Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
File: 4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json)
Hash identifier: UJdaR5pWk6ihqOdU6qPm8lif//QPZWgea1ojszFscjg=
Subject key identifier: D1:A9:C4:89:84:08:D3:8A:CE:54:32:B7:BC:19:1F:1E:7B:4C:81:DD
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 01A00025914881D59B870BF7DAC93F311D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
Manifest number: 19FF
Signing time: Fri 14 Aug 2026 12:00:56 +0000
Manifest this update: Fri 14 Aug 2026 12:00:56 +0000
Manifest next update: Sat 15 Aug 2026 12:00:56 +0000
Files and hashes: 1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: np51mt8WkS4FZZHvNizaW7fwieUyGD6JWZ7nV5Wt43Q=)
2: nQKy6e2LccKKfVdgMJiI4DoR9BU.roa (hash: DkQsbrxnTq1yHz8jrN75m8LOYNoDRbUgrzZnY6/SqN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:91:48:81:d5:9b:87:0b:f7:da:c9:3f:31:1d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: Aug 14 12:00:56 2026 GMT
Not After : Aug 15 12:00:56 2026 GMT
Subject: CN=d1a9c4898408d38ace5432b7bc191f1e7b4c81dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:49:72:d9:54:ab:d9:a8:9f:9e:af:10:a5:
c0:ae:cd:d8:bd:6c:a8:88:68:ab:9e:e5:ea:09:d0:
02:1a:39:34:5e:99:84:ce:f8:d5:ea:dd:9e:57:42:
b9:08:0d:d7:c3:68:4c:98:53:1b:fd:52:4a:c5:8a:
51:98:5a:0a:dc:29:4c:80:b0:86:60:72:a1:62:3b:
c6:f2:bb:bf:41:34:4d:c9:85:58:c6:40:9b:57:be:
3e:93:88:ac:d1:45:c8:22:64:97:5d:df:76:18:fb:
c1:8d:86:6e:2d:15:86:fc:92:c8:6c:48:9b:3b:74:
42:13:b9:cf:a9:9a:a5:68:66:92:9f:e5:e1:69:32:
24:6b:23:14:90:c6:81:0c:95:5d:ef:84:9d:12:fa:
65:cc:bd:47:30:3c:ac:ac:e3:66:98:9e:d0:81:78:
c0:1f:70:81:fa:99:5b:07:cc:e5:53:d3:e7:c0:aa:
89:02:3d:51:0f:68:84:22:a8:61:9e:68:e0:68:81:
ab:31:94:2f:de:13:f6:f4:8d:35:8a:77:3a:2a:d8:
32:72:fc:e0:d5:39:6a:fb:46:32:20:d6:f2:5d:fd:
2d:9b:94:74:f5:43:5e:67:53:64:87:e2:72:ea:88:
eb:36:08:93:c9:fa:5c:7b:15:67:d3:0c:a1:3f:61:
84:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A9:C4:89:84:08:D3:8A:CE:54:32:B7:BC:19:1F:1E:7B:4C:81:DD
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b9:a4:ee:a4:82:1d:82:6c:b3:73:98:15:76:a8:fa:21:be:
1c:e7:6c:df:0c:d6:dd:ff:eb:2b:1b:6c:fe:45:ae:7e:92:f6:
ec:ce:b5:e2:33:aa:90:c2:d3:1f:2e:f7:be:c7:2e:d9:37:18:
6e:f2:63:1d:80:73:77:a9:0b:e5:8d:f4:5e:b9:26:8e:12:54:
38:70:e9:43:e5:bb:e1:d0:47:61:d1:3a:d1:fc:87:f6:6e:fa:
da:f4:36:23:99:8f:4d:4d:de:0a:94:19:13:97:ea:ed:81:e3:
f8:24:f2:d0:39:5b:31:57:62:da:e4:c5:cf:88:85:c3:dd:20:
66:75:95:ea:cc:64:c1:a2:9e:49:e9:4e:85:31:1e:86:ff:d0:
09:75:cd:d1:4c:d7:cb:b5:dc:16:70:a1:e1:9b:fd:c4:cd:14:
36:42:cd:cb:2b:2c:44:b1:b3:67:f3:30:ac:70:3e:94:d2:c3:
e2:b1:61:bc:9a:11:f9:b2:12:25:2a:63:68:0b:f2:09:87:a9:
56:7a:dd:37:d7:39:07:49:09:e5:b5:6e:0e:29:7c:c8:14:cc:
a3:9e:03:fa:a6:a3:a1:7d:b3:79:d0:ae:63:68:a5:24:98:33:
c5:c1:5d:3a:a9:80:0a:b0:17:41:aa:8c:54:00:9a:54:43:c1:
76:0c:7b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:11 2026 by rpki-client