Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
File: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft (raw, json)
Hash identifier: deYYYB0VJC7tZ0XLqxXmuTvsvlLxjeshoFV7asK1Kx4=
Subject key identifier: B9:22:FE:90:36:62:D5:5F:90:3E:6F:5B:EF:4E:CB:A9:AB:4E:81:E0
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Certificate issuer: /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial: 01A0EC2F403D58DCEFA559AB337F7A3EC79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
Manifest number: 0DBF
Signing time: Tue 29 Sep 2026 08:01:54 +0000
Manifest this update: Tue 29 Sep 2026 08:01:54 +0000
Manifest next update: Wed 30 Sep 2026 08:01:54 +0000
Files and hashes: 1: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl (hash: 6Yu7KtxZmYR/WjlWcXPhurBasy1CE5TY7Q/oWLKQLTg=)
2: F354eI049VK49q6Qgm7U8i60b2s.asa (hash: pA+2lvFRT5MH4svMFLwsCGwy8FSdH8pLNuayp6USO0E=)
3: WTnZHawCrFt92HJ5c52B4Lpjzyk.roa (hash: ULPffjH4r407eXPyl6PQZZu6OtSid0XwosfEwigrGuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:40:3d:58:dc:ef:a5:59:ab:33:7f:7a:3e:c7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a323546484220cb402063380f4016369262acf
Validity
Not Before: Sep 29 08:01:54 2026 GMT
Not After : Sep 30 08:01:54 2026 GMT
Subject: CN=b922fe903662d55f903e6f5bef4ecba9ab4e81e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:55:be:2e:64:89:93:f3:59:cf:05:c9:6b:
4c:01:e5:50:d9:09:f9:6f:18:12:3b:5b:52:8b:c9:
8a:3d:ef:b4:ff:1b:d5:95:3b:fe:8f:cc:61:01:bd:
91:a8:8d:1e:d8:81:06:94:13:36:af:24:1d:26:b1:
69:d8:75:11:7d:36:af:8e:94:ad:82:69:53:0f:b1:
15:89:19:4c:d7:03:2c:f4:d8:ee:8e:6e:6d:d0:40:
22:1d:82:16:d4:76:93:3e:e4:44:06:45:23:63:0d:
be:02:a9:cb:c2:03:13:d7:3b:b9:2a:19:ff:f1:39:
14:90:37:d1:12:d3:5f:0a:61:07:11:41:8f:da:ca:
80:34:52:09:10:48:88:ac:ca:34:80:96:9a:00:99:
b1:4c:4d:b6:f5:a6:c5:e0:6c:ed:2a:a0:9c:59:6b:
48:9d:4b:48:91:d0:e3:30:8e:50:37:c3:49:f0:68:
fd:30:08:92:09:e1:b6:90:87:f0:03:89:33:d8:48:
19:46:73:51:0b:9d:96:a0:07:9e:9c:ff:45:90:5b:
ac:93:12:dc:59:91:f9:23:da:42:96:c3:57:f9:40:
78:c8:98:d5:cb:f7:51:05:dc:94:db:82:4f:52:9e:
8c:62:50:27:db:ac:07:e0:6b:d9:84:05:0f:27:73:
90:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:22:FE:90:36:62:D5:5F:90:3E:6F:5B:EF:4E:CB:A9:AB:4E:81:E0
X509v3 Authority Key Identifier:
keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1a:a0:53:71:48:02:5f:16:8b:ef:11:f7:b2:20:34:9f:c8:
fd:38:10:e3:84:16:f6:78:8b:c0:65:02:19:97:3b:22:2c:47:
2b:b6:4e:3c:d5:02:d9:e8:de:4f:b9:a8:0e:b8:23:89:d6:6c:
87:7c:db:e7:55:5b:fa:91:e0:f6:39:de:76:35:ac:30:66:e8:
1b:35:5d:fc:31:85:ae:e4:c2:3b:d5:10:f2:ae:bc:45:7e:78:
fd:de:a8:c1:58:5b:5d:0b:09:c0:be:83:6e:85:03:91:4f:05:
63:18:9f:d3:7a:49:df:51:ce:fb:b5:c7:b0:53:a0:2d:60:ee:
c0:41:66:39:d8:4a:69:73:35:fe:1e:c8:28:3a:e1:93:9f:7c:
32:87:84:db:60:ab:5f:a4:dd:72:d7:ca:5f:23:bf:6a:db:44:
e5:0b:75:d7:a7:69:2e:e2:63:14:73:1a:1b:3f:4b:f3:16:13:
e3:fe:24:84:21:f2:d2:d1:86:d0:50:37:f9:a1:a2:ba:b2:35:
9b:84:c7:55:85:c3:45:2c:51:90:54:0a:2d:b3:58:5b:95:23:
8d:44:78:96:bc:37:ea:6a:93:76:80:93:8c:4c:44:13:b5:3c:
13:ea:ac:25:09:8b:25:f0:d3:67:e0:ab:74:ed:49:e8:d8:d3:
73:37:93:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:41:12 2026 by rpki-client