Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: IiJlF562KPjfCij3vuyFwZZZD5ghAwZwvqjzrqOCzl0=
Subject key identifier: 8C:D3:F8:D1:B2:6C:E9:27:18:3F:98:95:0C:40:38:6D:AC:FF:29:BA
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 01A183078545CBBF61155E5C1AAEBCFB08F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 1ACE
Signing time: Wed 28 Oct 2026 15:01:10 +0000
Manifest this update: Wed 28 Oct 2026 15:01:10 +0000
Manifest next update: Thu 29 Oct 2026 15:01:10 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: FNIbCszStM1ZbC/HtQE/nEirvn9nzHVwc5GIzKV1sBY=)
2: FtpP7jqiRqsaewteqUCm2wyEXLM.roa (hash: MK0f39W8byL9gsiBPX02BzYZlhRpLBc93Ceao7rPOjg=)
3: a7W4vQeQw0IYd5G5T60uWMaPKGs.roa (hash: tRWFQQI0YZC0M7nzgTovhHQ6mNNC+raBd4UmVBuNPyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:85:45:cb:bf:61:15:5e:5c:1a:ae:bc:fb:08:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Oct 28 15:01:10 2026 GMT
Not After : Oct 29 15:01:10 2026 GMT
Subject: CN=8cd3f8d1b26ce927183f98950c40386dacff29ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:07:40:81:7b:fc:45:09:55:a8:f6:6d:55:
72:61:1a:07:16:ed:10:8c:65:ac:04:1f:92:41:cf:
31:c1:ab:3e:28:f2:c5:4e:49:bb:10:2f:6b:39:6a:
60:93:ed:c8:55:f5:4e:9d:fe:66:c7:15:26:7b:81:
64:8a:89:2a:3d:69:89:a7:b3:41:aa:39:c4:c6:49:
45:0a:25:ca:d6:02:30:44:87:13:e5:37:d3:65:83:
21:e6:31:69:cb:a2:b0:c3:1c:97:8c:53:f9:f1:16:
6a:0a:11:03:23:64:ca:a1:37:dd:69:8d:dc:35:4f:
f0:57:04:d8:29:a8:9b:bd:26:c6:0d:53:58:c6:a5:
4d:00:1f:8c:81:6a:38:37:18:a4:99:c1:a7:43:f6:
fe:9d:78:a3:43:73:90:77:df:19:41:eb:c0:06:b8:
a8:fc:af:44:1b:49:5a:f9:fb:74:df:a5:82:92:89:
cb:37:0c:9a:e8:31:74:bd:25:66:fe:70:b3:79:ab:
0b:73:2d:12:ec:32:b2:9e:69:c7:f6:22:72:bc:b8:
43:1e:39:cc:fd:7a:c6:1f:ad:a8:59:3a:5a:4e:5a:
b7:41:0e:d4:0f:9e:7e:9b:7c:e1:ad:7c:d2:7b:07:
0c:ae:57:0d:ad:54:46:c2:d3:2e:f7:50:c5:9c:98:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:D3:F8:D1:B2:6C:E9:27:18:3F:98:95:0C:40:38:6D:AC:FF:29:BA
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ef:86:e3:fb:db:91:c8:c8:98:69:3a:ef:ab:d5:ed:0c:dc:
30:b0:6a:b0:3f:ea:cf:d3:5d:10:4e:ef:6f:f4:54:98:a9:9c:
5b:55:70:f9:a4:57:47:ce:d6:22:24:04:8a:18:ff:ca:f8:32:
26:11:c3:b5:4a:8c:ec:7b:07:30:a7:71:dd:a0:fb:0f:19:4b:
b3:fe:d2:db:a0:c2:19:d5:f2:fb:8e:d3:1d:4c:d9:66:47:fd:
24:f0:16:ff:e5:da:38:f7:37:fb:9a:5f:ed:0a:ff:8d:e9:3f:
d6:26:15:6e:5e:0d:bf:c6:ae:6c:1a:04:3b:80:cf:cd:29:d8:
42:40:98:4c:45:0d:2f:2e:35:8d:41:31:bb:a0:9d:51:a4:da:
b7:2f:b5:67:1a:e6:d5:8b:9f:9c:95:1a:a6:97:35:ea:9f:56:
52:99:88:e2:a3:8c:79:a5:26:2b:33:4a:dd:5f:b4:2a:cd:c7:
88:d7:98:48:bc:78:41:1e:1b:fe:0c:e9:a5:a3:c1:f6:37:4d:
41:6e:46:a8:14:df:ab:8c:6d:7f:d9:13:fb:a3:1f:22:99:0f:
92:61:ec:dd:72:f5:bf:a2:a2:68:32:13:79:ae:61:08:61:03:
13:c5:48:5a:8c:6c:e8:60:2a:e6:49:da:8a:42:3b:9e:bb:61:
ac:e3:69:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:47:23 2026 by rpki-client