
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: laxw1RewuJFlJpjm6WUbOLPzzkVzSK3wMi75h0BCoac=
Subject key identifier: 60:06:B1:22:EA:61:98:DF:A9:3D:35:5B:F3:47:BE:5E:E0:A0:3A:93
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 01A08E68D41520400897FF3D481F67549ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 1061
Signing time: Fri 11 Sep 2026 03:00:29 +0000
Manifest this update: Fri 11 Sep 2026 03:00:29 +0000
Manifest next update: Sat 12 Sep 2026 03:00:29 +0000
Files and hashes: 1: 28qciXJsiY_HinbmOHfVFSyJkQk.roa (hash: UYVCwyOsNlY276CdR8TOzS4Rj720VMSX5696EeMarho=)
2: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: PJxB4jaSzGEr1NpcL6Yt2PGHHHcGg5xMNzHvYpwt7Mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:68:d4:15:20:40:08:97:ff:3d:48:1f:67:54:9e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Sep 11 03:00:29 2026 GMT
Not After : Sep 12 03:00:29 2026 GMT
Subject: CN=6006b122ea6198dfa93d355bf347be5ee0a03a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:72:42:25:18:ed:47:7a:af:4d:df:0b:6c:13:
59:7b:c3:3d:5f:f6:4f:ca:27:1e:fb:5c:30:6b:86:
88:20:b9:1e:9c:92:00:fd:b2:1f:ce:1b:2a:d3:54:
16:1e:37:6a:18:49:03:f6:f1:50:bc:ee:db:92:b5:
d6:ca:d5:46:47:f3:d5:2a:4f:c3:66:d8:62:ec:34:
a1:3e:0a:f7:fd:f6:3a:43:ef:72:af:ce:a0:27:6a:
0b:a5:55:a7:58:c7:b7:fe:7b:72:4f:3d:86:27:8e:
26:55:64:17:7a:ee:0c:ad:3d:be:29:dd:b3:05:de:
f7:f3:54:7b:77:32:a0:d6:c2:e8:b1:43:c9:dc:37:
d2:4b:df:c3:84:f5:a0:33:f6:41:0d:91:4e:e1:6c:
f2:fb:49:65:73:d1:1d:07:f6:a2:4f:d1:cc:91:f0:
f3:cf:76:ea:da:55:fc:74:12:2b:04:f9:12:4a:66:
46:30:e5:c8:fe:e6:0e:73:3f:bd:ab:49:a0:e1:cf:
18:ad:ad:61:66:91:4a:ce:c9:17:e0:14:46:59:1e:
d4:9f:fc:03:2d:b6:39:d4:ba:c6:0c:23:cc:60:c1:
e4:65:5c:33:2e:05:35:26:b2:86:99:75:16:bb:40:
f6:40:72:b5:82:3d:b2:2c:37:dd:01:87:6a:6e:b1:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:06:B1:22:EA:61:98:DF:A9:3D:35:5B:F3:47:BE:5E:E0:A0:3A:93
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:fb:04:72:f8:f1:ab:ee:10:ee:94:59:a1:6d:0a:c4:3f:33:
92:ba:fb:78:3b:9a:4f:4d:44:fa:ff:91:9b:1e:5a:73:68:89:
d6:c4:1b:ea:61:8c:a5:23:bd:4d:99:96:6c:59:45:9c:6a:2b:
5a:16:e4:90:aa:f4:b3:0b:ae:26:39:a2:ba:be:9f:ca:b6:e5:
e6:34:9e:ab:07:45:74:97:91:e6:61:e1:37:1f:47:8c:27:c9:
ad:fe:c4:2b:89:f2:ac:c4:1d:df:fc:2b:fe:74:57:c5:a1:81:
b7:5c:7e:63:25:42:1f:81:e3:0b:5f:6a:9b:cf:66:2a:d5:cd:
80:83:72:32:cf:fb:6b:69:f3:b7:fa:1b:20:50:af:33:c3:d7:
eb:f3:e4:28:a9:0a:26:d3:74:c4:82:ea:21:99:8d:60:03:36:
f1:0d:2d:08:33:c9:28:da:96:c8:d1:f7:66:b4:3a:7e:4f:fc:
83:dd:5b:52:43:c7:4d:52:85:f7:b5:59:bb:ed:d9:4d:aa:0c:
b9:74:28:1a:e4:b7:e5:c9:af:b9:0c:3d:8d:c2:89:38:9a:a1:
67:dd:36:be:1e:5a:f6:f2:19:e1:01:be:61:b2:87:0e:2c:f2:
65:f8:54:c8:67:a0:74:7e:ee:16:ab:0d:c9:53:9d:8b:02:c5:
b8:2e:8c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:38:20 2026 by rpki-client