Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
File: 4XxkApvUiWrwp2rY2jPWtDTRDvs.mft (raw, json)
Hash identifier: tQAPETW2k/neJ7MZpG6OUMWVbNXdLqZ3TiqEQTy2I6E=
Subject key identifier: B8:2B:0C:07:1C:F8:65:8B:18:1D:5E:6C:CA:04:FC:86:A1:8A:B7:4F
Authority key identifier: E1:7C:64:02:9B:D4:89:6A:F0:A7:6A:D8:DA:33:D6:B4:34:D1:0E:FB
Certificate issuer: /CN=e17c64029bd4896af0a76ad8da33d6b434d10efb
Certificate serial: 01A1133BF89DC09FCEAADBF1B272607234C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XxkApvUiWrwp2rY2jPWtDTRDvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
Manifest number: 0108
Signing time: Tue 06 Oct 2026 22:00:59 +0000
Manifest this update: Tue 06 Oct 2026 22:00:59 +0000
Manifest next update: Wed 07 Oct 2026 22:00:59 +0000
Files and hashes: 1: 4XxkApvUiWrwp2rY2jPWtDTRDvs.crl (hash: +Y4uW7Z3v1QMKDsUsGWzKhs2Gby5dRt8/ldPzxoamvU=)
2: FSSe1tEDCP5eij1O2L6qukAQDhc.roa (hash: xQCqNXwk7J8ALgUJnGIQA4t2bApXYtk3W+6tyFVQHYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XxkApvUiWrwp2rY2jPWtDTRDvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:3b:f8:9d:c0:9f:ce:aa:db:f1:b2:72:60:72:34:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17c64029bd4896af0a76ad8da33d6b434d10efb
Validity
Not Before: Oct 6 22:00:59 2026 GMT
Not After : Oct 7 22:00:59 2026 GMT
Subject: CN=b82b0c071cf8658b181d5e6cca04fc86a18ab74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bf:f1:06:6e:04:96:f7:58:8f:a0:c3:c9:83:
23:4e:62:6a:ad:ad:36:d0:fc:22:d8:05:29:77:25:
41:33:85:89:7e:0a:95:6e:86:4f:77:52:4d:d7:e1:
cd:fe:69:50:f7:b7:5c:d4:53:df:98:16:e9:3a:25:
6c:40:5b:0f:ff:64:5c:93:40:35:f5:3b:7d:41:0b:
4f:c0:7b:76:da:6b:2f:27:7b:fb:b2:aa:3c:ce:bd:
1c:3a:06:b0:c8:e0:e1:ae:bf:81:80:55:8c:76:93:
7a:ca:a4:44:b8:9e:f5:71:4b:0b:ff:1f:64:25:ca:
27:aa:01:94:5b:3e:ab:fc:62:45:49:51:af:cb:00:
81:ef:cc:f7:9f:a8:60:4e:0e:12:2d:e7:c2:4f:b6:
52:e3:7d:c2:23:36:4a:82:5c:9d:27:a1:e7:c7:98:
2b:6d:38:c3:f9:6b:ff:9f:13:40:df:55:cb:49:f8:
69:99:8e:2d:db:25:d5:3f:c9:62:42:95:f2:0d:9a:
ac:40:60:5e:53:8c:f4:2c:3a:ec:ff:57:ae:24:8f:
31:c3:b1:69:f3:7f:d2:d2:3b:dc:86:7c:df:c2:17:
ad:e3:36:3a:49:d7:de:cb:13:e5:2d:4a:17:f4:ff:
3f:3b:87:fa:c3:ac:48:ae:fb:a7:e9:1d:c4:bb:54:
27:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:2B:0C:07:1C:F8:65:8B:18:1D:5E:6C:CA:04:FC:86:A1:8A:B7:4F
X509v3 Authority Key Identifier:
keyid:E1:7C:64:02:9B:D4:89:6A:F0:A7:6A:D8:DA:33:D6:B4:34:D1:0E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XxkApvUiWrwp2rY2jPWtDTRDvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/25238c-8eee-4403-9104-9ca947aa665a/1/4XxkApvUiWrwp2rY2jPWtDTRDvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:92:15:45:ab:66:6d:28:0c:41:75:34:63:5d:a6:e8:0d:a2:
97:24:6d:4a:f4:87:e8:62:87:f2:a4:69:6c:58:1a:81:d1:30:
05:d0:81:93:1b:92:67:1d:bf:ff:5a:e4:b1:ca:b0:87:56:ed:
35:81:56:b6:80:dd:25:4a:48:46:21:91:9b:3c:1a:9e:1c:0a:
71:31:e9:b7:82:7f:d1:71:06:0f:89:b2:51:f0:87:eb:73:b9:
0d:d1:5c:fc:ae:98:d8:8f:bd:7f:3f:b3:d5:7c:8a:ed:d0:0f:
22:c6:6a:51:9e:47:6d:02:fb:ce:a8:a6:20:a2:71:84:b4:9d:
d4:16:a8:8c:bf:e8:5e:85:df:ae:97:f7:c5:2e:23:16:a8:20:
0d:5f:d2:9c:78:a1:64:35:d0:30:33:c4:8a:46:9a:7e:30:ea:
d2:65:d8:86:3a:2f:d1:4d:01:2b:ab:09:8f:18:c3:e6:12:a7:
5f:83:ac:84:48:64:4a:53:cb:ec:84:00:22:f6:3a:37:31:99:
1d:81:4b:37:38:96:74:c7:d2:04:b2:07:d7:48:c3:ab:41:05:
55:89:1c:66:e4:6e:81:fd:4a:82:29:c9:68:fb:80:68:5c:a2:
4d:f2:0a:6b:39:a9:d3:1b:ee:b1:9e:ba:23:28:c0:34:fe:f6:
2d:28:ec:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 05:57:07 2026 by rpki-client