Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: kwH97LzIH5KEyo/fcwD5l1zDZebJ6/9zvsw2mLDGHbo=
Subject key identifier: 97:E0:63:61:E1:D1:DA:BE:D2:3B:10:01:BD:02:E5:E1:7B:1E:B6:1D
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 01A001DCAE50337518836C3AD76B6E4A26DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 20:00:34 +0000
Manifest this update: Fri 14 Aug 2026 20:00:34 +0000
Manifest next update: Sat 15 Aug 2026 20:00:34 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: ypLeDY2ta4YiOmeIYEcSSEeKeOzcyskzzwC267ghQHM=)
2: j6eYXTGIPK6gsz2syCvMaVTG-yE.roa (hash: 91e+kynlaPtGnq7c6oIlywSzsBYw97PzDquhkqe4ygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:ae:50:33:75:18:83:6c:3a:d7:6b:6e:4a:26:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Aug 14 20:00:34 2026 GMT
Not After : Aug 15 20:00:34 2026 GMT
Subject: CN=97e06361e1d1dabed23b1001bd02e5e17b1eb61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:05:63:81:3b:0e:ed:71:0a:30:92:54:f9:
81:17:50:43:f9:64:80:8c:39:9f:e8:8c:21:a6:ca:
50:ab:13:41:f1:11:51:68:70:80:35:51:18:b6:a1:
2e:88:e4:33:63:bf:0e:59:44:8e:ea:ca:f6:1e:f8:
d9:a7:a8:0f:17:fa:b6:ff:0b:42:e2:74:a0:82:66:
3b:01:63:5f:f2:76:c5:f7:9a:c7:c1:75:f6:e4:3c:
a9:0e:04:49:88:85:82:f6:0b:a8:cc:fd:47:26:87:
a9:13:3f:5f:d2:76:9b:bb:43:8c:c1:5f:d8:71:66:
5f:19:1b:cf:a8:43:0e:ae:66:d6:af:ea:22:b0:bc:
c1:2a:6c:7c:a8:f1:e6:60:9f:bd:c9:e5:25:63:ce:
d3:9b:3d:5c:88:b3:64:a4:91:83:fc:49:53:45:4b:
f4:08:d5:57:a1:09:4b:5f:65:cc:96:5d:e1:e3:97:
9e:ef:44:c8:be:b4:e7:ec:ae:6b:ec:5b:ba:ad:00:
7c:f8:f2:71:ca:a6:cf:fa:54:67:4a:5a:b5:31:32:
9f:e9:c6:6a:e9:f2:11:59:69:47:e5:7b:5a:a4:b2:
52:9c:4c:47:16:06:30:11:52:40:13:51:3f:31:45:
fe:f4:e2:7c:f4:63:80:4b:2d:de:43:fa:3d:07:37:
a2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E0:63:61:E1:D1:DA:BE:D2:3B:10:01:BD:02:E5:E1:7B:1E:B6:1D
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f9:94:07:98:95:86:d5:59:4c:24:1f:bc:fb:89:7e:0d:26:
1a:ef:41:07:df:8e:70:a7:84:d9:18:73:40:fb:29:a9:63:28:
71:8e:3e:d7:bf:1b:66:c0:f6:8b:e7:54:98:7a:20:3e:0c:98:
15:40:bc:93:54:c9:7d:a0:15:dd:15:ed:a1:c0:60:21:8b:de:
e6:36:cc:64:ad:ab:cb:6c:df:7a:2f:1c:83:bb:42:6d:43:f6:
dc:09:16:2d:8e:4d:0c:cb:7f:fd:9b:ea:86:ab:ca:1f:1d:ec:
1e:96:51:a3:4f:ba:8f:f4:7b:c7:a8:41:1e:74:18:60:e9:1e:
fe:54:2f:ca:b2:11:50:16:b4:20:21:1f:09:56:37:50:a7:39:
db:b2:35:73:64:eb:94:ea:db:73:3d:db:37:07:91:f5:46:9a:
80:68:20:ec:d7:bd:f8:10:83:8f:68:e1:99:15:28:60:90:3d:
b6:bd:95:05:0c:74:09:c7:65:54:2f:d6:86:4e:1c:c2:03:70:
29:c7:d0:72:e8:7c:fe:55:4d:7d:07:01:7f:cb:0e:e9:70:a8:
76:a1:5c:ee:c2:da:f6:e2:8b:3e:d8:53:bd:ff:7d:87:ca:bb:
31:70:c2:0c:e2:ff:4e:8f:76:71:c0:27:55:57:40:14:93:9a:
b0:9e:ec:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:44 2026 by rpki-client