Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
File: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft (raw, json)
Hash identifier: loKG6jUBqOlf8b6hKlElac6qJbjAsRtlxtaxr0uGkI4=
Subject key identifier: F3:FC:A1:4B:88:37:A1:1C:DD:AD:1C:42:2A:8E:32:1A:9B:30:62:E1
Authority key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
Certificate issuer: /CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Certificate serial: 01A13D4A5D52E3C2A709F74C76F5DA0C5A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 02:00:45 +0000
Manifest this update: Thu 15 Oct 2026 02:00:45 +0000
Manifest next update: Fri 16 Oct 2026 02:00:45 +0000
Files and hashes: 1: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl (hash: 6vk0mViIZTKnlVgsnMmWXejMRgzh0XNDeKxPNT923FE=)
2: R887zp6sFk_dmP9fKtjrY24hpnk.roa (hash: xMhP2OXxBMHOz2sXZctb+22OEYUQG/I6CAM/IUlPtic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:4a:5d:52:e3:c2:a7:09:f7:4c:76:f5:da:0c:5a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Validity
Not Before: Oct 15 02:00:45 2026 GMT
Not After : Oct 16 02:00:45 2026 GMT
Subject: CN=f3fca14b8837a11cddad1c422a8e321a9b3062e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:44:79:73:b6:b1:15:03:69:95:a1:fc:e5:
09:d5:07:8c:53:f6:f7:9f:31:46:4b:c0:c6:c5:e3:
9f:25:8c:55:aa:b5:0b:a5:a0:bb:7a:34:2a:19:c9:
39:c2:b2:3a:98:08:9a:3c:dc:f2:ea:e2:ac:95:8d:
5a:b2:32:77:8a:ff:98:3c:24:01:6b:89:1f:46:7c:
07:f7:e1:c4:a1:4a:c6:7c:fe:77:2c:ae:9b:5a:7c:
9f:02:12:16:20:33:3a:de:c0:24:23:d4:0f:04:a5:
1d:87:c6:b5:b3:8c:22:91:94:3e:42:73:67:43:11:
ab:20:25:2c:96:05:02:6b:2d:86:fe:d0:77:b6:26:
40:f6:04:73:04:c0:ee:5d:3b:6f:bf:23:e4:95:05:
51:3e:56:ce:85:3a:ac:c9:63:5d:aa:92:46:d1:fa:
72:f1:6e:ad:b3:b0:5e:6c:14:fb:6a:e9:67:9d:cd:
0d:91:92:52:d8:e1:2c:f3:71:77:c5:25:5d:1f:69:
e0:15:3e:5b:ad:6d:c8:8c:00:45:c4:0d:50:95:85:
a4:be:54:c2:b0:c0:96:f3:c2:0b:4d:49:57:e0:07:
4b:70:bb:0f:3d:6f:ca:45:4d:d2:a9:3b:8e:7a:4e:
28:18:cd:b8:b1:e9:62:13:29:bb:d5:ab:1c:1d:8e:
5f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FC:A1:4B:88:37:A1:1C:DD:AD:1C:42:2A:8E:32:1A:9B:30:62:E1
X509v3 Authority Key Identifier:
keyid:E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:07:49:0b:f9:b4:d3:87:35:4c:77:64:f3:96:f2:b4:09:28:
d3:de:90:c9:c6:34:45:03:1a:a6:8f:d8:c7:ed:e2:38:df:27:
3f:55:91:6a:3a:73:89:c6:29:0a:5f:b1:77:5c:be:3a:cf:6c:
4a:11:be:e5:36:24:c1:95:0b:9f:c9:25:8e:48:3f:a6:8e:3a:
a1:4e:b7:b5:4e:ba:6d:4c:8b:5a:bc:d3:bf:ec:6b:65:ac:f9:
35:08:45:d9:9b:0a:8e:e5:28:4a:32:04:33:b7:4d:10:19:08:
46:e1:7c:58:df:85:6a:5c:0a:89:8c:0e:8a:a5:bd:d1:5e:a8:
98:f0:c0:07:1f:e0:b5:ea:21:28:14:99:75:c6:59:57:7e:06:
9a:ff:a7:f5:f8:66:51:86:38:24:ed:de:ca:b7:8f:bc:8e:16:
00:1b:ed:e4:9e:36:09:21:f8:ec:3d:75:43:74:70:b2:99:57:
44:04:e0:9e:51:65:53:8f:ce:39:03:16:e9:0d:6f:f4:b0:94:
23:2f:3b:74:b4:05:f9:3b:0a:d8:62:2e:4f:7e:6b:47:79:cf:
b3:41:a2:bc:6e:1f:be:f1:58:aa:89:32:6b:b5:82:0a:80:6c:
05:cd:79:ab:93:bc:f0:09:b5:99:2d:4f:72:14:71:74:53:29:
bd:c2:f3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:35 2026 by rpki-client