Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier: x5VoZEUFebAl3x3bIAny2XM7olNqCJXlkWa0s1DO4Eo=
Subject key identifier: 9F:EF:D8:97:8D:EB:E0:FE:95:1E:1B:38:58:58:96:CC:47:53:ED:56
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 01A0024AE2737D6694BF18E7520D5C3775C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 22:00:56 +0000
Manifest this update: Fri 14 Aug 2026 22:00:56 +0000
Manifest next update: Sat 15 Aug 2026 22:00:56 +0000
Files and hashes: 1: 1-No8JnCXoZmNvwGOuPwKrmYYJ6c.roa (hash: 2kZ069SCXyvjYNeKIO+pvEFPTW/9AX8f/8u5tWS3u3U=)
2: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: oGH1ZV64WgPr6rsBRR/zqQPBhdM/E+IEyj5pTtIcvtg=)
3: BW5S5s1xvxdYeismlznCSfBL2yI.roa (hash: EtWeWpCD+suUmysPule/ohTEye/jj6Q4dBOVaR6L3gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:e2:73:7d:66:94:bf:18:e7:52:0d:5c:37:75:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Aug 14 22:00:56 2026 GMT
Not After : Aug 15 22:00:56 2026 GMT
Subject: CN=9fefd8978debe0fe951e1b38585896cc4753ed56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:c4:0e:9b:cb:a2:d2:2f:85:0f:b3:b2:7b:
2a:4b:cc:0f:db:42:56:8d:7f:a7:e8:51:b1:b0:19:
e6:08:00:fb:8d:81:46:80:50:cd:46:42:4c:fb:d9:
9d:9c:5d:74:35:5a:80:4d:8c:31:fd:32:6d:48:80:
24:f8:68:30:ae:35:c1:26:16:9e:f1:92:18:c9:32:
28:7e:5b:07:83:5d:82:fe:1e:96:20:32:3e:5a:60:
e2:89:fd:c4:40:83:2d:b5:b3:c8:65:f6:95:2c:38:
80:2a:2c:8b:5d:99:43:4a:f8:72:8c:ba:8c:2f:49:
dc:bb:39:bc:86:85:05:34:25:4f:7c:01:59:b1:c0:
32:48:8a:d3:ad:66:a8:aa:ea:2f:82:2c:04:86:3b:
22:68:2f:87:62:b3:da:3e:8d:06:00:a8:0b:c4:b9:
35:ff:1c:e3:5e:8a:a9:2f:9c:5c:2d:7f:dc:73:81:
0d:a5:b1:7e:4b:e9:00:b0:04:4d:05:45:7f:dc:d1:
9e:50:7f:99:df:d0:2b:5c:83:b9:12:98:6a:79:a7:
fb:a5:e7:d7:22:cd:21:48:0f:c1:9c:77:03:d8:c4:
cd:c7:97:06:a5:69:11:8b:de:f7:86:b0:53:63:a0:
9e:57:c6:d0:d2:f4:04:f6:97:66:d2:4e:c8:fa:60:
47:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EF:D8:97:8D:EB:E0:FE:95:1E:1B:38:58:58:96:CC:47:53:ED:56
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:36:d0:9f:88:8a:67:87:ad:fe:ee:6e:ab:02:69:e7:67:03:
af:d8:6d:23:b1:34:e9:f8:4f:e3:30:09:f7:51:86:56:3c:55:
c9:6f:74:58:b4:c7:89:a0:d9:2f:04:b3:7a:55:43:d5:0d:6b:
23:b1:0f:17:8c:48:f6:6b:e6:d6:82:c3:72:1f:ba:de:bf:c5:
d3:76:b9:bf:aa:03:b6:36:f1:15:9e:c3:d3:48:3f:2f:63:65:
9f:77:0f:ab:45:43:43:c6:27:b8:0f:bf:2f:7a:02:08:d0:2b:
ae:70:ac:0f:e8:0e:21:31:5e:28:1a:45:5f:1e:29:11:79:ee:
ec:fd:e2:fc:c2:92:7c:68:c9:52:b8:1e:08:e9:ee:51:59:d1:
8f:16:06:64:df:10:76:20:c5:db:fa:88:02:97:00:91:cf:54:
16:67:10:9a:81:d0:10:9f:15:22:60:a2:90:6d:1a:8d:ed:9c:
e7:13:a2:c7:88:1c:4a:a0:49:8a:33:12:ea:34:36:4a:b0:a2:
e8:19:1a:fa:5c:0d:3f:64:a5:59:3e:94:d8:fb:5e:72:ad:60:
2e:96:e4:cc:68:a9:f8:ca:08:29:ee:1b:80:83:c8:b3:f2:86:
18:2e:70:3a:fe:df:86:d8:7f:61:3e:8e:1c:cc:1a:cf:75:17:
0d:4b:3e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:05 2026 by rpki-client