Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
File: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json)
Hash identifier: Ep8y8GuHGa230ag0vgtVWBzo6cwITE+eMH7SGElWILY=
Subject key identifier: FB:CB:9A:B4:2C:17:3A:7E:47:00:D6:82:C3:E3:D0:3D:9F:94:3A:75
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Certificate issuer: /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial: 01A0B6899FE29AE8C6F056C26665F67BCFA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
Manifest number: 14D8
Signing time: Fri 18 Sep 2026 22:01:07 +0000
Manifest this update: Fri 18 Sep 2026 22:01:07 +0000
Manifest next update: Sat 19 Sep 2026 22:01:07 +0000
Files and hashes: 1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: S35KeIu14H7SmGFHO3FQikiHqXdKYiqO9ETQzDvf0dE=)
2: maEv5ArPl0MhVYV7tQz9rkyTAIo.roa (hash: dBiLGOeBpvZw0H7gef9rbExfaEt6iLiJPLCEXhR/0HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b6:89:9f:e2:9a:e8:c6:f0:56:c2:66:65:f6:7b:cf:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Validity
Not Before: Sep 18 22:01:07 2026 GMT
Not After : Sep 19 22:01:07 2026 GMT
Subject: CN=fbcb9ab42c173a7e4700d682c3e3d03d9f943a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:95:ca:c0:a6:01:89:e7:19:72:b1:35:25:b4:
03:47:ab:c2:fb:26:33:3e:10:d1:11:79:cc:a1:6b:
66:8d:62:a5:a8:a8:89:69:f6:58:4f:3d:7e:87:8a:
45:32:5a:6a:4f:b5:5d:4a:37:f9:5f:aa:51:d5:36:
1c:00:7b:db:68:de:b8:43:8f:68:78:59:5d:6b:78:
0d:a0:1f:8c:77:c4:2a:5f:48:c9:8f:f5:16:d8:dc:
f1:2f:65:ea:2f:0b:a8:64:11:36:f2:b0:f3:ae:a8:
5a:73:da:10:37:95:4e:ab:38:c5:d3:8d:2c:72:66:
8b:3d:74:29:5c:7e:de:19:35:5e:e4:9b:55:50:3f:
2a:66:39:32:bb:55:41:12:d6:24:50:9d:4b:f5:10:
c0:9c:44:69:23:3d:d5:fb:a4:d9:21:5f:00:89:70:
92:78:67:2a:67:a0:71:f1:5a:2d:40:2a:66:59:e1:
3c:34:96:d8:1c:e2:66:72:9b:9e:d2:66:31:e3:88:
1e:52:0c:01:56:bf:f1:a5:61:77:8b:aa:95:cb:a9:
04:0b:a7:4c:83:18:d9:2e:16:ff:07:01:25:36:78:
f9:96:71:cd:81:e4:41:c5:85:fc:b7:01:19:0c:95:
e4:fd:df:27:4e:88:92:0a:f5:65:4b:b4:f3:b7:14:
36:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CB:9A:B4:2C:17:3A:7E:47:00:D6:82:C3:E3:D0:3D:9F:94:3A:75
X509v3 Authority Key Identifier:
keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8c:d9:0a:fb:7b:6a:82:f9:57:4a:a9:3f:96:41:d2:14:f5:
4f:b7:77:41:11:0d:13:83:c9:67:65:6f:42:47:85:4a:05:b1:
c8:83:25:3b:51:9c:7a:7e:95:5d:ef:37:a1:c9:f1:41:a7:f3:
f8:a6:98:bc:cf:ca:ad:a3:7c:52:76:33:b9:43:b9:03:a8:d4:
35:cc:62:e9:29:1f:b9:1e:29:14:cb:49:64:bd:7d:9c:b7:5d:
5c:68:56:dd:42:c2:21:0b:c4:3b:dc:5f:fd:31:e6:1a:4f:57:
8f:04:69:f6:7e:3b:2e:ab:9b:7f:4f:45:54:8a:d8:62:ec:01:
2f:0a:a7:ac:c0:8d:d2:f3:e0:8d:82:c9:9a:ec:5a:d6:5e:3e:
41:56:e8:54:04:c3:cd:37:f0:09:27:ba:04:9e:73:e7:7e:e9:
da:58:53:4e:23:45:ab:94:50:ed:3e:96:a8:39:b5:5e:db:9d:
2e:1a:07:a7:c1:48:10:f4:08:32:9b:a9:81:09:87:4e:1f:66:
a5:a4:2c:98:d2:a8:0c:bd:fc:a2:ad:31:a8:e8:0f:3c:e8:83:
cb:89:a0:13:e7:0c:8f:ff:a9:94:87:9a:0a:fb:4a:ab:31:c2:
3e:d1:4a:4f:5f:a1:25:7f:81:36:70:9b:b6:57:6e:7e:41:37:
9c:30:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 04:03:23 2026 by rpki-client