Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier: wknY1d+fy08PHJdSi3H/kL1gnDAQrJmzLhO8pZ96+Z8=
Subject key identifier: 46:20:FB:B6:B6:30:DE:37:77:EA:5E:9B:B1:8E:1B:B1:BC:05:C6:7F
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial: 01A00213AF0D30D28083CFB0AAE12A3D70C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 21:00:39 +0000
Manifest this update: Fri 14 Aug 2026 21:00:39 +0000
Manifest next update: Sat 15 Aug 2026 21:00:39 +0000
Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: 8fbyB2jTZPshINTokqIHHFIZOG6MAOGf2N8HxMIqyFc=)
2: KrzOKl1qlDpYWxV-juWfSYeX7Gg.roa (hash: sm+bvfJZr3b8QZ7AAJ4wrF+UsO9vk0OydT19C79k6CE=)
3: fXnZtaUDrh43uq-zC1mqapT0DEg.roa (hash: 6JqlPygY2vobl9zvXxHng2bcbozRsoYkuHDvh0Ax49Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:af:0d:30:d2:80:83:cf:b0:aa:e1:2a:3d:70:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Validity
Not Before: Aug 14 21:00:39 2026 GMT
Not After : Aug 15 21:00:39 2026 GMT
Subject: CN=4620fbb6b630de3777ea5e9bb18e1bb1bc05c67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:f0:8b:50:fb:6d:54:c3:4c:f4:a6:73:b4:
11:e1:5f:c8:49:88:cd:e5:54:e1:c6:f0:14:91:d1:
81:30:54:a3:f1:fb:28:b2:ec:c2:72:2a:39:c1:96:
dd:da:3b:41:78:e7:92:89:dc:fe:2c:a8:e2:7e:2c:
aa:c1:f3:06:4f:50:0e:3b:79:93:0f:b2:c4:01:8b:
b8:41:48:a3:38:b2:62:5d:e0:60:bb:6f:0c:62:96:
90:27:6c:51:ad:1c:bd:ad:b0:68:99:ef:a0:3b:7b:
9f:d7:9b:b9:a6:69:13:05:49:45:ff:1a:06:21:66:
ad:25:70:ac:2c:8a:e7:0a:2d:f0:ea:e7:b7:4f:cb:
7c:f9:be:52:93:ad:1c:64:2d:85:1a:fd:0b:fc:5c:
46:65:fc:e4:38:13:97:94:db:a0:d9:f2:5d:f5:d7:
ed:4f:aa:b8:45:bc:6c:4e:d3:f1:97:79:cd:76:70:
53:8a:0c:64:1a:a4:52:41:f3:91:38:4c:83:38:07:
b8:0f:9e:03:63:00:2f:a0:7b:fe:8d:05:39:97:ec:
d8:82:5f:52:16:ab:6b:ae:c6:ff:07:40:4a:b1:6d:
5f:0b:80:66:08:41:1a:60:55:a2:1c:c5:63:9f:37:
c4:c1:29:c1:bd:a1:db:bd:9e:cf:c4:37:e5:41:63:
53:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:20:FB:B6:B6:30:DE:37:77:EA:5E:9B:B1:8E:1B:B1:BC:05:C6:7F
X509v3 Authority Key Identifier:
keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:61:83:48:67:2b:12:ef:af:c7:68:af:5a:51:a5:ca:d1:f1:
68:a9:93:90:71:74:c4:11:b9:5b:98:9f:b7:36:f5:dd:79:f7:
35:37:bb:bc:65:c9:36:e1:1d:56:1a:55:fe:77:5f:91:55:a0:
53:1c:ee:04:b7:a3:9a:24:8c:be:18:c4:f4:53:87:15:0b:75:
ae:8f:9f:83:0d:7a:44:32:05:8f:ab:5f:03:a7:c8:0f:c5:db:
6e:53:60:0e:fc:78:dc:b9:46:9d:62:61:b6:0d:1a:e8:79:f8:
bf:d9:99:d2:9c:e4:9e:7a:f3:a2:6a:47:57:b5:b8:2d:d8:47:
f6:5a:fc:cd:37:de:5d:5f:46:80:3e:c1:df:cd:65:0b:fb:17:
59:8d:17:6f:bb:da:23:cb:67:6c:48:21:a4:89:b0:34:30:d9:
8b:10:df:f8:48:c2:21:c1:c2:2c:f5:0d:b1:b3:27:2d:1e:a4:
0f:f9:d2:2b:e5:25:b2:d5:3d:1f:80:10:3b:98:33:ce:b7:94:
1c:41:3e:1a:44:a2:34:66:fb:05:cb:13:43:45:f6:52:9f:ee:
cc:48:fa:7a:8b:da:b3:7d:17:2b:0e:ee:38:ae:b7:4c:57:28:
f6:fc:b2:d2:10:0f:cc:55:bf:34:c9:af:87:d3:3c:88:53:cd:
65:5d:61:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:31 2026 by rpki-client