Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: hqkWywqVlghMyZixOrUAGGcMW6rStkMv3YDyqG8Kdp0=
Subject key identifier: 32:EE:51:11:2A:53:91:A5:6C:71:C6:EF:F9:88:12:AC:79:64:A9:07
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 01A181BE11BC2C7EFFA35697F255A893F82C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 1ACA
Signing time: Wed 28 Oct 2026 09:01:19 +0000
Manifest this update: Wed 28 Oct 2026 09:01:19 +0000
Manifest next update: Thu 29 Oct 2026 09:01:19 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: Olo5oaXfka5GX4shQ7kSEYDrG4mUXOcwUp1CZ5cJJoA=)
2: CTp1GS2fYaQIruu9tWpwYU6UL5U.roa (hash: 1woVFgn9dNEGbuwWBJn4MG4ChUl6MAOmb6s5dU16yL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:be:11:bc:2c:7e:ff:a3:56:97:f2:55:a8:93:f8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Oct 28 09:01:19 2026 GMT
Not After : Oct 29 09:01:19 2026 GMT
Subject: CN=32ee51112a5391a56c71c6eff98812ac7964a907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:16:f6:eb:59:af:64:4e:c1:ed:a8:25:a4:
fe:87:ab:2c:f7:2e:2d:4a:84:e6:e6:73:78:b3:b1:
1f:3c:08:9d:d3:f0:df:de:3e:14:77:07:89:85:91:
6a:4d:c0:d1:92:c7:6e:a0:1a:41:38:82:53:84:3d:
21:28:b2:f8:1d:e9:b1:bb:e8:53:36:1f:80:0c:ca:
d1:cc:6d:6e:df:39:91:f4:0f:fd:ba:ee:71:56:dc:
15:85:74:95:ba:1e:fc:64:46:1e:e6:ef:1d:ed:7f:
fd:00:37:16:b3:1b:0a:75:b8:72:31:56:7b:52:83:
01:f9:92:a5:8d:08:54:e7:a1:9a:18:46:a7:8e:1b:
f7:50:10:8b:c2:1e:54:a2:16:a1:ce:a9:c3:a6:3f:
e1:9c:b0:f7:16:e1:5a:51:0f:7c:56:26:b1:ec:78:
23:d0:a0:1d:2a:55:3e:d6:7e:95:aa:4e:34:ab:01:
5f:83:f7:66:bc:c9:2c:07:30:f7:2a:56:31:05:52:
b1:f5:5e:34:41:5b:12:1e:20:b9:80:21:d7:5c:a6:
5f:61:21:18:48:07:58:50:dd:be:32:46:a1:72:92:
3f:dd:df:eb:55:98:63:38:82:9d:b2:82:b3:8f:7e:
f6:a6:65:58:e4:a1:38:90:8c:b6:63:7f:1b:4b:4f:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EE:51:11:2A:53:91:A5:6C:71:C6:EF:F9:88:12:AC:79:64:A9:07
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:4e:c1:f5:6c:25:ca:e6:c4:9a:81:58:f2:02:70:0f:ed:88:
85:46:d0:07:9b:ab:b7:4f:d9:50:a4:81:d9:60:b3:4d:f5:64:
1d:ee:73:cc:ff:93:17:15:23:33:ba:ea:40:44:c5:3e:93:81:
af:b0:b5:4a:e7:7d:84:8b:c1:eb:0d:42:90:f0:c9:a3:40:84:
59:66:fa:47:36:20:6c:70:f4:e7:6b:02:6d:1d:ac:7f:36:e9:
79:99:e3:d6:3f:66:e9:17:8b:ac:0a:ea:94:c3:5f:c7:2d:37:
92:df:49:76:a2:9b:ed:2c:76:e3:43:41:da:1d:25:60:52:97:
d8:1f:3f:a8:03:05:94:33:b8:a2:17:4d:0c:21:ec:20:67:1e:
6e:2f:19:9d:65:a2:c1:4b:d3:e5:fd:c8:7b:d8:af:e7:ce:78:
04:f8:2e:9a:65:3b:91:52:6f:fc:93:81:9d:9f:d8:7b:ce:c0:
b4:9a:15:89:f0:e7:39:cd:55:78:82:a5:e1:44:d8:10:b1:81:
6f:d2:eb:39:13:5e:1e:f2:b1:1e:a6:ce:81:03:ee:4d:91:a2:
a9:e9:1e:e7:4f:b3:03:96:78:d1:4b:fd:58:e6:a5:21:6a:41:
dc:81:f0:43:c2:cd:9c:b8:d5:39:d7:63:4e:b9:6f:08:e1:c7:
56:4a:40:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:01:12 2026 by rpki-client