Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
File: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json)
Hash identifier: I8itgcXbqTBzW8ELAKtAtBMok+2TOENixml5bTjyf9Y=
Subject key identifier: CC:53:E1:A3:7D:56:94:A8:8F:0D:91:12:14:CC:0A:36:A9:A4:3F:14
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 01A14D9975AA0E447016FB538547748EEBF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
Manifest number: 0FC7
Signing time: Sun 18 Oct 2026 06:01:04 +0000
Manifest this update: Sun 18 Oct 2026 06:01:04 +0000
Manifest next update: Mon 19 Oct 2026 06:01:04 +0000
Files and hashes: 1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: 4Dbw8yQ1AZYdSSwNGDZqkmgr0T3I368U2zB8Y8YLck0=)
2: emclNVVbrOSgwEekW1bHsSKyOAU.roa (hash: umsW/YEVV8b6bDEdAr61c5AeNAQYb7n62AaiTl4HN1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 05:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4d:99:75:aa:0e:44:70:16:fb:53:85:47:74:8e:eb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Oct 18 06:01:04 2026 GMT
Not After : Oct 19 06:01:04 2026 GMT
Subject: CN=cc53e1a37d5694a88f0d911214cc0a36a9a43f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:9d:51:11:fe:63:65:a5:ee:ef:c6:de:62:
f2:bc:72:5f:23:79:14:12:e2:5a:47:92:62:3e:bb:
d5:29:76:0e:e6:78:fb:3f:55:6c:d7:33:08:90:fc:
c0:75:af:df:c6:d7:e8:73:a3:42:55:12:c5:10:41:
ea:a4:10:87:7e:3c:84:c5:dd:3f:fe:d1:04:ce:c2:
1c:c6:3f:67:1d:fb:6d:82:de:36:8d:b7:61:dc:4b:
e2:e5:96:bb:1d:f5:2e:1c:c5:52:1e:5b:3d:7d:3c:
24:d6:6b:f2:25:9a:ca:2b:2d:ff:78:fc:f0:12:e3:
83:08:60:81:ce:e5:ec:d3:bb:5d:f4:ed:f5:b8:eb:
ce:4f:07:54:bf:53:2c:7e:ca:fd:ae:10:28:bc:b2:
14:34:10:08:3d:05:f7:48:eb:71:44:27:44:52:03:
d8:5c:45:c4:92:27:91:3e:9d:04:18:16:4b:06:d7:
55:12:b7:56:49:4e:a5:23:f0:fb:01:9e:88:af:4e:
80:5f:c4:fd:12:ea:d8:99:e9:30:51:41:b2:84:04:
2b:99:73:82:80:a1:57:da:35:6e:db:d6:49:c8:ec:
8a:45:d6:b7:22:b4:bc:d2:3c:b4:e2:e8:e2:51:54:
aa:aa:10:bc:87:dc:37:b9:4a:80:d0:de:f4:c8:c6:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:53:E1:A3:7D:56:94:A8:8F:0D:91:12:14:CC:0A:36:A9:A4:3F:14
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:93:3d:45:df:a2:c7:54:b1:16:c0:33:48:e1:c5:9d:c0:37:
0e:6f:62:a0:1b:4f:75:2e:e2:b9:11:0a:19:36:a1:af:81:53:
61:4b:e1:cb:74:0f:40:d3:c6:e6:a9:98:8f:73:24:1c:79:1f:
8d:eb:df:46:46:1d:4d:04:46:0a:70:cb:19:9e:8c:69:07:42:
cd:3c:1b:d8:9c:14:11:31:d0:18:f4:d8:34:0c:de:92:b7:36:
26:68:2d:bd:14:ce:07:8b:de:21:46:29:df:b4:31:ac:de:f6:
b2:7a:3e:0e:5b:cb:ab:87:30:f7:ec:5c:37:80:dd:0c:28:65:
79:42:3f:cf:4d:d9:83:ea:03:d2:bd:98:22:f9:0a:6e:21:d3:
a0:fd:1d:19:53:1e:78:25:bb:3b:90:90:07:71:d9:87:4e:b9:
a2:6f:2d:a4:87:69:0b:54:c4:74:cb:43:d7:33:c9:99:35:6b:
f8:f9:87:29:d5:77:f2:af:e7:2e:0e:27:85:30:87:33:3b:39:
0e:18:81:e7:71:ca:90:63:ee:91:45:cb:f6:5e:9d:94:fe:e3:
bf:fd:c8:21:91:90:8b:05:00:be:9a:da:f1:09:13:7c:14:60:
12:1b:fd:58:78:9d:00:27:89:ea:e8:ab:80:85:98:1a:0b:1c:
74:ee:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 11:33:21 2026 by rpki-client