Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier: F4ynAXSombrmjMGewHEN29zM0mREx12KEIdER1XhXbc=
Subject key identifier: 38:76:03:03:8C:B4:EF:3D:3A:8A:BF:A5:A4:1A:A5:7D:63:F1:CA:A2
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer: /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial: 01A13F6FF71183B6D61D509EC1F912C697AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number: 0DC0
Signing time: Thu 15 Oct 2026 12:01:04 +0000
Manifest this update: Thu 15 Oct 2026 12:01:04 +0000
Manifest next update: Fri 16 Oct 2026 12:01:04 +0000
Files and hashes: 1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: 62G0yDGrgktQp2+o/YN/X5vd/Y7Ovjw4lVBU+UbL7Wo=)
2: G_3AbkBvxlIP88eiGt3CS6nBjms.roa (hash: HxmAkTnKX1MXFmf40b0A8DoHMlH+AhQxL52OcvMUs9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:6f:f7:11:83:b6:d6:1d:50:9e:c1:f9:12:c6:97:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
Validity
Not Before: Oct 15 12:01:04 2026 GMT
Not After : Oct 16 12:01:04 2026 GMT
Subject: CN=387603038cb4ef3d3a8abfa5a41aa57d63f1caa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:16:a4:3b:4a:c5:0f:db:04:be:ea:48:d9:
05:11:bb:d3:49:cd:18:db:68:8c:18:be:5b:1e:e2:
6a:76:24:10:ec:75:2a:cf:d6:3d:29:47:48:2c:3d:
92:a0:9c:1b:1a:67:b5:ab:bd:fd:da:24:a5:8a:19:
02:15:09:1a:83:96:67:ba:ef:82:cb:eb:26:f3:68:
79:4c:9c:6e:f4:42:89:21:21:7f:00:9a:da:87:5f:
51:4b:45:9b:05:4e:ca:56:92:75:13:ed:a2:70:f9:
a7:e2:3f:a9:e4:7a:d1:eb:77:98:89:04:a2:7a:31:
e4:f5:4d:43:a4:61:1a:73:84:06:b9:eb:fe:cb:75:
e4:95:b0:08:cf:0d:25:5e:dc:6a:df:9f:cd:f7:9d:
9d:41:52:59:4b:02:2c:0c:d7:b5:cd:37:57:99:5a:
16:39:97:f2:30:3c:7c:ef:f3:9a:12:74:1f:1e:2a:
f8:4a:07:c8:64:49:4d:c5:a8:7f:e9:60:f1:dc:4c:
da:e3:8d:e4:35:f9:ba:48:24:e7:6f:e8:07:c3:45:
95:80:2a:bc:5d:48:55:82:6f:e4:54:f1:1c:08:ae:
15:e8:9b:39:99:cb:b5:04:78:d5:7e:1b:57:bd:88:
6a:a3:0b:ea:df:6e:d6:df:9a:cc:ae:a6:63:c6:7f:
74:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:76:03:03:8C:B4:EF:3D:3A:8A:BF:A5:A4:1A:A5:7D:63:F1:CA:A2
X509v3 Authority Key Identifier:
keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:69:0f:2b:6a:b7:ab:6f:d4:8d:48:f5:fc:23:ca:e1:4d:3c:
2d:67:50:07:96:5a:e0:b4:a4:74:09:b4:92:6a:b3:23:e9:d8:
67:64:f8:10:fa:9a:11:a9:6b:5f:56:6e:45:77:75:f1:da:fa:
79:f8:a5:fe:81:76:47:a3:6f:c4:99:17:0b:05:e6:15:58:cd:
9b:cd:86:c9:d0:a3:4c:51:79:35:55:36:20:74:4d:e1:a6:37:
c5:04:e6:77:19:d3:e4:ed:71:56:8c:87:ca:e7:06:f8:10:cb:
1a:0b:a9:0e:a3:c3:f2:59:b0:4d:45:23:44:69:4a:25:12:60:
fc:84:2c:ad:6e:67:f6:e2:2e:98:ea:f7:10:65:6e:fb:25:aa:
24:25:5e:63:82:e0:e9:4e:19:33:80:13:c0:d3:ca:42:61:b2:
8b:a0:28:41:0b:75:bd:2e:7a:32:14:43:1b:ed:bc:71:c2:c1:
85:d5:bb:58:29:69:97:0b:6d:41:f9:08:d0:b1:c3:94:59:63:
a8:14:48:85:23:95:c4:10:76:f2:86:22:de:fd:f9:59:86:68:
5c:52:40:f4:c1:8e:c7:f4:74:e7:86:92:2d:7e:7d:96:82:70:
d4:4c:bb:2d:43:7e:2d:b9:b4:2d:7e:63:74:3f:22:c2:89:d1:
ce:de:4f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:20 2026 by rpki-client