Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: DOxJ94Fb4Xg2vUTPO3Mh+Uwk+tfc6bezQcthgevMNl0=
Subject key identifier: 21:89:D7:46:26:14:91:36:E7:8C:A4:DB:98:C0:3F:24:5B:D6:2C:AC
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 01A13E25C3D1A71B3086F5ABA323BC29ABD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0E67
Signing time: Thu 15 Oct 2026 06:00:24 +0000
Manifest this update: Thu 15 Oct 2026 06:00:24 +0000
Manifest next update: Fri 16 Oct 2026 06:00:24 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: E9cSfMYytTGLpsDq5L5Gi3CbNlWBMqbiU6sj05oS2aA=)
2: Zfv_5cAa3ri0Ax5p2vNE36rHpnE.roa (hash: Id3c2s4Nmji3usQrf3+l5D4JNCrYHAfvKHW7XcPkXa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:25:c3:d1:a7:1b:30:86:f5:ab:a3:23:bc:29:ab:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Oct 15 06:00:24 2026 GMT
Not After : Oct 16 06:00:24 2026 GMT
Subject: CN=2189d74626149136e78ca4db98c03f245bd62cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fb:26:60:b4:4e:1e:39:f8:4f:10:32:45:ff:
fc:e0:e3:a2:a5:9d:d3:3b:95:63:9c:91:92:c7:2f:
d3:8b:dd:60:f9:dd:e2:29:ea:19:c7:c0:96:5f:c7:
f8:5b:d6:94:54:eb:bf:c8:30:9f:cb:81:84:35:e1:
04:12:65:68:41:53:37:41:b3:fc:bf:1a:6f:19:ac:
3d:91:28:84:5d:2f:a1:f1:db:3a:16:7d:7d:8c:68:
2e:bf:62:34:31:80:55:97:6c:5d:5f:a1:7c:3a:3c:
f6:b2:8e:fa:ee:09:7c:b7:97:5b:18:0d:6d:ac:62:
2a:67:d8:62:88:f0:c2:43:ce:87:4c:c4:b8:74:a0:
69:3d:21:e0:58:64:72:c5:f7:75:24:8b:c9:c1:3a:
7d:58:6a:e3:2d:bf:4a:19:9c:a8:cd:c7:4e:b5:72:
d9:63:8f:88:29:5f:de:53:9a:1a:20:56:08:b0:68:
13:c0:70:78:28:f4:fd:94:6d:7a:46:99:3c:36:57:
72:22:c6:fb:b7:5e:63:97:27:5d:51:11:d9:21:0b:
65:b8:bd:a1:5b:56:d2:35:44:90:92:3a:c4:dd:85:
3e:52:9a:15:61:d9:68:75:c8:fe:50:e1:90:01:b5:
e9:57:a3:ea:a8:ef:6e:da:62:f3:c1:22:10:09:2b:
bf:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:89:D7:46:26:14:91:36:E7:8C:A4:DB:98:C0:3F:24:5B:D6:2C:AC
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:fa:0e:50:b7:8e:0a:b5:42:75:54:ca:e5:b3:a3:a2:5b:df:
48:3e:1a:21:87:b7:a7:10:40:58:df:dc:58:95:e9:df:3f:c8:
78:5d:4a:50:43:3e:e8:8e:ac:be:d3:16:7c:7c:37:5f:e3:8a:
2d:be:20:ba:d9:8a:2d:8c:53:bb:7d:69:21:6c:5d:73:e8:eb:
23:33:81:79:20:9a:ec:58:d3:a4:b1:a2:c5:e5:af:b2:9b:58:
e8:ce:c2:de:03:4c:79:1f:09:8a:ee:8d:e4:46:26:82:0a:46:
03:29:66:19:26:d9:c8:f3:dd:ec:15:a4:9a:c4:c3:a4:dc:d1:
5b:bf:63:2c:7a:ac:5d:93:80:18:df:0a:d1:ea:84:33:c3:e5:
45:7b:aa:7b:67:39:8c:fe:3e:c1:e5:15:82:cf:53:53:14:c4:
e4:90:80:37:44:90:ca:ae:61:c5:52:f6:1b:c9:e8:bf:9d:b7:
eb:e9:91:7e:c3:98:d6:1d:c6:8f:ae:c9:43:a2:8c:5e:2f:ac:
30:e4:2a:0b:a7:30:0a:fd:8b:0a:73:af:97:5f:b3:4d:b8:ac:
8a:35:c0:0c:cd:45:c9:14:0a:a9:fa:73:28:76:c8:e7:28:96:
75:8d:15:17:f7:d8:b8:31:84:2a:58:de:96:d9:f3:32:a6:99:
89:c9:6d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:57:03 2026 by rpki-client