Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
File: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft (raw, json)
Hash identifier: 0A9uEmlbxScqVA8L2SfQjeokoRvtOQjKOgX2kj7Zkqk=
Subject key identifier: 9E:E0:C1:A6:A8:19:0E:84:75:29:01:C4:C1:DC:78:1D:29:76:00:1E
Authority key identifier: E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
Certificate issuer: /CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Certificate serial: 01A0E3996BEBF4489A996E1A5B66508BAF27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
Manifest number: 0246
Signing time: Sun 27 Sep 2026 16:01:17 +0000
Manifest this update: Sun 27 Sep 2026 16:01:17 +0000
Manifest next update: Mon 28 Sep 2026 16:01:17 +0000
Files and hashes: 1: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl (hash: Q3fo3fZx13xl5v89PsumtLzNLyTzP4bwKX+CUsb9LLk=)
2: AFLK_8dbQHSlYChoAA91MADo2dU.asa (hash: 7cAv3e9gnI3dZUR9MQwkNpXKUI1PglLX9wimy3aeHe8=)
3: Piv3x5GjdFWYogfJry-sQL2JX-U.roa (hash: 2ZYAqvuqxNoPqFzul2MyF+P3n7KAI2Js6FxsXshtYjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:6b:eb:f4:48:9a:99:6e:1a:5b:66:50:8b:af:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Validity
Not Before: Sep 27 16:01:17 2026 GMT
Not After : Sep 28 16:01:17 2026 GMT
Subject: CN=9ee0c1a6a8190e84752901c4c1dc781d2976001e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:b5:6a:5a:5c:75:0f:d8:e9:8a:9c:ec:2d:
ed:3b:a4:35:bc:99:1a:3a:0e:06:10:6f:11:ca:ee:
fd:80:21:8c:61:61:7e:a6:8c:d0:60:de:34:03:26:
3d:0a:2a:16:ab:0d:da:64:7a:5a:3a:4f:d6:ca:51:
bc:f4:b5:75:c3:c9:13:a1:14:16:fa:2b:31:dd:2d:
21:76:1a:e6:bc:0b:03:5b:ef:98:2a:5a:c0:90:fa:
43:ae:f9:55:e3:e1:51:9b:fa:a8:7a:8c:2c:55:9f:
a5:d4:8d:84:08:c9:49:6a:78:d2:f7:86:d3:68:a0:
a1:e0:53:76:8a:a6:eb:39:2c:4d:49:30:2f:4e:ce:
8a:d5:a6:c9:3e:05:3d:a1:d9:ca:5b:20:d7:f3:b8:
74:6d:be:6d:37:10:42:01:09:e4:14:f0:a0:07:50:
e7:e1:34:8a:3c:21:ef:92:fa:87:c0:ad:e2:b7:f7:
58:f9:c0:fe:48:76:30:38:c4:d7:04:5a:5b:01:2b:
93:e7:8c:86:3d:74:9b:14:97:88:65:ab:08:a4:5d:
43:f0:52:c6:45:a6:bd:4a:7d:fe:45:0f:65:28:20:
2e:f5:9d:19:b7:98:3c:48:80:ff:3e:b7:20:8e:b2:
67:45:41:2a:86:06:d8:89:8d:03:21:c3:37:52:1c:
a8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E0:C1:A6:A8:19:0E:84:75:29:01:C4:C1:DC:78:1D:29:76:00:1E
X509v3 Authority Key Identifier:
keyid:E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ca:f6:cd:09:60:53:ab:26:5f:5a:97:b3:8f:4c:4e:a5:91:
61:8a:8c:da:45:ff:ee:76:13:8b:78:92:c8:67:47:03:5d:b0:
87:42:1b:fc:f6:be:4f:a8:97:43:af:ad:aa:69:2a:90:9a:6d:
17:0f:10:a4:17:1d:c1:a9:64:ae:46:42:de:7a:f1:b8:f7:4d:
96:55:66:f7:f7:f8:0f:39:a0:e0:60:1c:5f:46:86:39:d1:4f:
e0:dd:4a:a4:c1:b0:83:2a:78:0d:a6:4a:7b:00:ef:d0:91:87:
9c:80:4c:27:57:17:fc:69:75:66:39:6c:d7:05:d5:5e:ae:21:
79:0d:7f:09:df:4e:1a:10:b2:0f:6f:91:3c:22:6a:21:2a:a1:
6a:35:22:0c:c0:69:20:9e:eb:58:6d:37:a6:77:18:b3:36:36:
a3:29:7a:5a:39:7b:05:7a:b8:bc:01:c3:1f:69:e8:74:d1:8d:
45:92:e3:e2:5b:6f:9d:9c:2c:2f:1b:eb:47:ef:a1:9b:04:6e:
ea:03:ee:3a:e0:27:78:e1:af:82:70:b8:1c:f5:cf:47:1e:f0:
40:a7:d9:a6:08:35:09:05:60:55:1d:f4:15:85:88:53:7b:bd:
74:86:f5:0b:cb:67:68:f3:72:3d:eb:b1:ae:81:ce:37:30:3d:
26:e7:cb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:48:49 2026 by rpki-client