Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File: 4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier: gUQ1xxCym4z3VNzkYlv62Xz88SUO1zD1jlJM+Ho8WcU=
Subject key identifier: 40:B9:77:98:A6:76:02:48:38:85:79:E3:9B:42:D2:B3:53:88:6D:68
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial: 01A08866BF201C95700D0157753CC85F81FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number: 1A52
Signing time: Wed 09 Sep 2026 23:00:29 +0000
Manifest this update: Wed 09 Sep 2026 23:00:29 +0000
Manifest next update: Thu 10 Sep 2026 23:00:29 +0000
Files and hashes: 1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: lKLpza0rLSvQDfjFpfr3uvDIAAVMohEnvwW6bAB5L6M=)
2: 77se7qJXk55SeOZEcLQG-rbxsr8.roa (hash: OQDmgPfY6EApBYAHydMcNAqVcKBYMQ02TGKDG7szY/E=)
3: BpG08GkHB-QsJpL9txO9DOn8Gqo.roa (hash: qk9A6y/PVuHMQUNTyaAzAHkiLugBm0Npe2/tYgpiKkw=)
4: N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa (hash: LqroIaOJcyhk3jhpQNNYhhn2nTyn7BAqMOWhnDZAcrY=)
5: S3wAJAuRML5Do5HIcNyZi2_zrRU.roa (hash: AgpqUaFG2QBQhnJTxXP4ibifKNaKINVjwUQ+PyAUUno=)
6: mtJz-hUI0Cx0jLgkDLzYwDMbWdM.roa (hash: CKUhSDm/qBK/JCbTgbEQJEgA0HKSbKEajcNdo2qCwys=)
7: pYQ5IyUbzq5qvpxuz6__bErWTAk.roa (hash: EPZHqA+xkmohjRcec6HU5g8Eeu99YhgqZrcWYKO20oU=)
8: uZvBL7Adjps3YJPzPab2422Kfhw.roa (hash: jc1WIld0OO6y7I+8/9pDJkxR96M4dxWB/ebX7E2Vo1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:66:bf:20:1c:95:70:0d:01:57:75:3c:c8:5f:81:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Validity
Not Before: Sep 9 23:00:29 2026 GMT
Not After : Sep 10 23:00:29 2026 GMT
Subject: CN=40b97798a6760248388579e39b42d2b353886d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:c9:24:da:b9:eb:d8:b8:4e:19:70:10:74:
5b:44:8b:87:c4:e9:75:a4:09:71:b4:fb:53:b7:a5:
13:79:41:43:b9:4e:89:5c:1d:57:8e:37:2a:0e:b5:
81:84:d4:22:13:d5:19:8c:c9:89:fc:86:5f:84:73:
54:bb:d3:c0:5c:de:5c:17:72:e6:07:e2:12:a0:e6:
f6:50:9c:c1:22:0b:4e:cd:e2:50:58:cd:5e:b8:58:
ae:47:54:6a:9f:f9:3d:97:4b:1e:ef:0b:2a:58:7f:
7e:29:96:cd:e4:4e:35:aa:bd:8c:26:e6:87:83:a8:
19:43:75:47:44:de:4e:f4:b7:e1:58:f3:5e:81:71:
41:ab:e9:8d:58:80:d2:83:c9:23:fa:53:27:5d:62:
6d:b9:f8:c9:53:c8:35:c4:55:f7:9a:91:cb:c3:15:
96:f0:19:ca:ce:57:4b:d9:7b:8c:8c:b4:a5:b3:6f:
d8:60:36:f2:e7:0a:2a:78:20:52:1b:dd:44:ba:86:
38:aa:e7:54:36:b5:88:8f:87:09:7e:5f:a2:30:31:
c9:a8:30:ce:de:05:7f:36:45:73:49:fc:ff:a6:f8:
02:3b:fc:2c:ff:07:ad:50:4b:04:b2:1e:cd:9b:3f:
df:1f:36:01:89:c1:39:35:25:a0:82:cc:55:31:47:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B9:77:98:A6:76:02:48:38:85:79:E3:9B:42:D2:B3:53:88:6D:68
X509v3 Authority Key Identifier:
keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:7a:17:30:64:07:37:b2:c8:e9:fc:5f:76:96:03:06:a2:96:
4e:18:15:fd:be:a8:69:23:da:24:ee:82:88:d5:5e:75:ed:c5:
4d:1a:1f:02:18:fb:6a:da:67:a2:0d:5c:fc:47:83:b2:77:02:
8b:e5:10:de:01:2a:9b:19:3b:e5:56:98:b5:27:4c:e1:4b:0b:
a5:ce:1b:ef:2e:21:26:c5:de:2a:d0:d8:a9:26:db:71:37:40:
ff:52:96:fa:32:84:01:0c:aa:4a:26:3f:c3:ba:72:ae:a9:d6:
0f:3a:02:46:1c:6e:42:c4:da:4e:75:48:fc:02:40:f5:b0:c2:
5d:72:cb:61:5e:20:0f:8c:58:25:c2:94:0a:73:88:c2:00:f5:
a5:6a:40:c5:4a:c8:bf:6f:a0:47:3a:4a:42:cf:2a:4e:6d:8a:
37:e0:23:7d:2e:f2:64:a5:4f:bc:ba:59:f5:54:55:45:70:11:
ce:cc:76:37:69:1a:03:0c:d4:2d:f7:88:ac:44:e7:d6:5c:bd:
82:ae:3e:28:7e:35:d4:18:0f:d5:83:c2:f6:a6:84:e6:62:0e:
c7:c8:59:1d:f2:02:a3:15:02:9d:30:cd:7b:98:ea:14:15:3e:
00:23:24:9f:85:38:b9:a8:51:2c:d2:02:28:7a:97:ba:8b:57:
3d:37:fc:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:53:53 2026 by rpki-client