Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: Ur8UVGsH+2TBU88/HvwXSbp+mPusvQqfpNMd4AxyBGc=
Subject key identifier: 9A:52:C2:E8:2A:E2:F5:D3:6A:DB:ED:68:9F:2E:E4:7C:52:83:CA:E3
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 01A1280C73FD3C161B589DEEA0DAC060A4CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 1A99
Signing time: Sat 10 Oct 2026 23:01:07 +0000
Manifest this update: Sat 10 Oct 2026 23:01:07 +0000
Manifest next update: Sun 11 Oct 2026 23:01:07 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: P5mDhGKkvnXj4fGstcniolj1J54kRMT5UxIH3HE8Htw=)
2: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (hash: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec=)
3: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (hash: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 23:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:0c:73:fd:3c:16:1b:58:9d:ee:a0:da:c0:60:a4:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Oct 10 23:01:07 2026 GMT
Not After : Oct 11 23:01:07 2026 GMT
Subject: CN=9a52c2e82ae2f5d36adbed689f2ee47c5283cae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:54:b0:61:cd:3b:71:22:a4:37:77:75:62:2c:
26:9e:b2:7e:22:0b:20:69:a7:ff:58:08:79:b6:46:
62:51:c0:8e:09:d4:ad:f0:9e:fd:9b:40:db:a4:41:
9e:c3:7d:f9:a9:0e:66:e5:24:dc:e9:c5:2a:df:ed:
60:ac:ae:c9:44:5a:a3:85:26:68:61:ce:35:13:cf:
29:87:d7:5f:db:6d:f3:21:29:4f:43:57:29:39:b6:
6c:8d:96:ee:c4:24:e4:7f:da:a6:ff:f9:c1:71:96:
cc:b8:d5:11:cc:68:4d:67:9f:65:f8:c5:1b:e9:1b:
66:42:e5:70:6d:18:5f:f8:c6:69:52:48:03:18:dc:
42:f1:7f:12:d8:b4:50:e3:57:79:ee:b0:0b:c4:a7:
d9:20:9f:d2:b7:2a:e4:76:5a:a9:cb:67:0d:bc:c6:
64:19:fc:60:dc:36:ba:86:b0:0b:82:30:04:15:d2:
6e:c1:77:31:c7:5a:96:cb:4b:05:66:f1:31:fb:2a:
2d:51:f5:49:70:c8:cd:d4:c8:24:04:cd:40:93:a2:
56:ad:58:73:01:7b:1c:35:95:69:b8:f3:93:9f:65:
2d:90:6a:eb:73:6f:70:eb:45:e3:27:07:12:e9:d0:
8f:d0:02:e5:be:d8:fd:84:5b:76:46:d3:1e:fa:23:
72:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:52:C2:E8:2A:E2:F5:D3:6A:DB:ED:68:9F:2E:E4:7C:52:83:CA:E3
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:05:d5:7a:68:20:2d:31:ad:9b:81:e8:ed:44:9f:c5:f9:00:
d5:46:15:0c:84:71:e3:96:fa:8c:27:f4:07:b3:cf:78:f8:3b:
eb:a4:de:19:29:68:a3:f7:91:aa:3e:96:f8:0b:86:9d:bf:56:
da:20:89:34:e9:77:72:0b:50:8c:a8:6e:42:07:33:fa:52:ee:
e4:98:82:51:5b:4d:9f:c2:d3:8d:27:c9:bc:92:0c:6b:1e:8e:
a5:b3:e8:fa:9d:a7:c0:cd:fc:88:17:38:c1:13:3e:b5:04:51:
d7:a2:86:fa:8b:c0:3d:6e:4a:c8:e1:d1:3e:34:04:9e:23:58:
a4:60:85:74:86:55:8b:bf:64:90:e8:03:31:b6:ca:d3:9b:24:
02:0f:2e:24:31:ac:c1:01:7f:4c:39:32:b2:ab:0c:ea:7b:2b:
3f:9b:fa:b5:b4:0c:05:98:46:a0:bf:f8:33:0c:b9:91:f4:7d:
b3:87:20:24:ea:27:5a:fa:67:12:e4:84:d8:dc:fc:52:16:fb:
b6:de:d7:77:7c:81:65:09:87:92:24:b8:42:e5:33:4b:0e:b8:
1d:79:01:cb:ec:44:cd:ae:fe:03:18:5a:a0:4b:bf:5a:c6:8b:
5f:7c:40:b7:c7:b8:76:52:45:63:bf:15:82:19:3a:cb:95:d1:
91:30:c5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:50:12 2026 by rpki-client