Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: +WBX/CcPuKoCxWfd/NXdH9GP3opccCGvCqJdyB4uhew=
Subject key identifier: C7:9B:63:64:54:6A:C7:2E:92:94:7A:C0:49:9B:DC:3F:92:E4:5A:FC
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 01A13DEF3A8A5B1B576999BCD278A22C97FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 17B6
Signing time: Thu 15 Oct 2026 05:00:50 +0000
Manifest this update: Thu 15 Oct 2026 05:00:50 +0000
Manifest next update: Fri 16 Oct 2026 05:00:50 +0000
Files and hashes: 1: 1eykC-2BnVsWo7Ye-BCUzkQkUoQ.roa (hash: XORzzia+v0TQle6S3eSeTmbfXijHFXJwl9VwUUmAcRw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: QnKPZp/9XZjim/Oaf015z59+cK/P8Im7BXrPpCDNFTE=)
3: NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa (hash: 3elpIcyAaRbsEU++I8EIRcmrePMiDX7Ycf8Xs+7sNy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:3a:8a:5b:1b:57:69:99:bc:d2:78:a2:2c:97:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Oct 15 05:00:50 2026 GMT
Not After : Oct 16 05:00:50 2026 GMT
Subject: CN=c79b6364546ac72e92947ac0499bdc3f92e45afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:09:29:ce:9c:c8:ac:e3:d8:b6:63:fa:15:
7c:43:d6:a0:5b:09:7f:f7:b6:96:cc:5f:76:b4:a8:
c8:53:53:f6:ad:b4:b9:82:7b:6b:12:0a:d2:b1:0a:
9d:46:82:0f:91:ad:71:5f:c2:0c:37:b6:f8:a6:7a:
8f:dc:85:05:35:ec:ee:84:cf:9f:f5:0f:d5:24:ef:
0e:66:82:87:ff:8b:41:f5:a7:9e:31:f2:e6:53:67:
61:92:cf:4c:38:d7:bd:71:1a:55:d9:0a:04:1c:b6:
74:a5:1a:12:61:d4:b0:3b:7f:bc:20:67:b6:5f:df:
a4:b9:c6:72:7b:00:cc:c6:3f:3b:a9:15:0a:c9:0d:
49:4f:77:4a:b3:25:84:f8:3e:b8:06:30:2f:84:dd:
38:65:a7:54:f4:c0:fc:d2:15:8d:bf:c5:d7:ab:d8:
b4:40:9d:1a:45:2f:2d:7a:5c:c6:21:d7:a7:1d:6e:
be:91:0d:cb:01:68:26:9a:d1:4e:d8:ea:17:42:8c:
15:f5:7b:a3:8c:06:b7:c0:ce:67:15:81:65:59:fc:
2b:06:42:44:04:c4:88:ad:31:e8:b5:02:c0:e0:9f:
6b:c8:a0:92:2f:d1:6b:30:29:61:96:70:7d:55:0e:
1a:31:26:e8:70:cf:d0:0d:c1:45:11:7f:a1:0a:4c:
08:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:9B:63:64:54:6A:C7:2E:92:94:7A:C0:49:9B:DC:3F:92:E4:5A:FC
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:44:c1:d8:0c:c0:c3:3b:60:44:dd:30:e4:83:81:a6:be:59:
f4:ca:1f:24:5a:44:ac:dd:4a:3f:da:ce:dc:38:d6:55:12:62:
45:fc:69:52:81:56:c2:83:02:ca:5b:ba:c3:8a:4c:f4:6b:6e:
28:e1:c5:cd:5e:d3:58:1c:28:fd:b0:50:29:a5:b5:69:a4:d5:
f8:d7:71:0f:b8:f7:03:f5:db:06:3a:b2:28:ac:0f:1e:44:a2:
6f:b1:3c:a5:36:ca:7e:fa:36:76:62:7b:96:3c:93:d5:cc:01:
d1:b9:f0:89:36:b6:43:40:8d:8d:90:36:6a:24:b8:14:35:a3:
d1:0f:40:89:58:8a:4b:38:cc:c7:bf:e8:8e:b0:74:8d:9e:32:
81:73:32:33:88:8d:98:01:83:6d:a4:d3:98:40:76:b3:17:da:
03:98:00:4e:0e:65:a5:b7:03:1f:e9:13:83:8f:b3:c0:3e:69:
d1:2d:8a:19:da:26:8e:53:e6:69:1d:8a:16:96:5a:b0:a8:7c:
34:30:da:93:63:fc:ef:22:89:56:48:b0:0e:a8:cd:3f:f7:bb:
e9:11:d6:07:c1:44:50:3c:50:09:2f:b7:81:11:8a:3c:72:68:
a7:5e:37:68:67:20:d9:66:e2:c5:ab:71:ab:58:09:66:8a:70:
69:50:db:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:29:19 2026 by rpki-client