Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
File: 4IZuWnxyXctqE4zGw0DP2tQxXT4.mft (raw, json)
Hash identifier: vbBydUqK7MhlhXvKp/AmhVRhDyBJMaSCxlfeObkSaaI=
Subject key identifier: 99:AF:39:18:6F:3D:2E:B6:DB:90:35:C1:91:1D:21:A0:61:35:D7:6B
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 01A176281359BA6BA141AA8AF93A19A30CD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
Manifest number: 1ACA
Signing time: Mon 26 Oct 2026 03:01:40 +0000
Manifest this update: Mon 26 Oct 2026 03:01:40 +0000
Manifest next update: Tue 27 Oct 2026 03:01:40 +0000
Files and hashes: 1: 2KPw1cvbm50f0LYM14wl1jqJ9og.roa (hash: A1Jjz4VQ5P7K7cWtSDzEEjwDvup5VASHzuFeW68IpQ8=)
2: 4DjthTFuBFBUicM1fyQrr1R-zpA.roa (hash: /khTTdB4MFujwhgprh1GKjQ5sevdR189YyvZSZEdlvw=)
3: 4IZuWnxyXctqE4zGw0DP2tQxXT4.crl (hash: kjLYAZvjHHecf0Tpldle3xS0sBHvjymxNDw4dUI1/PQ=)
4: 7pxmMXSw-HkZG9cAZnnYN-vEkfQ.roa (hash: mEU3VRJ8fuQ7izupJUqVvL0qdRuIxFLkUNg5UpgN7ss=)
5: 8OlOEZgObzEvy1E8VmktgWUdQi0.roa (hash: vpY2iql20BkJOzJyUWVMsBYvSfuAgM3xo1h/baltqkw=)
6: IbI54r9UQEycQUhSG_R7IhAl23w.roa (hash: Xsth8W4XkRG829Saw23qV/fuk3mylDa5vQqSxMBq6Os=)
7: kaNSS3H8CcGwyEb9L0LHfodkCbI.asa (hash: w3bZtfnN5MHgcG0AWFUlSLsnuz4fMXs0k06prQh3OWE=)
8: mxy-X6DSpF8ZztbUQjMZo4HUfAM.roa (hash: 8VsFON9Y1Ltuj+mPJYLJdGhQhe4GbTQ4L4kgjue4VFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:28:13:59:ba:6b:a1:41:aa:8a:f9:3a:19:a3:0c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Oct 26 03:01:40 2026 GMT
Not After : Oct 27 03:01:40 2026 GMT
Subject: CN=99af39186f3d2eb6db9035c1911d21a06135d76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0a:e4:25:cf:23:41:a5:f5:63:77:66:68:57:
f8:97:b5:9a:f7:25:8f:fa:ec:30:3a:43:c3:0b:0d:
7c:58:b7:73:00:3c:07:9c:0d:fa:88:47:07:f4:5f:
e6:66:b7:00:ac:13:98:be:74:f5:a5:eb:f2:2d:02:
bf:7a:92:5d:c5:52:4b:94:a9:96:60:47:1a:0c:28:
50:80:49:92:b9:af:aa:25:73:85:2d:bf:38:6c:e7:
77:e4:69:6a:59:65:cd:31:95:8f:a6:ee:cd:92:0f:
57:5a:d4:ba:50:54:5e:43:70:eb:0d:d8:30:a5:25:
81:1b:66:36:a6:05:9a:2f:41:55:aa:fc:f4:ba:bb:
7f:88:64:3a:65:60:85:34:79:a8:e8:41:58:33:26:
c0:d8:2d:af:68:78:02:f9:35:47:16:f3:10:06:21:
d3:25:a6:f2:7c:a2:a2:b0:d4:b9:af:bf:b2:fe:30:
ce:c0:76:1b:6b:77:e5:91:2a:cd:ab:f0:54:47:2c:
0b:9b:1c:c7:b1:36:42:07:ca:f9:b8:91:9f:0c:90:
c2:d6:8c:e9:8c:a2:ec:d5:82:33:96:36:f1:3b:f6:
08:d4:4c:c5:81:c3:6b:50:57:dc:c1:de:40:50:46:
74:5c:07:87:f8:12:27:99:9b:ca:b3:d0:d8:d5:3b:
b3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AF:39:18:6F:3D:2E:B6:DB:90:35:C1:91:1D:21:A0:61:35:D7:6B
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:db:d3:e1:98:02:18:b6:f8:e3:f6:24:35:ca:c8:ad:0e:3f:
89:81:8d:35:4a:d8:37:a7:68:f6:50:4c:7e:cf:a7:1a:2a:79:
da:f4:da:d4:7c:51:55:00:0e:01:8a:de:87:8b:5d:da:9e:fe:
aa:d4:19:ff:09:95:03:6c:9f:3c:be:9f:fc:67:ff:25:a5:52:
62:69:4a:4b:a0:f3:94:f3:1b:6d:27:91:1c:b5:ff:f2:58:92:
d2:2b:ff:fa:ef:22:c2:f4:21:4e:29:4d:8a:69:48:56:5a:e0:
47:42:6b:d5:ec:c7:c9:11:69:ea:d4:60:f6:42:92:cf:2d:0b:
9f:e9:ea:5d:71:f8:85:34:8a:44:8f:51:84:d4:85:1b:0d:06:
80:7a:c6:a3:26:ae:93:dc:36:b8:1c:a7:fa:76:17:ee:52:08:
f2:27:ab:08:4b:03:b3:df:02:9c:9a:e2:91:e3:4c:0a:a1:cd:
1d:2b:51:26:7c:7f:28:54:f2:ed:a1:34:42:ab:ac:e5:cb:2e:
2b:92:67:6e:73:21:cb:13:3f:06:3c:d2:7d:00:34:dd:09:98:
1f:3d:21:d5:bb:28:5f:42:b3:9d:e6:0f:ac:38:a4:b4:ae:ed:
de:6c:a5:32:8d:9f:41:4f:3a:ac:32:1f:77:a0:ce:c0:f8:05:
8d:73:6d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:13:58 2026 by rpki-client