Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
File: 4crcikIcHyLx4pBMz9u87F2-GxE.mft (raw, json)
Hash identifier: WzCBx/2kQjnHss2ULXcmId50aQgYPq7rPgsDa8eWZZs=
Subject key identifier: A4:F7:DA:5B:3C:8D:67:36:CC:A4:60:C4:92:95:35:3F:9A:9D:84:40
Authority key identifier: E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
Certificate issuer: /CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Certificate serial: 01A17F98C6FB1858CCB592C814FAE0504422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
Manifest number: 1AD2
Signing time: Tue 27 Oct 2026 23:01:21 +0000
Manifest this update: Tue 27 Oct 2026 23:01:21 +0000
Manifest next update: Wed 28 Oct 2026 23:01:21 +0000
Files and hashes: 1: 4crcikIcHyLx4pBMz9u87F2-GxE.crl (hash: tUFuZgQjHPa5gUKHQe/9E1POW8PmkqL74j/oM9V5gfs=)
2: 77se7qJXk55SeOZEcLQG-rbxsr8.roa (hash: OQDmgPfY6EApBYAHydMcNAqVcKBYMQ02TGKDG7szY/E=)
3: BpG08GkHB-QsJpL9txO9DOn8Gqo.roa (hash: qk9A6y/PVuHMQUNTyaAzAHkiLugBm0Npe2/tYgpiKkw=)
4: N6Vwe2SbWysQ4c9awY4ppmCgM8g.roa (hash: LqroIaOJcyhk3jhpQNNYhhn2nTyn7BAqMOWhnDZAcrY=)
5: S3wAJAuRML5Do5HIcNyZi2_zrRU.roa (hash: AgpqUaFG2QBQhnJTxXP4ibifKNaKINVjwUQ+PyAUUno=)
6: mtJz-hUI0Cx0jLgkDLzYwDMbWdM.roa (hash: CKUhSDm/qBK/JCbTgbEQJEgA0HKSbKEajcNdo2qCwys=)
7: pYQ5IyUbzq5qvpxuz6__bErWTAk.roa (hash: EPZHqA+xkmohjRcec6HU5g8Eeu99YhgqZrcWYKO20oU=)
8: uZvBL7Adjps3YJPzPab2422Kfhw.roa (hash: jc1WIld0OO6y7I+8/9pDJkxR96M4dxWB/ebX7E2Vo1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:c6:fb:18:58:cc:b5:92:c8:14:fa:e0:50:44:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cadc8a421c1f22f1e2904ccfdbbcec5dbe1b11
Validity
Not Before: Oct 27 23:01:21 2026 GMT
Not After : Oct 28 23:01:21 2026 GMT
Subject: CN=a4f7da5b3c8d6736cca460c49295353f9a9d8440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:70:72:1b:96:fa:8d:52:5d:b6:ba:61:21:e7:
81:04:eb:77:d1:03:38:6a:93:a2:cd:aa:21:62:af:
5a:88:f6:1c:8f:cc:49:13:a5:00:85:59:b2:c1:3b:
12:f5:cd:74:ac:e9:fe:19:54:30:18:94:53:99:06:
39:53:c9:7a:75:56:08:03:36:c9:03:35:96:42:b6:
5a:0a:71:12:23:87:fc:4b:c8:54:7f:51:5b:68:9f:
b2:9c:a7:9a:c8:84:39:6b:95:ef:a7:b7:ba:ab:1e:
b8:8a:6c:2f:a5:d6:c3:0a:f7:56:b0:e8:92:1a:19:
69:e3:38:ba:d8:22:32:58:03:b7:45:c2:14:f5:46:
2c:9c:82:b4:d8:13:be:33:ff:c9:4b:fa:28:ee:3e:
54:1e:03:1f:1a:81:77:f2:6c:ed:10:73:e8:cd:1f:
80:6d:03:f4:52:17:6c:99:8a:af:61:e4:e9:f2:0b:
c5:66:6d:c1:78:c1:af:c0:2c:30:6f:f7:31:8d:63:
98:99:2b:38:23:d6:fe:d9:cd:f5:48:1c:d4:6d:ca:
5d:19:32:f8:26:ec:48:64:26:25:6b:c0:20:08:03:
7d:1d:23:93:c9:4c:8c:bd:c7:45:c7:cd:f1:07:ca:
52:cb:d0:93:43:bd:d8:ee:ed:59:a4:7d:aa:b6:1e:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F7:DA:5B:3C:8D:67:36:CC:A4:60:C4:92:95:35:3F:9A:9D:84:40
X509v3 Authority Key Identifier:
keyid:E1:CA:DC:8A:42:1C:1F:22:F1:E2:90:4C:CF:DB:BC:EC:5D:BE:1B:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4crcikIcHyLx4pBMz9u87F2-GxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/11af42-d3ed-43cd-8274-742dc0c970c0/1/4crcikIcHyLx4pBMz9u87F2-GxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f8:86:9c:4d:fe:1c:b6:63:56:e8:ab:31:62:fb:4f:06:06:
c6:88:c7:ea:9f:59:90:c3:f7:5d:0b:48:c4:a4:d2:2f:26:65:
26:e2:8e:7f:ce:9b:7e:0c:29:09:55:b2:fb:b2:79:1a:1e:bb:
92:1a:31:9c:a8:25:1e:6e:5d:de:45:2b:c5:29:c2:78:3f:1f:
7e:f9:61:ef:83:cb:5a:57:25:5c:a6:fb:16:23:30:71:69:99:
5f:e5:b6:f7:86:c7:1d:1f:d3:c0:c9:66:5b:5b:6b:e7:11:81:
da:39:10:33:0d:40:26:b6:cb:6b:a3:72:ec:27:a4:19:82:39:
47:16:c3:0d:20:97:4c:08:ce:b1:89:00:c3:96:c1:d6:1c:90:
42:90:55:c2:92:10:cc:4c:9e:d9:4d:82:df:f1:65:6c:b8:5c:
d3:93:e4:de:ef:85:33:90:4b:e5:ac:5a:b7:96:4c:1e:6b:8b:
28:8f:ed:0c:07:c6:66:05:28:51:17:99:d8:be:88:34:67:6f:
d7:53:45:15:5b:40:3e:61:a6:20:bb:fa:77:1a:dc:cd:73:8f:
3e:77:62:57:db:79:f6:4e:a0:ef:cf:87:ba:3b:b0:97:78:d2:
33:0a:3f:72:2a:6e:de:f3:91:89:16:e5:0c:9f:76:88:c7:b2:
2f:b2:14:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 03:44:29 2026 by rpki-client