Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
File: 4sFE7jL911AT5_G4wtgH09rti74.mft (raw, json)
Hash identifier: strp9eiwTpsLJOQj149jm/hZYE3SI20OYnL+IoCNPRk=
Subject key identifier: 17:31:78:1D:8E:24:4A:06:F1:E2:66:91:4B:5A:38:B4:FB:B0:59:EE
Authority key identifier: E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
Certificate issuer: /CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Certificate serial: 01A140F11619C65C0E936181DB0382D19A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 19:01:44 +0000
Manifest this update: Thu 15 Oct 2026 19:01:44 +0000
Manifest next update: Fri 16 Oct 2026 19:01:44 +0000
Files and hashes: 1: 4sFE7jL911AT5_G4wtgH09rti74.crl (hash: bpRJgzQahyJgb7pmxpG9/eWLil5M+mMGfrTYv4J5xPo=)
2: qimpL4GnPOyoUuwHADETW2Ca-BA.roa (hash: 1Q13z0RPNiBFNEdoqsP4b2RZwfD+sGSDYlp0PmV8cak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f1:16:19:c6:5c:0e:93:61:81:db:03:82:d1:9a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Validity
Not Before: Oct 15 19:01:44 2026 GMT
Not After : Oct 16 19:01:44 2026 GMT
Subject: CN=1731781d8e244a06f1e266914b5a38b4fbb059ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:62:cb:3c:35:ce:39:b4:73:75:ad:52:31:
82:36:30:0f:3a:20:6e:e3:e2:ed:b5:d3:54:1b:18:
9c:19:64:e1:b9:1a:3c:c6:02:d3:5c:cb:db:ba:a7:
71:84:a0:79:ff:8b:52:e1:d7:f2:42:d9:22:ee:92:
36:e0:91:b5:54:52:28:f1:ef:b0:6e:c9:60:59:5f:
08:af:89:de:0b:83:6b:2d:f1:1e:69:c4:88:1e:af:
a3:26:9d:dc:44:94:0c:c3:a2:e1:9c:2a:af:33:76:
3a:aa:0c:df:42:df:f9:c2:2b:b6:e0:2c:67:75:05:
64:4f:9b:14:eb:7e:a2:51:a0:d0:5a:10:af:89:94:
96:f7:56:a8:fe:1b:0b:32:e0:b6:b8:01:6c:05:0e:
27:99:9e:87:56:05:6d:c7:57:42:43:dd:13:30:ef:
22:a9:de:33:36:d2:44:8f:e1:0d:f3:3f:d8:89:eb:
33:60:15:89:48:87:7c:29:59:7e:18:c7:1d:92:b3:
7c:ee:28:df:cd:74:4d:40:5e:bc:50:df:2b:d1:23:
bb:4c:9c:31:f2:17:09:a9:ad:73:24:f0:ee:32:e5:
ec:52:37:a8:f3:90:c1:9c:68:1f:88:72:97:61:02:
db:8a:3f:a4:e1:89:4c:ee:a8:3c:34:ca:57:ac:64:
6b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:31:78:1D:8E:24:4A:06:F1:E2:66:91:4B:5A:38:B4:FB:B0:59:EE
X509v3 Authority Key Identifier:
keyid:E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:89:f0:d4:6f:ba:1e:29:56:81:7d:db:81:11:7f:03:1d:ac:
fa:e4:4f:43:11:93:8c:f6:85:75:2f:74:d3:1d:0d:54:33:c1:
1d:ec:a0:41:58:61:74:c8:e6:85:df:7a:f2:97:23:b1:73:07:
8a:99:b9:64:45:ea:af:80:30:ad:90:bb:8a:87:7b:33:eb:52:
b6:da:6f:ec:23:1e:0c:82:06:66:88:91:20:16:42:a4:a7:c3:
9e:26:fd:36:d4:63:99:4c:8d:7c:9b:cc:33:4c:b8:a3:dc:60:
04:63:ba:f5:3d:93:c7:ea:8c:ba:2a:8c:20:84:3c:11:ea:72:
3a:4b:a1:0d:df:6e:d1:0c:51:ec:80:8b:f0:cf:cc:f5:60:a3:
51:02:26:e5:2d:44:1b:b9:32:c0:41:56:a8:82:dc:e6:eb:b1:
16:91:96:1b:b9:c0:ff:48:94:bd:af:c6:30:7a:cd:df:90:28:
52:45:6a:16:07:54:f5:4f:ea:b8:b7:04:2b:34:0f:a2:bf:d1:
ed:aa:15:eb:7d:09:99:85:7c:3d:5a:61:34:b1:3f:44:c7:5d:
bb:8f:dc:4d:85:83:89:75:4b:ab:75:8f:e6:2d:16:50:d9:9b:
ef:6e:72:40:61:ee:7f:15:a2:10:20:ea:a6:73:1d:82:a8:84:
b3:45:2f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:23 2026 by rpki-client