Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
File: 4ygMY1Kgv7t50knIh17RhuzOioY.mft (raw, json)
Hash identifier: FGS0YfYUOu0Ctp8XRJv0a6m6+UCHnyT0GEC8q4pDxQc=
Subject key identifier: 96:B7:C4:57:18:90:59:4D:B2:8A:0F:C8:0A:9A:85:FB:C3:98:67:D7
Authority key identifier: E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
Certificate issuer: /CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Certificate serial: 01A1404C5E34A4B935972E22CD0641C95364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
Manifest number: 1AAC
Signing time: Thu 15 Oct 2026 16:01:48 +0000
Manifest this update: Thu 15 Oct 2026 16:01:48 +0000
Manifest next update: Fri 16 Oct 2026 16:01:48 +0000
Files and hashes: 1: 4ygMY1Kgv7t50knIh17RhuzOioY.crl (hash: SR3Q4jllTrxQu94DIaNz8iCf8hTyfG5v1Tku1wwSndc=)
2: D3RzDDZgPLG3UCsxVx6Q8ZzLm1I.roa (hash: kVx9KqwTwAznM+coaQfniQbA9ErAhmA+cdao1OKFFKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 16:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:4c:5e:34:a4:b9:35:97:2e:22:cd:06:41:c9:53:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3280c6352a0bfbb79d249c8875ed186ecce8a86
Validity
Not Before: Oct 15 16:01:48 2026 GMT
Not After : Oct 16 16:01:48 2026 GMT
Subject: CN=96b7c4571890594db28a0fc80a9a85fbc39867d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:74:0b:17:91:e8:6e:25:aa:d0:1f:0c:45:7e:
2a:d6:f9:5b:07:3e:08:6a:75:00:67:b1:d0:a7:93:
9e:39:52:80:3c:35:17:b3:a5:76:3c:af:a5:a7:4c:
a2:c9:53:3b:78:08:2c:94:3f:93:7f:d6:f0:5d:22:
52:23:22:67:e5:48:64:5a:8b:35:38:99:54:60:f8:
e5:57:9a:b9:97:79:58:ff:d8:45:d7:9f:e7:b4:fa:
11:e8:8a:19:5e:94:c0:17:65:7e:e8:e2:c5:26:ad:
da:8f:46:08:d3:8e:13:05:21:80:9a:67:70:8b:5b:
3b:86:16:bd:16:55:c0:3d:1e:0e:6b:d5:56:10:0a:
51:c9:0c:0c:66:16:1c:f3:dc:2f:9b:50:3c:04:63:
d5:e8:c8:fe:18:b1:1c:8d:19:97:cc:02:2f:c9:de:
c9:7a:c9:c2:02:e6:b2:5b:34:39:76:af:20:9b:80:
0a:b3:cf:d0:c6:f3:c3:2d:2c:35:c8:39:7c:37:63:
10:bc:03:2c:a5:14:b3:90:a0:c1:4d:d2:bb:65:6b:
ab:59:bc:96:e7:be:0f:07:0b:0e:94:ad:64:01:54:
f7:e1:58:10:52:8a:88:a3:c5:a3:5a:a9:92:7d:65:
52:b7:2a:a0:25:90:96:27:5a:e1:90:4f:69:09:1d:
b8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B7:C4:57:18:90:59:4D:B2:8A:0F:C8:0A:9A:85:FB:C3:98:67:D7
X509v3 Authority Key Identifier:
keyid:E3:28:0C:63:52:A0:BF:BB:79:D2:49:C8:87:5E:D1:86:EC:CE:8A:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ygMY1Kgv7t50knIh17RhuzOioY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/59a032-c384-43df-8c9d-ef0b82189444/1/4ygMY1Kgv7t50knIh17RhuzOioY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:3b:56:0b:d3:16:bd:c2:60:a6:80:0a:a8:16:07:9d:55:ca:
61:6a:52:1c:53:78:40:cf:29:83:c9:06:4e:5c:0d:e6:6e:9e:
e8:fe:dd:67:17:4d:a4:c9:22:f5:b2:3d:aa:e4:8e:c2:97:63:
a2:8a:1d:e8:61:4e:ed:9d:80:eb:b9:76:15:01:67:47:b7:c6:
c8:99:25:54:78:75:bd:aa:ba:52:30:f8:89:b3:7d:8a:e9:29:
6e:bc:1e:24:ed:b3:06:57:c3:b1:5c:48:8c:21:cc:35:67:ff:
4a:1a:12:d3:dd:50:92:7a:d7:6e:05:e7:1b:6e:9a:73:f5:26:
6a:3c:6b:8f:3d:d3:fb:6b:97:e7:03:6a:0d:9f:1a:a8:9b:ed:
1b:e2:8b:6c:20:05:49:05:6e:2e:fd:fd:94:6d:81:53:af:c6:
fc:ce:7c:41:81:87:c2:cb:4f:9c:31:62:3f:75:c5:43:18:b5:
1b:93:a7:ce:d9:72:5f:d8:0a:eb:57:24:19:8c:68:eb:91:55:
38:bf:fe:d3:4c:46:a6:da:da:77:26:91:f5:2b:75:c2:89:91:
1a:24:79:b9:62:98:89:8b:d6:1c:f3:2f:b3:1b:3d:7f:83:fa:
54:2a:73:b3:be:36:84:44:a3:5c:6f:4b:19:9a:76:bc:5e:72:
b2:9e:af:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:57:34 2026 by rpki-client