Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier: gi8FTIEtjTGqNxgEDhUPI7g7KigS0bRDkk38KTC8AIo=
Subject key identifier: 54:20:60:E8:F7:DD:BC:F5:D2:9C:17:6C:83:B7:B9:FD:83:60:C3:C5
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer: /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial: 01A13E94EE6D7A4911DD48E0019D1A138BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number: 0C2A
Signing time: Thu 15 Oct 2026 08:01:49 +0000
Manifest this update: Thu 15 Oct 2026 08:01:49 +0000
Manifest next update: Fri 16 Oct 2026 08:01:49 +0000
Files and hashes: 1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: tXhPSAisRikK2I6HWwTcrTWZlXkfi9tNNv2xHVFRxck=)
2: n9r5xzc2I0sGVTcycKsfkDx33FE.roa (hash: BIclzxRCUiNI0OBrySTY2i/2up09tLVcApZ40825IDk=)
3: qqh5JrewpneFMulWBUYLL1slgjE.roa (hash: XxinXNX0i/Fsxa1HgPe4TOFh7Wgq3TresthOVXUd5Go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:94:ee:6d:7a:49:11:dd:48:e0:01:9d:1a:13:8b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Validity
Not Before: Oct 15 08:01:49 2026 GMT
Not After : Oct 16 08:01:49 2026 GMT
Subject: CN=542060e8f7ddbcf5d29c176c83b7b9fd8360c3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ca:f5:98:b8:dd:5c:de:cc:0e:d7:21:d0:6e:
0c:d7:43:49:19:95:d4:27:e8:d3:30:fc:32:92:2d:
85:a6:0e:f2:f9:42:c4:86:56:1f:c7:3b:75:57:3e:
d1:6f:1e:8c:59:a2:7f:79:c8:4b:e0:ec:14:dc:27:
40:85:79:57:1f:26:61:3c:7b:bb:07:0a:6f:39:07:
91:92:89:fb:3c:16:a0:11:44:af:65:bd:14:ba:64:
05:de:d5:bc:93:eb:58:5b:29:68:0b:ff:5f:2e:d0:
62:31:b3:13:81:0c:15:96:ba:06:cb:3f:80:32:df:
1e:1f:69:7c:64:dc:06:bc:49:a0:f0:d5:32:44:1e:
f7:55:4c:62:f3:00:c8:f3:17:ee:64:cb:8d:90:23:
e8:83:37:80:60:e2:1b:a3:46:8f:1d:b9:c1:1b:2a:
75:8f:82:90:eb:9c:a1:34:f2:99:0f:e8:68:e2:38:
cd:61:21:bc:d1:ff:4d:f4:cf:5b:1c:eb:dc:e0:a6:
79:ba:87:24:22:53:08:f4:3b:6e:29:9f:07:5a:e9:
fb:83:9e:7a:f1:8d:5d:7d:c7:c8:58:24:a9:d5:48:
6a:6b:c5:0a:16:16:bc:7d:a5:50:97:4f:06:91:1e:
dd:48:74:d0:94:5d:4c:4b:d9:54:75:4c:f4:97:f3:
8a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:20:60:E8:F7:DD:BC:F5:D2:9C:17:6C:83:B7:B9:FD:83:60:C3:C5
X509v3 Authority Key Identifier:
keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5e:96:1e:99:42:7d:88:24:01:82:0e:e7:29:bd:5a:9d:59:
5f:31:33:f4:8a:5e:ed:27:af:ab:ad:63:75:91:05:19:53:63:
0f:89:7d:9d:79:c3:e3:b9:d5:c1:3d:73:81:80:15:16:64:8d:
53:e5:41:59:42:27:4f:f5:5c:43:88:e9:3d:4e:0b:18:07:3c:
2f:db:0f:03:6d:7e:a6:03:7a:3c:48:37:35:2c:ac:7f:9c:be:
57:6e:83:68:8d:51:b5:35:9b:ba:29:d3:de:47:a1:fa:5f:d3:
ab:d5:aa:32:9c:24:59:45:58:6c:35:0c:5b:78:4f:4f:11:b6:
e6:c8:ac:8b:99:2e:75:79:89:19:fa:c8:07:89:4c:60:cc:1f:
25:80:7c:c3:88:32:82:de:74:81:a9:a6:20:70:3b:93:44:3a:
33:35:dc:29:73:5c:35:95:48:23:96:c9:75:c7:e4:71:9b:4c:
08:53:cb:fa:59:78:9c:e9:72:58:2c:d5:a1:ec:c9:62:29:91:
a1:ef:1c:32:8b:97:d3:2b:17:8e:9d:d9:8e:d1:90:86:21:85:
61:64:30:c7:67:01:a4:b3:a7:1f:22:69:da:a0:b3:3f:d7:37:
b8:6b:b3:0b:45:17:a7:9c:18:69:58:b8:94:f9:43:02:aa:79:
a3:10:48:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:52 2026 by rpki-client