Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: VDiO2yKG0tW7Iaord38vs2muLnZlA9/GFl+XAoasj3c=
Subject key identifier: 69:58:A1:7F:1D:BE:39:69:86:29:B6:5C:EE:82:9C:E2:81:80:A1:C0
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 01A00093E9DA2FAA4E3C8E8A6A55299CFA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 1A00
Signing time: Fri 14 Aug 2026 14:01:28 +0000
Manifest this update: Fri 14 Aug 2026 14:01:28 +0000
Manifest next update: Sat 15 Aug 2026 14:01:28 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: lG/09dJj5Gk5iLEHraRpYAHh5ZpKS3G8n2Im8uOVjuo=)
2: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (hash: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec=)
3: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (hash: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:e9:da:2f:aa:4e:3c:8e:8a:6a:55:29:9c:fa:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Aug 14 14:01:28 2026 GMT
Not After : Aug 15 14:01:28 2026 GMT
Subject: CN=6958a17f1dbe39698629b65cee829ce28180a1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f0:1b:3b:0b:76:ed:e0:08:f0:75:43:f2:44:
4c:ad:88:65:54:e0:a2:a2:58:ab:a7:49:4e:20:33:
60:8b:f8:3e:86:24:be:45:7d:cd:8a:cc:37:53:7a:
41:3d:e7:71:da:ea:93:ee:6d:e4:b9:ee:95:bf:82:
75:ef:7b:7e:49:0d:13:9f:3b:22:4e:4c:9e:f2:d6:
98:23:73:4a:00:0f:bb:4c:5a:44:45:b7:81:d3:77:
de:2c:e4:e8:75:01:0c:87:d5:56:d1:ae:31:20:2e:
f3:d0:b7:26:bc:ff:41:cc:67:e9:61:97:d1:f8:7d:
d6:12:81:84:91:40:87:bf:c2:55:ef:59:d6:a2:a7:
a0:d8:80:e7:e4:74:50:13:8e:98:8c:37:5b:52:00:
b2:fd:ca:f6:59:74:31:aa:7d:9e:a5:5c:c0:f1:20:
e4:35:71:28:2c:c5:e3:63:25:39:a3:b7:6f:51:6b:
ce:20:89:10:0d:e8:03:04:aa:99:17:c9:ac:3c:6c:
d8:3d:60:fd:8f:11:e2:1d:13:a0:e7:df:18:23:97:
3a:60:ae:29:b9:8f:44:17:79:f0:63:5a:93:39:6a:
0e:b4:92:e4:78:06:5c:7d:8c:4d:8c:ca:10:10:31:
d0:6a:53:bc:14:73:0a:eb:4a:5c:ec:71:60:06:1c:
d8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:58:A1:7F:1D:BE:39:69:86:29:B6:5C:EE:82:9C:E2:81:80:A1:C0
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:3e:3f:9c:92:68:8c:ba:bf:b9:74:89:df:c6:6f:2e:a3:a9:
6e:33:2b:11:29:e2:5a:e6:fb:f3:13:fc:48:26:b8:42:43:f4:
b6:81:95:b3:c1:51:d2:96:17:46:53:a8:6b:5c:3b:2a:30:47:
5a:ef:10:01:11:e8:87:e1:3b:98:65:2a:dd:f2:8d:56:37:24:
19:e6:df:a5:f6:35:b1:d2:31:e5:c5:8a:24:19:1c:1c:e8:9f:
6e:54:76:b1:27:6b:cb:15:82:0a:35:e9:0a:df:fa:b8:98:4e:
dd:f4:4a:a4:0f:8c:49:80:0b:18:1e:ec:86:c0:61:bf:2f:e2:
d3:9b:3a:e9:83:2e:f5:20:a4:08:e8:cb:19:e6:85:71:17:50:
fe:a0:6c:5b:a0:ce:63:ed:5a:8f:b1:a6:68:0e:ce:8f:00:d3:
4f:b5:5d:3a:98:d9:41:5e:c3:78:8f:6b:8a:f7:8d:8a:e2:4c:
56:ff:38:3c:09:26:a7:54:e7:07:7e:e7:4b:46:38:76:d0:3e:
8f:06:29:36:b2:cf:0f:4f:5b:78:50:e1:07:16:40:50:ff:99:
06:d1:2b:79:7a:57:55:16:b5:f4:64:cb:07:18:7f:46:b6:14:
5f:2f:5b:c2:03:53:df:e7:1c:d7:04:ec:7b:21:e8:95:88:bd:
a5:78:b8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:27 2026 by rpki-client