e:55:5b:4f:18:d6:ee:70:45:e7:
c6:0c:55:b3:ab:ba:df:b9:ac:73:64:bb:be:ed:d6:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:39:84:C1:B2:B4:A7:E8:FB:32:FF:25:E6:8E:08:90:B1:6B:3D:49
X509v3 Authority Key Identifier:
keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2b:59:e2:fc:39:cf:aa:8e:ba:84:ed:91:f1:64:73:7e:9c:
15:41:c9:9c:fb:4b:c7:8f:e3:65:30:d2:a4:2c:82:62:9a:6c:
2e:16:0a:61:00:39:af:04:54:3e:e0:f5:5a:6c:e5:c4:e6:39:
02:5b:d9:7d:19:67:bc:0c:3c:ec:8b:eb:5d:42:76:15:1f:bd:
d9:14:c3:1b:ab:a0:90:8e:80:bd:a7:1f:ae:df:99:03:60:76:
e2:48:89:7e:59:3c:6c:8e:dc:c3:b9:78:b1:26:60:e6:82:c6:
ea:75:22:02:44:b7:37:ec:fd:4c:d5:72:fa:02:c1:7c:e5:b1:
d0:0d:2b:10:79:19:6f:f6:56:db:13:3d:9b:3c:60:4d:4e:78:
20:ae:40:b1:aa:48:cb:a5:62:c5:e7:7a:4a:ef:57:3b:4f:5f:
78:cf:04:a6:4c:ae:f9:de:c7:14:e2:af:ac:a6:28:7e:bb:52:
e9:ce:5a:a9:7e:6d:ac:2f:cf:73:ba:a4:91:26:0b:10:4c:38:
2e:80:f5:85:cf:ff:b1:0d:fc:1d:9a:7e:46:6c:75:d5:c0:07:
28:4d:4e:a6:3c:60:35:ed:a8:c6:50:06:f9:4a:38:5d:a6:08:
31:d9:5b:96:13:5c:92:78:18:25:49:ec:25:6f:5a:60:36:62:
19:02:50:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 10:41:56 2026 by rpki-client