Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier: wvv9Aa2SXEUoxY4wvrvU3yqBEDov1K+UNGzLAsDvX4U=
Subject key identifier: CD:46:6D:59:2D:00:87:0B:4D:F5:33:ED:91:25:BE:82:0F:09:88:87
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial: 01A176CC1EA7768D8E283937C4FEC40C4CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number: 0A45
Signing time: Mon 26 Oct 2026 06:00:50 +0000
Manifest this update: Mon 26 Oct 2026 06:00:50 +0000
Manifest next update: Tue 27 Oct 2026 06:00:50 +0000
Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: QAGpoV+DvuEsh+yd1n1ehWBu7PYztpNlkdVsjh3qEzM=)
2: PhborNJW4v901OmJBHlugkCPu9Q.roa (hash: Woe0vtydZEfAzh9wNFeDl+e4gU+OEGllk8tizf6C77U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:cc:1e:a7:76:8d:8e:28:39:37:c4:fe:c4:0c:4c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
Validity
Not Before: Oct 26 06:00:50 2026 GMT
Not After : Oct 27 06:00:50 2026 GMT
Subject: CN=cd466d592d00870b4df533ed9125be820f098887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2f:cf:7c:38:39:57:12:bf:48:44:d3:6a:9e:
48:a0:04:02:d4:38:ac:84:59:de:f6:62:ba:98:78:
82:74:d2:71:fe:2d:83:5e:57:df:e3:41:56:3a:9a:
ce:16:cc:ea:e6:bc:8d:cb:39:f0:94:bb:8d:77:fb:
23:b6:85:cb:5a:27:04:75:16:26:bf:59:e1:00:de:
94:94:55:5e:54:ff:2f:97:41:99:0d:b2:ff:86:fa:
37:a0:88:27:0d:74:85:5d:09:64:04:3e:7d:d2:21:
5a:c5:86:69:ca:cf:75:1c:25:3c:da:40:aa:34:f7:
9e:30:a7:6e:3b:df:0b:2a:96:f5:de:a6:86:b2:5c:
01:3d:4d:65:c1:0a:14:ce:4b:ad:68:db:c6:0c:5a:
1e:07:78:76:31:6e:2b:87:0f:37:ea:8a:41:0f:3a:
b1:f4:e6:13:94:03:b3:90:4f:81:2c:21:7b:be:68:
d0:02:91:fe:30:85:d7:1b:d6:47:a7:a9:37:9e:9f:
3b:96:4a:92:9d:c3:44:b1:18:b2:7a:ce:9f:b6:25:
1d:31:ec:83:44:a1:7d:84:de:66:1f:f9:7b:ee:6b:
cc:51:e9:fc:05:fa:8b:03:58:a2:f0:56:63:0d:bc:
45:4d:04:a3:eb:c0:d1:9e:6c:59:00:99:25:29:3c:
bc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:46:6D:59:2D:00:87:0B:4D:F5:33:ED:91:25:BE:82:0F:09:88:87
X509v3 Authority Key Identifier:
keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:a6:8d:67:e6:45:55:00:56:a0:aa:54:47:29:02:42:f4:13:
8a:52:9a:d6:c7:3f:a6:af:0a:f0:f2:0e:41:82:bd:ce:b2:da:
57:38:69:b2:4b:c0:8f:98:2a:c6:44:52:c6:b1:41:f4:ff:55:
78:47:0a:0d:33:0f:7f:96:94:1f:53:ec:0a:ef:bd:92:21:da:
32:46:cc:16:4c:d1:20:3e:c1:d3:e4:8f:22:c3:a6:7f:c9:1f:
3f:86:b3:bd:2e:c1:63:51:d6:76:80:d4:be:ac:f9:54:20:1a:
f3:99:f3:49:f0:94:5e:0f:75:c1:da:77:93:25:fd:26:d5:6c:
a6:ee:40:42:1d:4b:30:9d:e0:46:65:16:25:f4:f9:db:9c:7c:
3f:c8:6d:dd:30:87:8c:e0:7f:67:3d:db:4f:dd:77:b3:91:f0:
ab:a3:d3:67:d8:e7:7e:2f:b5:55:72:89:6f:0f:c6:f1:da:d9:
6d:c9:eb:21:93:f2:af:e2:67:c1:be:b2:db:05:20:aa:93:e0:
d8:b6:4e:f7:22:82:81:52:da:d0:79:28:1b:a1:b3:26:25:9a:
36:b0:6c:9f:e0:20:0e:ce:57:31:54:f2:24:44:21:ec:26:9b:
1f:38:ab:40:0e:6c:c4:23:b1:20:b0:37:3b:67:ad:d1:b1:c0:
72:ef:df:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:24:34 2026 by rpki-client