Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft
File: 4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft (raw, json)
Hash identifier: l2E4OlzFLrcNw1BixeEDYm+y0cX2jLbS7bh1C5yyt3U=
Subject key identifier: 70:75:08:E6:11:85:C1:E5:A3:3F:EA:A1:72:EA:6C:DF:A6:E0:67:DC
Authority key identifier: E3:36:88:2C:4D:18:C3:95:23:B7:C2:96:72:E9:D2:E0:FD:8D:86:E9
Certificate issuer: /CN=e336882c4d18c39523b7c29672e9d2e0fd8d86e9
Certificate serial: 01A0412AD7DE802FCE2E663D47F4BADD6350
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:02:01 +0000
Manifest this update: Thu 27 Aug 2026 03:02:01 +0000
Manifest next update: Fri 28 Aug 2026 03:02:01 +0000
Files and hashes: 1: 4zaILE0Yw5Ujt8KWcunS4P2Nhuk.crl (hash: 1YHblwfe6yiSlzpt9EPihydNxW+ks3Hqh0kfcvxSl+4=)
2: HOa--BbyyWw8Rnz_PAkB1Aps5cM.roa (hash: ndFzc/hujYQnkxG1NYpbo75mbyjjpHmzYedQL970LIc=)
3: qwDOnP6AdU_tAQtZsLWw5wfBxDo.roa (hash: kQx1jz2DL7OQVFnj/XJkVTFzESJhS+h25gCtn8yqidk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:d7:de:80:2f:ce:2e:66:3d:47:f4:ba:dd:63:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e336882c4d18c39523b7c29672e9d2e0fd8d86e9
Validity
Not Before: Aug 27 03:02:01 2026 GMT
Not After : Aug 28 03:02:01 2026 GMT
Subject: CN=707508e61185c1e5a33feaa172ea6cdfa6e067dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:dd:93:93:0c:3e:88:b1:e6:a8:fb:67:67:
0f:53:48:59:31:a3:13:a1:45:44:28:69:d9:2e:0c:
8e:5d:1e:6f:ad:b6:f2:07:11:aa:cc:f2:61:7c:35:
d2:7d:90:9d:61:6d:e0:fa:8e:99:db:2a:b2:7a:11:
d6:cc:b7:38:bf:3f:6a:5f:f8:35:fa:d7:0a:3c:b8:
82:9b:a4:91:68:0b:72:bc:09:c7:1e:9c:b2:75:c0:
eb:1e:4d:f2:ab:7e:56:d4:05:17:45:fa:4f:93:6e:
6f:2b:30:75:7c:13:56:3f:91:a8:6f:4c:b5:fc:48:
2c:df:6f:13:06:08:f4:53:a8:0a:5d:1c:89:3b:df:
4a:d1:e1:cc:c9:bd:27:6d:14:61:a8:e0:fc:97:d1:
7d:14:50:d3:6a:20:b4:0d:57:d4:7c:1d:c8:f5:a0:
45:0e:5a:54:22:bb:fd:1a:7a:70:2a:7c:22:ca:5c:
73:f6:7c:45:14:d3:a7:b7:2a:48:48:9f:a7:b8:89:
4d:fe:a0:fa:42:ec:ee:a5:25:05:62:ab:5b:b6:8c:
52:c1:db:40:5f:f7:0d:d5:22:5c:a7:75:58:f3:f9:
33:e7:fb:1a:a6:76:2f:a8:55:d0:7c:2c:e5:11:16:
a0:86:3e:30:45:03:39:e0:5b:0d:2d:e3:f7:59:ab:
e7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:75:08:E6:11:85:C1:E5:A3:3F:EA:A1:72:EA:6C:DF:A6:E0:67:DC
X509v3 Authority Key Identifier:
keyid:E3:36:88:2C:4D:18:C3:95:23:B7:C2:96:72:E9:D2:E0:FD:8D:86:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:08:d0:4a:a9:a6:c9:2c:ca:e2:0d:48:10:6e:5e:c2:36:1f:
28:20:c7:93:1a:c2:2a:12:3e:9c:ce:be:30:d7:93:72:87:db:
36:79:da:a3:6b:6e:c5:bc:1d:36:d7:83:b1:87:ee:13:bc:d8:
48:1e:41:af:03:36:3d:86:f3:f0:a4:3d:0b:30:83:1e:10:52:
57:ae:ab:60:c3:8b:f3:71:c7:28:95:33:d9:14:d2:0c:3a:61:
03:d3:cd:30:b7:11:8e:a1:2b:5d:31:ec:c0:65:0f:16:47:68:
97:1a:58:44:28:22:a2:2a:16:e5:23:29:03:ce:42:e1:2f:d7:
be:bb:89:05:f0:7d:e7:1c:65:f9:30:82:8e:6d:3f:48:c2:27:
8c:7a:69:8b:1c:cb:72:68:6c:d4:3a:c3:7b:81:14:33:b4:8d:
5f:47:22:ab:c6:47:09:7f:d6:ac:d8:dd:01:13:6b:07:e8:a4:
ec:24:2b:a9:7e:97:22:f9:8e:ba:52:39:b6:32:2a:4a:c1:2e:
7f:fd:e8:54:68:a6:f6:5e:a1:32:fa:56:c6:d2:30:c4:93:37:
b6:0c:5c:ac:04:6a:a5:04:8c:ce:8f:23:ac:0d:11:99:dd:9c:
9a:11:c5:26:a7:be:c9:85:6e:1b:64:20:e5:02:e2:37:14:cb:
1c:f5:bf:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:05:31 2026 by rpki-client