Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json)
Hash identifier: FL8sKToRU2+UIE+xq3SjQdIN+Was9+hrARzgtNzPVyU=
Subject key identifier: C4:6B:89:60:97:92:E0:30:29:F3:42:EC:57:B7:5D:74:69:9C:2C:88
Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Certificate serial: 01A06FF13CB7FCEDDD4AD14B721F27BDD7F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
Manifest number: 149C
Signing time: Sat 05 Sep 2026 05:01:15 +0000
Manifest this update: Sat 05 Sep 2026 05:01:15 +0000
Manifest next update: Sun 06 Sep 2026 05:01:15 +0000
Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: 8MKy++HFPGgR/zS3DNHQgiDZcMx8nYgOCCKO66I13Ro=)
2: H8G6D-Wk6u8Ak866YQFvElddI-c.roa (hash: PEnd5yN8T5n1W+yxVyKPvkVNjUPkgKs3BkeHGhdDjdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:f1:3c:b7:fc:ed:dd:4a:d1:4b:72:1f:27:bd:d7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Validity
Not Before: Sep 5 05:01:15 2026 GMT
Not After : Sep 6 05:01:15 2026 GMT
Subject: CN=c46b89609792e03029f342ec57b75d74699c2c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:8c:51:03:09:46:0e:49:0f:3d:d3:47:a3:6a:
2c:92:23:6f:c2:36:02:85:e8:38:e6:7e:53:43:6d:
be:3f:a7:47:0b:cf:ad:f0:b0:5e:d0:ae:6a:d3:d7:
f3:72:56:ce:83:bd:ad:63:6c:95:72:43:7e:b7:1f:
4e:ea:65:1a:db:4a:b0:89:92:8f:45:15:4c:7f:d6:
a4:11:84:f9:45:a4:70:7f:5e:e9:d7:d7:b5:c3:aa:
d3:39:72:d7:ce:05:e8:7b:16:9d:93:75:10:e1:c9:
89:40:6d:e3:83:5d:50:37:f5:cf:26:5a:f8:5e:aa:
86:e4:27:f3:e0:d9:2e:c0:ff:25:12:5e:95:cb:a9:
0d:67:7a:db:af:7d:46:ab:02:68:67:43:af:68:f6:
bd:88:ec:64:e5:a2:4d:13:b3:5b:5d:42:08:0f:88:
cf:4c:b2:44:d3:ed:84:d3:ca:31:4b:69:65:3e:f0:
3f:20:87:83:65:93:56:3c:ca:d8:e3:8d:75:4b:f8:
f1:39:c2:31:6f:c0:3f:ec:25:23:8e:fc:3b:db:c7:
f9:94:ba:a4:57:7d:1e:68:a0:8b:f7:d0:bd:0d:ab:
c7:87:24:c5:cd:92:a9:79:d0:6f:93:38:95:0b:2f:
dc:0b:57:75:21:78:03:24:2b:a4:b5:b8:11:7f:2e:
19:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:6B:89:60:97:92:E0:30:29:F3:42:EC:57:B7:5D:74:69:9C:2C:88
X509v3 Authority Key Identifier:
keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:83:bc:ae:f1:d9:39:c0:7c:d2:42:11:53:95:e4:9e:c0:31:
c6:9e:18:cb:97:98:3b:2d:df:5d:b4:60:90:7c:7b:cc:03:8d:
3c:89:c5:15:f9:f0:88:8d:3c:a1:f1:31:15:7e:99:4d:29:d4:
30:4f:3c:f0:73:b1:67:53:12:05:3a:4c:8e:5f:c6:b2:23:d8:
c0:16:1a:eb:69:e1:ea:76:2b:d1:4e:68:b9:b1:12:a7:97:0a:
70:5a:6d:b1:1e:75:1c:a7:27:1a:17:87:7b:dd:24:16:45:fd:
cc:d1:a0:ee:1a:7a:9b:c4:d3:12:9d:50:28:29:58:b3:15:8f:
d2:40:99:ad:7d:92:c8:2e:7a:52:1b:4d:6c:92:aa:37:5b:05:
16:4c:d1:88:20:9b:80:84:dc:3d:ed:9b:71:51:ca:7b:5f:97:
c7:f2:41:16:7e:aa:dd:92:9a:e7:13:9a:e5:73:42:b2:89:a6:
db:d3:56:b2:80:aa:bc:ea:a1:67:ce:4c:95:f6:04:cc:76:d5:
86:2e:93:29:84:22:9d:a8:d4:c6:01:f6:24:54:41:b6:b7:af:
60:6f:41:90:8a:dd:66:09:22:42:0a:48:76:4e:01:70:f8:45:
f7:17:78:2a:0a:df:68:81:61:74:bd:e9:1c:24:ce:1e:fa:cb:
73:cd:13:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:06:17 2026 by rpki-client