Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier: o8AVZJpJEFKzmVJ4ZPcR9Yp1UJssGtanQ7B+uX6Mo/g=
Subject key identifier: 40:A3:1D:BE:17:C5:C7:B5:99:18:55:94:95:3C:FD:8C:C0:A6:E7:97
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 01A1901E49AC12BA49DD0A6C1721534BF5E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number: 1AE1
Signing time: Sat 31 Oct 2026 04:01:06 +0000
Manifest this update: Sat 31 Oct 2026 04:01:06 +0000
Manifest next update: Sun 01 Nov 2026 04:01:06 +0000
Files and hashes: 1: 1-nIDHjjDOfK0qkT3T38aF1CybZo.roa (hash: wfNaZ1sAvLj/BXad973SBMXYEOp2AK12GK1yxn0qtHA=)
2: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: LCHNFRh1aPgeGxM0n3sYGY4rqjKMS/yY6ZxKyAVm2j4=)
3: 7cNt7nS6Ga02pEEvUGwXFcclfa4.roa (hash: IhtCXpz8Ziv5ADSE80GH1TqeWkIm73cJMRq8OxzR0jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:1e:49:ac:12:ba:49:dd:0a:6c:17:21:53:4b:f5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Oct 31 04:01:06 2026 GMT
Not After : Nov 1 04:01:06 2026 GMT
Subject: CN=40a31dbe17c5c7b599185594953cfd8cc0a6e797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8c:b7:70:f5:09:fc:c6:cc:53:3b:5c:17:0d:
f0:99:e2:3d:bb:10:7a:2b:d1:76:52:12:0f:19:58:
ac:ed:05:a1:71:84:25:20:c2:93:a7:ca:fc:be:13:
00:fd:ef:70:9a:5e:94:08:cf:2a:22:43:57:b5:db:
5d:6b:4a:71:51:d5:55:a4:ce:d9:0e:fe:f3:56:ad:
4e:72:7a:d2:0a:b8:52:0e:f1:4d:e4:47:28:61:f0:
16:37:48:e6:ab:5b:98:25:d0:cf:16:82:f9:e2:89:
f1:dd:02:60:5c:ac:d9:44:14:bb:e4:76:38:51:f0:
1f:f1:50:19:c6:e6:1d:b0:ae:2e:08:ae:99:9b:18:
2b:ce:ac:5a:b6:10:6a:43:bd:35:19:82:b7:bd:89:
c4:2a:fa:c9:31:00:f9:03:ff:1e:db:ab:ee:86:5d:
45:b7:02:d1:9c:d5:fd:2f:72:b3:48:51:58:c5:50:
62:f3:f0:f1:27:52:82:cf:0d:d0:50:02:64:91:1a:
c5:b3:8d:74:cb:f6:2c:8f:51:75:b8:66:e3:69:d3:
e5:da:9a:71:e0:f7:75:7d:54:38:b9:e0:6e:b2:c4:
fa:a8:b8:30:52:9e:5b:8c:31:99:8b:0a:73:35:92:
c3:e1:9c:8b:25:90:c8:94:f4:de:f8:dd:b4:65:2b:
a3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A3:1D:BE:17:C5:C7:B5:99:18:55:94:95:3C:FD:8C:C0:A6:E7:97
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4f:27:3d:d7:d8:8b:c7:0e:38:21:76:68:ba:71:55:47:ad:
96:38:6b:d3:ef:f6:05:a8:d7:cb:50:38:f7:75:26:6d:64:23:
e7:92:fc:da:58:c8:7c:e0:4a:8c:69:a1:c7:c8:70:7a:04:02:
fe:c0:93:75:cb:18:13:b4:6c:9f:21:1e:93:8b:9a:d8:86:0d:
b9:c8:6d:4e:33:10:07:f5:5a:3b:77:d9:f1:23:cf:99:25:a9:
33:44:9f:ad:34:16:1b:b0:f5:09:94:e8:ae:64:99:b9:c4:e5:
5c:be:e9:28:9f:02:6b:01:97:55:68:28:a2:49:a1:6f:7a:9f:
8c:95:a0:19:d6:00:0f:d2:fb:dd:87:b3:d7:97:2f:0e:9b:42:
eb:cc:4b:a6:eb:72:bc:64:44:ec:d4:9f:e7:d9:b8:db:98:c3:
7c:ad:6a:a7:2b:3d:d2:ea:57:b0:81:2e:41:77:68:d4:9b:56:
6f:ce:c7:35:c9:04:ac:58:f7:60:4a:69:09:3a:9a:00:56:05:
b4:29:13:90:b8:d1:dd:47:1c:57:db:cd:22:f9:c5:5c:6a:5d:
9b:df:5b:4a:e7:2f:89:03:67:a2:5b:87:13:32:be:ef:4e:ac:
e4:db:c9:b5:d8:1e:a0:e3:c2:54:9a:9d:cb:92:6b:2d:9c:d3:
c0:d6:ac:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:41:25 2026 by rpki-client