Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: Y/tzC/3W7C8ZPYIdVtJiUrtQyVdLWMwmGDnHR6htiog=
Subject key identifier: AB:37:10:80:14:BE:43:A4:8D:47:42:F4:71:68:0B:3C:C5:E7:43:BC
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 01A107A5ED8057F0FDDCB0EA80E66F1E40D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 0A40
Signing time: Sun 04 Oct 2026 16:01:16 +0000
Manifest this update: Sun 04 Oct 2026 16:01:16 +0000
Manifest next update: Mon 05 Oct 2026 16:01:16 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: i3q1F9N5IjFknRPjlpnsrJU9dEm870CePWpxkje0zW4=)
2: QGMbmM8ll11r2ayfmomjOP9Vi5c.roa (hash: XGhVAar8wCBxCyb0ylA0x+uNoCI6FXRlTU/gvBj/94g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:a5:ed:80:57:f0:fd:dc:b0:ea:80:e6:6f:1e:40:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Oct 4 16:01:16 2026 GMT
Not After : Oct 5 16:01:16 2026 GMT
Subject: CN=ab37108014be43a48d4742f471680b3cc5e743bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:f3:a1:fe:ea:82:d3:f1:2f:a4:36:18:2d:
d9:26:2b:1e:28:3b:14:92:c1:61:b6:ca:c6:a4:2c:
a7:91:d3:0c:e3:76:66:00:8f:25:c2:8f:61:b5:02:
46:df:37:38:9c:69:a5:42:8e:99:fb:ee:aa:1c:56:
e8:b4:c9:15:d0:0e:bd:3d:cf:c8:86:34:b1:6f:7e:
2c:4f:da:a9:40:33:d7:7a:39:af:6d:9d:7b:82:66:
72:c7:44:74:e2:68:84:62:ec:bb:d1:25:dc:a3:64:
47:8c:ae:84:f6:39:3d:1e:43:ec:4c:de:06:92:80:
dc:03:c0:62:2c:d0:7f:7b:24:e7:d5:65:7f:5c:97:
b4:6a:73:93:56:8a:3c:f9:f3:92:4e:d7:78:d5:1c:
29:5d:cb:34:bd:9a:9e:ac:04:58:ed:1b:fe:54:1c:
29:fc:df:63:82:35:25:e8:f7:68:03:e7:ff:01:7b:
65:2f:6f:96:70:ce:41:41:71:5a:3a:c7:69:c6:ac:
e5:d4:88:5d:3d:7f:30:42:55:b3:0c:ef:5f:1a:53:
64:14:c3:09:62:b6:0d:41:25:98:a0:95:c0:b7:77:
59:08:a2:b0:54:db:3b:e6:cf:ec:6f:72:d1:ba:08:
ae:a3:10:f5:87:86:e1:36:5e:3c:eb:7d:f6:8c:94:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:37:10:80:14:BE:43:A4:8D:47:42:F4:71:68:0B:3C:C5:E7:43:BC
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:f0:5f:b3:8c:84:23:2a:e0:f7:9f:26:d2:66:d9:4d:49:b9:
d3:af:72:7d:95:8e:7c:a4:55:19:33:d2:58:2d:57:1e:87:5c:
8a:35:a8:e1:20:7e:00:e8:03:78:9a:c4:03:34:2c:e0:2a:ca:
6b:47:88:d5:72:27:fd:1d:7d:8c:0b:ab:d0:0e:05:08:4f:d6:
cc:79:9b:9c:0e:bd:4b:cc:29:c4:c7:d0:dd:03:da:b6:84:94:
93:55:90:dd:3d:5a:6d:46:0e:b0:38:dd:c9:02:5a:ef:dd:2c:
b9:83:20:eb:07:7b:06:65:37:19:c7:97:81:c7:2d:c1:c3:1e:
d7:57:f2:bc:4e:e6:d1:c4:a4:20:13:cd:d7:c6:8a:82:94:17:
4d:da:fd:80:b2:f3:b2:4f:7f:b8:a2:95:f0:ab:58:12:6d:d2:
a6:b0:cd:13:2f:1c:15:78:20:64:f8:ec:c0:81:6a:e0:45:09:
4d:0c:5d:ef:bf:ec:e4:f3:59:1a:e8:f5:22:ef:81:e2:ea:06:
df:db:54:24:ba:cc:62:cd:7a:61:33:c5:11:0d:b9:08:dd:8b:
73:8f:22:4e:7f:fc:19:72:5b:43:15:52:84:f7:ca:e5:b3:af:
46:69:5d:73:71:5b:f2:29:67:7f:82:79:23:42:43:ce:5d:26:
ca:ee:88:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:43:59 2026 by rpki-client