Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: hcInZ5ga7DIdST2okWmfzt+VlMIQEnM6NTFB4QNiKlM=
Subject key identifier: 69:CB:F4:BA:A3:42:8D:D1:2E:A6:3F:CC:DE:FB:18:36:03:55:A9:B8
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 01A08B682562516B8E5EF85717DD09686640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 1100
Signing time: Thu 10 Sep 2026 13:00:53 +0000
Manifest this update: Thu 10 Sep 2026 13:00:53 +0000
Manifest next update: Fri 11 Sep 2026 13:00:53 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: y0octyMzzCDMKV2lgPkpuR5JE+qY89kKZkgXjjP4T1s=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:25:62:51:6b:8e:5e:f8:57:17:dd:09:68:66:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Sep 10 13:00:53 2026 GMT
Not After : Sep 11 13:00:53 2026 GMT
Subject: CN=69cbf4baa3428dd12ea63fccdefb18360355a9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e6:32:8e:2b:c3:73:4a:b6:db:82:c7:8f:2a:
8c:a3:f8:c9:39:c1:4c:0e:97:f0:80:99:64:46:5c:
e4:83:bc:ea:ed:f4:41:d3:b0:b2:c2:e2:98:a5:07:
8a:78:63:bc:e3:d7:70:c5:a7:2a:b3:9e:83:45:61:
3a:50:0f:1e:93:c1:b4:2a:72:3e:94:fc:0b:f6:29:
34:bd:8a:db:be:55:17:74:7b:0d:a5:1d:b6:d2:c0:
8c:74:7f:f6:da:1f:17:ff:97:7a:d5:b2:ce:6a:8d:
d9:98:3f:d2:88:ff:9c:21:14:66:a1:5f:ec:63:a9:
72:a6:33:92:fe:0a:b7:32:a5:12:c7:a2:e5:b5:99:
1f:97:ac:6a:1e:9e:de:40:c1:c9:b7:96:4f:22:70:
d0:ab:1e:28:d0:8b:1e:80:51:57:96:c6:60:57:86:
4b:07:7b:00:d4:73:c9:ce:16:5c:4e:da:28:db:c2:
cc:3b:b0:f2:22:7a:26:a0:52:21:e5:8b:c4:cd:55:
e0:ba:24:1a:3f:75:51:4d:da:a6:ab:9a:16:4b:21:
aa:ec:a7:eb:fb:f6:53:25:36:69:39:61:cb:a1:39:
f2:3f:09:0b:eb:7c:41:63:9f:c6:ee:d5:76:d7:d9:
38:f1:fd:ee:ef:5d:af:2a:0c:94:2b:f1:7c:1c:10:
51:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CB:F4:BA:A3:42:8D:D1:2E:A6:3F:CC:DE:FB:18:36:03:55:A9:B8
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:45:2b:31:97:0b:e7:45:86:0f:2d:21:98:c2:99:62:b9:0e:
15:42:e7:1e:a8:f7:c5:d4:e3:6a:a4:dc:29:06:a8:3d:e6:aa:
e9:0f:cc:e8:67:78:7e:c6:61:3f:47:a4:9c:f9:99:28:d3:8e:
d2:54:3f:75:13:29:10:73:db:bd:c5:08:f1:16:34:28:5c:e0:
fb:31:16:5d:17:e6:15:7d:59:73:19:14:b0:82:25:04:4e:98:
52:65:7d:64:d1:22:50:c8:3d:73:1d:8c:64:00:4c:6f:86:ea:
7a:cf:10:8a:d6:ab:43:34:93:49:3b:0c:9d:24:74:39:2f:24:
ca:64:2c:e9:37:9d:34:71:a4:b9:d4:56:7b:2c:cd:ca:11:7a:
f2:41:aa:cd:57:ee:e0:61:c9:2b:39:3f:8f:6b:d0:00:03:7c:
f0:bc:3c:7c:82:b5:f2:bd:2a:e5:b8:b8:a6:9a:af:3d:0f:e4:
9a:a3:07:22:7b:84:aa:18:f3:1b:02:6d:d0:00:e9:16:2d:d7:
13:61:3e:33:ac:a2:20:90:b4:b1:7f:b1:fd:f4:23:d1:c6:d9:
74:09:d2:eb:a3:4b:89:d0:84:9f:15:b1:44:d5:ae:a8:7e:c6:
e0:cd:69:77:ab:7d:36:37:39:85:99:5b:aa:0e:9b:db:ec:0b:
5f:42:35:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:01:19 2026 by rpki-client