Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
File: 4bYF1mYOmDMcLiBJgPKldv30lhk.mft (raw, json)
Hash identifier: DKq921mzdAac+zgVwMoI6R6gt3CAwOt9/Hpk81E86qU=
Subject key identifier: 59:4F:0A:4E:39:E1:41:63:75:E8:8C:59:A2:DA:26:53:A6:C4:AB:CF
Authority key identifier: E1:B6:05:D6:66:0E:98:33:1C:2E:20:49:80:F2:A5:76:FD:F4:96:19
Certificate issuer: /CN=e1b605d6660e98331c2e204980f2a576fdf49619
Certificate serial: 01A03F3C76009FB821974FBA8B3BA7084B40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bYF1mYOmDMcLiBJgPKldv30lhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
Manifest number: 01C1
Signing time: Wed 26 Aug 2026 18:02:01 +0000
Manifest this update: Wed 26 Aug 2026 18:02:01 +0000
Manifest next update: Thu 27 Aug 2026 18:02:01 +0000
Files and hashes: 1: 4bYF1mYOmDMcLiBJgPKldv30lhk.crl (hash: /D3nu8WyRv7gXezTnFRUQoIj4MnH0MV+T/QMAPqi9lg=)
2: 5kAvBd30hpJ31v7a5btR1f3C5_c.roa (hash: z1wDX3ExFB1UHqUZVdNED873b9M0TIqJFILLETY+deY=)
3: J4mXmms4TiP28PN9LBCVFRM01HA.roa (hash: VUMEpxKdTm7c58+fUJJlRr+8yRrKuCjq0GD1rQWYd3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bYF1mYOmDMcLiBJgPKldv30lhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3c:76:00:9f:b8:21:97:4f:ba:8b:3b:a7:08:4b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b605d6660e98331c2e204980f2a576fdf49619
Validity
Not Before: Aug 26 18:02:01 2026 GMT
Not After : Aug 27 18:02:01 2026 GMT
Subject: CN=594f0a4e39e1416375e88c59a2da2653a6c4abcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:28:cd:87:14:33:fa:50:63:8d:fa:bc:03:7e:
d3:3f:d7:49:0f:91:f0:02:f2:b9:17:43:00:41:6d:
ec:0e:8e:97:71:e5:33:a6:d9:d0:0b:9d:93:4c:68:
f4:24:86:dd:3d:96:43:65:f8:ac:9d:b0:37:da:aa:
52:12:aa:38:3e:53:2b:72:93:2b:ae:33:db:aa:3b:
9b:74:46:03:36:e6:59:66:ff:af:90:a9:cf:24:0a:
aa:0a:6c:7d:85:2b:e4:11:c2:7a:7d:c9:48:ad:68:
c5:0d:84:fc:e0:da:91:fb:4e:81:66:b2:23:dc:d3:
3b:43:cc:3a:11:c2:d6:b7:a9:61:30:31:b6:88:3e:
81:a2:40:f9:a5:74:32:78:12:e3:52:e7:61:2c:2e:
74:52:04:80:af:87:d8:57:97:de:5b:ee:4d:08:be:
90:b6:0a:56:b8:5f:97:41:43:65:4f:65:2b:2d:a5:
cd:1d:52:fa:f6:fe:ba:a5:f4:68:e7:1a:ac:fb:ba:
d5:e3:eb:7b:2c:51:04:9e:dd:76:cd:83:81:57:10:
86:ef:2b:7e:bf:ab:65:16:aa:b6:9d:fa:57:c4:ee:
f2:6e:bd:5a:73:e9:2a:9f:04:0f:12:63:b0:18:25:
c9:da:2c:78:3c:0d:84:01:fc:b5:e0:cf:4e:c5:98:
04:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4F:0A:4E:39:E1:41:63:75:E8:8C:59:A2:DA:26:53:A6:C4:AB:CF
X509v3 Authority Key Identifier:
keyid:E1:B6:05:D6:66:0E:98:33:1C:2E:20:49:80:F2:A5:76:FD:F4:96:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bYF1mYOmDMcLiBJgPKldv30lhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e2:0e:9a:7b:91:76:9c:20:7a:4b:93:02:91:a4:f6:76:6c:
a6:20:2f:89:ef:90:d1:47:b2:4e:fd:0a:8b:ac:0f:21:1d:39:
87:0a:62:4e:e2:49:d8:14:91:e8:89:8d:fe:37:93:f1:63:7d:
62:96:30:18:b0:4f:cd:84:a1:70:9c:5c:c6:a6:6a:3a:b3:53:
1b:9f:89:81:3a:2b:17:8c:20:1a:48:e8:05:f2:69:ae:28:7e:
bf:7d:8e:d9:53:6b:91:f4:e9:b9:21:b0:73:c0:40:31:11:5d:
7a:20:f0:b8:7c:7b:f8:b0:55:92:b6:ef:36:43:e9:6d:0a:26:
8a:2d:20:51:41:c5:86:bc:08:0e:24:8a:10:24:13:99:a0:03:
84:21:e4:8f:19:7b:85:e4:b8:89:ed:21:c4:c0:3b:04:ef:b9:
60:bf:29:61:a1:37:a2:68:e0:78:5b:1f:8c:54:8f:8a:bc:62:
36:b0:b7:53:c1:18:e5:95:da:ee:e3:57:5b:47:0b:7a:52:41:
1c:9f:e0:97:af:b3:6a:49:2d:de:5f:f6:f4:b0:b2:bb:74:d5:
84:77:76:cc:fb:53:a5:19:5e:6a:cd:c0:ab:1d:c0:c9:4d:e2:
e4:40:0a:f1:a2:a0:02:46:53:52:84:de:f5:3f:8e:40:17:8f:
01:0b:2c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:57 2026 by rpki-client