Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier: qxoF+sYyFCjm32CramiM6aJ8BYC9Q7jKkTIAbijmkfo=
Subject key identifier: C2:40:1B:49:B1:F7:A7:12:6F:3D:BD:54:0B:9A:BA:86:4B:0A:09:7D
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 01A13E26317C9F7E206E5912C3715374DA6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 06:00:52 +0000
Manifest this update: Thu 15 Oct 2026 06:00:52 +0000
Manifest next update: Fri 16 Oct 2026 06:00:52 +0000
Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: 3E5c7+vSQ95iYvmb7372snFRDiA8T6WkqmtrOE4XYn8=)
2: azb1_WO3_kwPuSAgYoVTIRPk0go.roa (hash: 1/nAUytly79O0AERwCaGs88tFerHBFBw3HoH4Qov+gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:31:7c:9f:7e:20:6e:59:12:c3:71:53:74:da:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Oct 15 06:00:52 2026 GMT
Not After : Oct 16 06:00:52 2026 GMT
Subject: CN=c2401b49b1f7a7126f3dbd540b9aba864b0a097d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:89:f4:e2:3a:27:0b:82:21:8b:10:85:cb:99:
81:50:18:23:4a:3d:ad:20:d0:1a:8e:31:1a:47:76:
42:d1:4f:d8:ca:ba:15:66:fb:74:b1:84:1e:cb:41:
e8:d7:b6:e2:92:2c:15:1b:37:c4:79:12:3b:7f:7b:
d1:5e:b2:22:86:59:c6:8f:4a:a2:92:9e:fe:22:63:
55:66:14:63:a8:98:47:1f:85:a2:d1:c0:2b:d9:36:
4b:56:41:a1:f0:26:00:ec:bc:41:21:ca:84:ff:fb:
e5:6f:bb:0f:e7:4b:98:09:e1:cb:ff:ea:5d:29:58:
5d:a9:37:62:87:56:b5:96:e8:d6:a3:1b:0a:f9:c0:
e0:7d:7b:6f:58:71:61:ed:87:8e:76:d7:57:54:68:
c9:cc:b0:59:a4:03:d1:3b:0a:d4:61:8e:d8:d3:85:
67:74:9a:71:e2:8b:69:79:72:38:f6:56:d2:92:3b:
9c:f3:3c:b4:ac:3d:ec:4c:45:a4:da:22:99:f6:61:
7e:a1:28:9a:a1:6d:f8:0f:d8:ff:3f:e8:75:dc:6c:
5a:3b:fd:5d:17:7b:d2:72:96:1c:c4:9b:89:48:dc:
4e:d9:81:fc:37:a9:d1:46:52:f3:dd:ff:41:43:b1:
62:13:f3:e5:16:d2:fe:ed:e6:7a:30:7d:c7:be:6f:
01:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:40:1B:49:B1:F7:A7:12:6F:3D:BD:54:0B:9A:BA:86:4B:0A:09:7D
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3f:c0:5c:54:7f:09:89:27:97:c3:13:54:42:92:4b:29:28:
0b:3b:12:8a:c3:6f:60:92:e7:48:54:bb:1d:7e:23:4a:fe:6b:
22:2e:fe:d6:d1:6a:d7:1a:35:a3:12:56:47:1d:22:d4:34:de:
47:e1:56:75:39:db:1e:97:f6:54:51:97:08:af:9d:2e:95:7c:
44:f8:ac:31:91:e4:5a:7e:e9:5a:31:8c:0f:3e:f4:94:e3:c1:
10:dc:ca:86:53:76:69:24:57:88:79:f0:66:bd:0f:43:bc:5f:
f1:35:5d:2e:20:b3:6d:89:79:38:da:45:65:f8:9c:32:63:82:
55:53:53:31:22:1a:c6:93:7e:b7:09:b2:64:1e:f5:93:1b:ce:
c8:a0:cd:e2:8a:df:0b:0c:03:25:39:9b:7e:81:79:2a:cb:57:
6b:45:f8:2d:65:a7:7a:68:ac:d4:cc:23:33:ac:c8:d7:02:1a:
60:cc:3c:f5:b1:cb:03:35:18:b3:85:5f:e9:c4:b2:74:03:94:
a3:5a:95:b6:0a:e5:6b:65:28:c3:8e:93:4b:8a:ed:82:bf:da:
fb:0a:40:11:b9:d4:c0:d8:d6:46:b5:3d:9d:79:bb:45:1f:d6:
a3:54:7f:93:ca:c9:d3:9f:e4:fc:07:0f:09:4f:64:f3:8c:d5:
e0:75:25:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:12:55 2026 by rpki-client