
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File: 4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier: OXN1MKlYX1iUMjxQ+UAnK3tSbL4NDc0CessqMZw8Mj4=
Subject key identifier: 9D:1C:5B:E7:B7:DE:51:8B:0D:D4:72:DE:2F:58:AA:97:41:63:FC:9A
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer: /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial: 01A141CC7465BBB4B721E2B895B365BE292C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 23:01:20 +0000
Manifest this update: Thu 15 Oct 2026 23:01:20 +0000
Manifest next update: Fri 16 Oct 2026 23:01:20 +0000
Files and hashes: 1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: f3ySh98/lpipJaqmR7dDmG85c717VEVFXELd33HTuVc=)
2: 8WgF1FeeAMIWLEqNHsEmrCFfWUU.roa (hash: l9CCrON/4HDYrH0Vj7tQlkfUKI21p0hKJL3nNR+WrZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 23:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:cc:74:65:bb:b4:b7:21:e2:b8:95:b3:65:be:29:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Validity
Not Before: Oct 15 23:01:20 2026 GMT
Not After : Oct 16 23:01:20 2026 GMT
Subject: CN=9d1c5be7b7de518b0dd472de2f58aa974163fc9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bf:49:80:2a:26:d5:9c:7c:22:c6:7c:d7:cd:
a0:9f:2e:de:ba:6a:52:12:25:26:75:d1:ab:49:61:
8b:a3:69:95:9e:e0:8a:1d:b1:4a:7d:7a:bc:84:dc:
bd:8a:5b:49:74:40:56:ee:ea:2d:d4:f2:f1:a1:4e:
95:42:ea:5a:d3:66:84:97:16:d2:fe:f2:b2:04:3b:
90:5e:ad:a6:c8:ad:2c:6e:11:ba:2b:65:d8:2b:72:
37:00:0d:cd:40:cf:93:e4:55:dd:e5:4c:2f:00:e4:
25:00:24:f9:d2:19:2f:5e:f0:0e:39:3d:cc:4c:f9:
d9:97:4e:9e:36:ac:4c:05:9a:57:01:3f:20:9d:dc:
f6:7a:bb:f0:5f:53:1c:4c:c7:cd:d7:5e:4a:28:2e:
6a:01:d1:66:f0:1f:fa:af:bc:f9:9b:02:62:ae:7e:
f1:63:e2:92:de:72:22:1e:d8:fa:43:d1:b5:27:54:
43:0c:b2:4c:86:96:72:47:f2:b5:da:8f:4e:f5:38:
17:f6:0a:f8:1f:98:6c:7b:b9:88:4b:4d:2e:26:ba:
4c:b9:b9:c7:6e:e5:d4:35:33:d2:d0:ab:d0:a3:75:
64:71:ec:49:16:55:44:e9:c0:f8:82:62:5e:d0:53:
66:1a:10:66:d3:aa:01:f1:da:b3:d0:f8:c0:1f:80:
e2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:1C:5B:E7:B7:DE:51:8B:0D:D4:72:DE:2F:58:AA:97:41:63:FC:9A
X509v3 Authority Key Identifier:
keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a1:af:56:b4:93:ca:c1:9b:fc:d5:6e:9e:df:38:ed:43:70:
77:83:f5:59:02:38:16:82:53:51:b6:ce:06:2f:53:a7:01:11:
b6:68:47:bb:fd:5f:09:a6:e1:11:37:cd:96:74:61:4a:f3:ee:
47:da:f5:1e:e8:c6:53:e7:55:e2:5f:f8:62:d1:6d:e0:ba:cc:
48:c8:dd:dd:1e:5a:0c:94:1e:51:6c:fe:19:71:da:6e:98:81:
43:7c:75:b2:00:3d:14:cf:62:42:9b:c1:38:11:31:3d:6f:1a:
30:d5:6c:7c:ae:92:0a:28:33:b9:ef:51:8b:ab:87:27:f0:d7:
d5:1d:43:0c:02:8e:bc:ec:73:7c:e5:7b:7a:8b:fc:16:22:58:
ba:79:a8:51:ff:fe:0f:43:52:f5:2d:f0:63:84:31:41:fb:fc:
ac:80:7d:ce:6f:19:7b:eb:f5:1c:40:64:00:46:fd:d4:01:7b:
77:62:a5:7d:56:8e:dd:00:d0:c4:59:1e:d4:73:3d:d2:d2:23:
c6:d4:c1:6c:fa:e5:07:65:83:7a:78:e2:75:82:37:52:86:70:
bd:7a:95:96:3e:24:34:31:af:08:77:0b:4d:b5:26:71:78:e1:
7e:b8:18:03:ef:e3:b5:65:5b:01:c9:97:a0:94:79:05:c1:41:
01:ec:42:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 08:19:57 2026 by rpki-client