Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: XfKdz/h/j/W+BhAbmOxZPeKK5jC62cQBVJZ55mZ1Y7k=
Subject key identifier: EF:DE:B7:11:CB:89:86:06:41:84:EF:5C:48:7E:DF:A8:30:5E:1F:25
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 01A00137E4C9C1695225CC5853232918DBA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 1A0A
Signing time: Fri 14 Aug 2026 17:00:35 +0000
Manifest this update: Fri 14 Aug 2026 17:00:35 +0000
Manifest next update: Sat 15 Aug 2026 17:00:35 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: uy9FLW3yGgMkL/BvUdCk/9VzRMX3MF1wMTw1RN680Xw=)
2: CpV5ifZcjPyGOZZo5Kthc-0aYIE.roa (hash: lgb25S95umOL8YFj63EWLcLTY42lwBMqoGZsvrLzBnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:37:e4:c9:c1:69:52:25:cc:58:53:23:29:18:db:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Aug 14 17:00:35 2026 GMT
Not After : Aug 15 17:00:35 2026 GMT
Subject: CN=efdeb711cb8986064184ef5c487edfa8305e1f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:41:68:40:61:5a:19:b9:f8:95:58:b6:7f:49:
4e:6a:53:4b:c5:f1:3f:0a:a6:9c:05:0a:35:9b:a1:
d1:13:d8:83:e3:2b:47:4e:cc:30:3e:00:66:34:c2:
92:6d:41:51:c4:9c:7e:aa:08:d5:61:83:ce:0f:36:
83:17:4e:d2:a3:40:bd:0e:49:97:d6:d2:b8:1f:ea:
84:4c:f2:dd:e2:26:36:f1:63:f3:bc:83:f0:9d:2c:
a5:18:01:02:96:5e:d7:87:de:a6:d1:58:21:41:c4:
d3:13:3e:4b:fb:4a:b0:7a:e1:73:5e:a0:2b:ea:88:
0f:b8:93:82:f7:ba:12:b5:c9:92:eb:8d:bd:5f:d7:
17:f7:ec:23:d4:90:a1:be:96:27:61:c0:a4:f4:cd:
68:54:39:70:e1:13:6c:b5:96:c5:c2:d4:00:3d:7e:
3b:23:1d:01:fd:ff:d6:d6:d3:29:e5:55:be:1b:c4:
b4:58:06:47:df:6a:11:7a:bb:77:b1:62:bd:da:3c:
28:b5:ff:62:1e:5b:3f:70:49:9b:8a:7b:71:2a:58:
16:85:8b:2d:d4:ca:ec:f0:d8:98:6b:bd:ce:a4:4b:
70:2b:ea:85:02:98:0b:c7:a6:ed:46:d7:49:38:57:
8c:49:15:aa:d5:97:97:88:08:a1:cf:0e:2b:e4:4c:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DE:B7:11:CB:89:86:06:41:84:EF:5C:48:7E:DF:A8:30:5E:1F:25
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5d:ac:e5:e7:d1:23:18:65:7a:f2:34:3f:17:0d:e0:53:af:
cc:b6:5d:54:85:4c:c9:24:5f:c5:7c:ab:74:e2:d9:db:a9:d8:
0f:e3:01:2f:2a:ad:a2:cf:58:11:94:c6:3b:93:3c:4a:0e:8c:
cc:8c:c0:9c:96:2c:ba:46:8d:e8:17:78:2f:c9:c6:fc:80:12:
e4:66:d5:fc:68:bc:c8:de:66:89:0f:8f:94:71:07:59:a8:b0:
e5:e8:46:82:b6:76:95:08:48:fe:99:03:8f:51:42:4e:1d:a1:
65:24:6e:28:a7:c2:dd:a9:e1:3f:bd:7e:21:ee:c8:73:8e:c0:
2e:09:23:98:3a:9d:f4:db:fb:0e:30:d0:fc:af:e2:2a:55:6e:
52:27:69:02:c4:38:46:80:07:d0:72:7c:14:58:69:9e:3f:dd:
a1:e0:ff:ad:b9:cd:6d:be:ce:a5:0a:ea:3f:c4:56:23:f1:2a:
d2:ea:06:e9:1e:e0:56:7a:56:9d:d2:8c:26:25:0b:db:7a:17:
a0:50:8c:1a:2a:d8:51:32:b7:21:10:b7:c4:8d:bb:1c:c0:56:
80:a4:01:b2:61:bb:de:52:b2:f3:88:4b:34:cf:22:8f:14:c9:
a9:e6:ce:e8:09:76:93:a2:e2:d9:c0:b2:c2:1e:43:19:bc:43:
42:49:53:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:30:27 2026 by rpki-client