Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
File: 4Genud52frl9tk5RZHhJRjO9VOo.mft (raw, json)
Hash identifier: RxbgYZsuI5Okjo1bMEGKF9tFAlNFCN7rZp3hikFa1VU=
Subject key identifier: 58:72:C8:7E:7E:DD:62:35:C4:72:57:84:F4:32:B1:8F:34:0F:1D:9D
Authority key identifier: E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
Certificate issuer: /CN=e067a7b9de767eb97db64e516478494633bd54ea
Certificate serial: 01A13DEEE88C74FFEF90DCDE4E09ACCCF176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
Manifest number: 10A9
Signing time: Thu 15 Oct 2026 05:00:29 +0000
Manifest this update: Thu 15 Oct 2026 05:00:29 +0000
Manifest next update: Fri 16 Oct 2026 05:00:29 +0000
Files and hashes: 1: 4Genud52frl9tk5RZHhJRjO9VOo.crl (hash: vVNhHby8fPjzxMooov8d+VZqCAJRMZMmHXGACd6ztsc=)
2: fqd_p4Wrb6OXddN1aeuYEJC8YH4.asa (hash: jmbRwKrDPkjso/zUasnqP+cDaGWkVpbGq+nQ2VGiSLw=)
3: mqWwX3c1BOwgAKEJ3FuyfvO_MKs.roa (hash: 05RPu7PASUup4/F6w6O5WKp82l03RTgAZ/jZKw8NCyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:e8:8c:74:ff:ef:90:dc:de:4e:09:ac:cc:f1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e067a7b9de767eb97db64e516478494633bd54ea
Validity
Not Before: Oct 15 05:00:29 2026 GMT
Not After : Oct 16 05:00:29 2026 GMT
Subject: CN=5872c87e7edd6235c4725784f432b18f340f1d9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:74:b1:fd:d0:5b:61:d1:24:22:f8:e6:c6:a8:
09:60:84:c9:a5:eb:82:a0:55:37:f6:22:18:81:95:
90:da:80:da:a9:50:a7:75:88:37:d6:47:c1:11:e0:
af:c9:bf:7e:23:47:de:07:38:32:65:97:87:c9:d0:
a5:f1:1e:48:5d:08:ef:fe:74:95:b4:b2:29:21:87:
c0:86:78:e8:26:46:1c:41:c6:06:3c:ff:bd:a3:0e:
46:a2:01:2f:e6:23:6f:9e:f5:3c:e7:f4:11:1b:9b:
94:48:d5:1c:5a:ef:e1:4d:f4:98:20:1a:95:4a:aa:
76:40:fb:de:82:5d:df:74:02:77:ff:76:6d:ac:4a:
15:33:f5:e0:93:14:34:f9:59:b5:3c:33:51:6c:c1:
91:c1:d0:2f:e5:27:91:9d:62:f2:53:13:37:d1:37:
91:9a:e0:39:63:02:c4:2b:a3:52:4e:63:37:17:a0:
b0:38:d0:fa:3f:86:05:e7:51:78:19:40:05:c4:96:
7a:7c:80:a5:c0:67:bd:e2:51:b6:63:80:be:6e:1a:
a4:01:30:07:fb:33:b1:12:e2:7c:65:c9:70:a5:16:
ae:be:7e:cf:1a:87:37:e6:be:1f:84:ca:22:ea:d5:
aa:f1:bf:af:a8:12:e5:5e:c1:ac:5d:84:48:be:3f:
03:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:72:C8:7E:7E:DD:62:35:C4:72:57:84:F4:32:B1:8F:34:0F:1D:9D
X509v3 Authority Key Identifier:
keyid:E0:67:A7:B9:DE:76:7E:B9:7D:B6:4E:51:64:78:49:46:33:BD:54:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Genud52frl9tk5RZHhJRjO9VOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/d520c4-deb4-438b-93bf-768f3d6ee19e/1/4Genud52frl9tk5RZHhJRjO9VOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:89:70:f1:f3:e3:2a:7f:d4:e6:b2:eb:81:f7:af:c5:78:1c:
9f:14:57:17:14:9f:0b:37:ff:a6:9f:2b:98:e9:99:c3:86:c5:
fc:fb:e8:4b:d3:60:7f:b5:b0:0f:f9:e6:0a:d1:a9:7c:70:54:
f9:b2:f8:11:4e:19:5f:b2:ff:65:6b:95:20:93:96:53:a2:7a:
5b:eb:6b:62:47:85:97:3b:04:f1:c6:84:0e:3d:fb:28:af:9c:
ae:2f:17:3c:59:fb:2a:df:c5:11:cb:29:5d:2a:cf:ba:1d:bd:
7a:aa:ab:a0:cd:5b:05:1a:13:b4:d6:86:81:02:75:0e:af:cb:
59:8d:5c:c6:0a:9c:cd:31:9c:5a:f1:c9:1b:0a:c4:8d:74:2f:
09:2c:a8:b0:e2:db:a4:e5:4b:0d:79:83:66:02:79:f7:3e:dc:
af:31:4d:12:2a:79:28:d0:ce:2c:d2:17:bd:dc:81:e2:41:ce:
43:2e:84:39:29:8c:ee:b5:78:eb:97:9e:5d:94:bf:3e:2b:40:
7e:8d:94:b2:e3:51:ee:83:b9:a7:e8:dc:ea:b5:cf:fe:55:27:
85:3d:c8:cc:50:a8:b0:0a:b0:61:94:03:bd:ab:ce:c9:84:92:
8e:4e:a8:26:0d:7b:95:4f:87:5a:09:e8:39:66:6f:bc:0f:d9:
e8:48:6c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:12 2026 by rpki-client