
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier: KNdduwEsRF1CPsi3ZOwjXotj01HHjli8L+aee/eGxA0=
Subject key identifier: 78:87:10:90:45:00:02:E1:31:49:4A:F6:DF:29:79:F4:56:65:73:AD
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 01A001700D20DEA0431C6D3CCA008DDCACF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 18:01:55 +0000
Manifest this update: Fri 14 Aug 2026 18:01:55 +0000
Manifest next update: Sat 15 Aug 2026 18:01:55 +0000
Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: BGWG+je+W61x82SrIYfCeIRonIidPevrPvJAy5fkJ6A=)
2: azb1_WO3_kwPuSAgYoVTIRPk0go.roa (hash: 1/nAUytly79O0AERwCaGs88tFerHBFBw3HoH4Qov+gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:70:0d:20:de:a0:43:1c:6d:3c:ca:00:8d:dc:ac:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Aug 14 18:01:55 2026 GMT
Not After : Aug 15 18:01:55 2026 GMT
Subject: CN=78871090450002e131494af6df2979f4566573ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9a:f3:5c:04:30:eb:0e:75:e8:e8:04:36:18:
27:7e:a0:33:fb:68:3f:85:e5:46:60:47:61:ba:e0:
63:9b:f3:46:cc:5a:87:9b:ab:49:45:29:17:9f:99:
6b:89:ad:4a:97:41:f8:f5:19:48:16:bc:df:d9:12:
6e:63:08:b0:10:2e:af:d3:04:6c:27:6a:ff:8e:3a:
23:38:3b:0d:c3:8c:95:6b:c3:8a:b0:50:a6:fa:ed:
ba:37:f8:44:e4:a5:59:36:1b:fa:78:6c:96:3a:37:
09:e1:83:43:69:a8:52:45:4c:87:94:ac:ee:75:2a:
b5:3f:5e:0c:c6:75:a8:0d:bc:38:84:5d:86:ff:bb:
03:71:7e:b0:22:4b:1e:3c:93:4a:d8:90:65:1d:32:
3a:1c:25:2c:8d:9a:fd:f9:56:f6:94:c2:17:37:62:
59:64:51:03:e4:c3:36:57:b3:31:75:a0:d5:4b:89:
67:9b:61:b8:0c:3b:ec:1d:16:f1:19:75:6a:7c:55:
4d:37:c0:14:d9:b0:1e:60:e2:a5:8f:ae:f8:a7:d9:
e8:51:85:3a:a9:07:52:8e:87:e6:1f:08:c7:f6:4b:
19:27:96:ad:67:02:9a:82:8b:f4:f6:39:e0:51:23:
bf:61:52:29:7a:07:b0:28:be:03:aa:7f:74:d3:74:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:87:10:90:45:00:02:E1:31:49:4A:F6:DF:29:79:F4:56:65:73:AD
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:3b:8b:e2:9f:47:ae:ea:91:31:fe:18:6c:3d:d0:0a:55:bd:
b6:63:7c:cd:30:b4:a6:e2:e7:5e:79:68:1f:b0:8a:7f:1a:67:
e5:af:11:d4:a0:b1:ce:29:aa:80:d0:d3:13:f0:c6:a7:01:35:
26:83:c9:4e:05:a5:fa:b4:54:f4:ce:20:d3:f2:1a:5b:ef:0c:
0c:a5:a2:b0:0c:e3:12:f9:db:c1:c0:26:a7:8b:a1:11:e6:ba:
58:4d:86:1f:e3:d9:3b:1e:a4:ae:9b:90:0f:b7:24:1f:8d:e4:
bc:e5:53:96:1d:d0:42:6f:71:a5:79:b4:2c:33:8c:84:95:33:
7d:3a:63:b5:94:a2:8c:12:16:2a:1d:54:e6:d1:d6:69:70:ab:
26:f4:73:30:59:86:01:7c:30:58:50:c3:60:ab:c4:82:b3:96:
ca:bd:17:81:5d:6e:b3:a5:9d:45:36:a2:e5:4f:8b:0d:94:f0:
8f:a2:19:af:fd:43:5e:de:f7:17:d0:31:a4:25:78:1b:9f:a1:
b8:d8:fb:f7:45:61:37:84:7f:4d:bd:2b:fc:7c:a9:5d:51:1b:
ad:f4:b7:77:a4:df:28:1f:c0:2f:18:4b:8c:1f:af:3d:58:92:
7f:09:c5:34:10:29:3a:48:16:ed:b6:7f:0d:86:0b:8a:25:2e:
64:92:9c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:18 2026 by rpki-client