Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier: kHRBlo3pH31dqDyJhW1Sv8ktd4MEnKjoTVKkjJB9izo=
Subject key identifier: F3:3A:87:9A:40:6F:B3:82:3F:06:FE:4C:9E:F4:C2:26:CD:E0:C7:D2
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 01A0010100C1E042A2B867A26889AF1D888A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number: 095F
Signing time: Fri 14 Aug 2026 16:00:37 +0000
Manifest this update: Fri 14 Aug 2026 16:00:37 +0000
Manifest next update: Sat 15 Aug 2026 16:00:37 +0000
Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: kAwmLIKVPztbUNsEZp3QAYuE4r6gSH/kgtcEcHS11Zw=)
2: Um8x4FnVBBKSkcy47VZrVv_LDxE.roa (hash: tfl71U6Q8ML7hqI6qdxoHZc1rgsYETV4BNFwPX3unlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:00:c1:e0:42:a2:b8:67:a2:68:89:af:1d:88:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Aug 14 16:00:37 2026 GMT
Not After : Aug 15 16:00:37 2026 GMT
Subject: CN=f33a879a406fb3823f06fe4c9ef4c226cde0c7d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:60:85:bf:62:ee:ce:ae:59:99:6c:79:1c:df:
ca:1e:5c:d0:64:d1:96:ec:41:67:ab:6f:49:60:a4:
ee:76:05:86:7d:d3:c8:de:b3:9a:31:2f:29:43:df:
c1:94:2e:55:2f:c6:34:cf:03:b3:df:de:d5:91:d6:
cc:da:be:d2:f6:da:b0:65:13:6a:35:17:1b:62:79:
21:5b:a8:31:0c:66:cd:41:cb:06:11:4c:49:11:99:
b0:f4:33:a7:3b:36:70:30:5a:3b:72:8d:e5:3b:29:
20:b8:c1:cb:2e:a3:11:d5:91:d2:62:dd:90:ec:fa:
ad:06:ee:68:4f:7a:e8:5a:6b:d3:9a:8b:91:bc:0c:
76:0e:f1:45:68:87:63:02:61:89:c0:ef:d1:18:c4:
6e:61:07:8c:fe:8a:de:5a:9b:21:99:64:5c:09:96:
56:09:2e:dc:d6:62:e9:6b:ba:fd:fb:f4:1e:4c:db:
2b:c2:a9:37:0b:9d:d0:11:8a:ef:06:e2:ca:fb:51:
bc:bf:29:71:be:ed:56:31:6b:f7:85:32:c1:92:55:
27:fa:74:5c:02:75:82:c1:af:f2:27:35:f4:55:0e:
02:3e:96:c7:b4:d5:32:93:00:bc:07:26:ee:81:c6:
a8:8e:3f:8b:a9:c6:e7:38:9e:20:b6:f4:53:c4:05:
12:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3A:87:9A:40:6F:B3:82:3F:06:FE:4C:9E:F4:C2:26:CD:E0:C7:D2
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:b9:cf:51:2c:2f:2c:16:3e:0f:e7:dd:ee:41:f9:bc:c0:d7:
17:00:6b:56:4c:b7:9f:89:6a:13:54:73:19:89:2e:2f:83:63:
b6:76:c7:2d:8b:61:91:39:03:b2:99:c4:3c:5d:4a:74:c1:e0:
40:96:5d:db:68:d4:a1:06:05:ae:87:0f:84:28:f2:49:6e:3e:
69:1c:70:6f:6d:fb:4f:9f:68:10:0e:26:45:b5:5f:8c:97:be:
03:7a:4b:42:62:0f:bb:92:41:7c:13:13:b8:78:a1:14:cf:4c:
17:46:83:b6:65:8b:0f:17:3e:3b:b3:94:b3:51:82:4e:9a:81:
34:7f:7a:2c:2d:2b:7c:da:f7:0c:32:74:fd:bf:da:ea:b4:45:
fb:a1:22:50:bb:0a:32:32:4c:6c:49:a2:33:89:8e:4e:50:c0:
e5:e0:10:3b:96:17:90:e3:0b:4d:86:48:11:f7:5e:cb:a8:5f:
78:99:8c:c5:3a:2a:86:ac:82:c3:35:cb:f0:3c:1d:f4:ab:e2:
f2:68:55:e5:b2:b9:45:bd:ff:6d:40:bb:95:d4:71:4e:57:f5:
d4:e0:c8:84:5f:0d:e0:14:86:2b:9a:f5:ad:ab:ef:67:a6:9b:
53:9d:f1:60:3b:f5:9d:a2:80:cf:13:d4:6e:57:b0:c2:20:83:
15:24:73:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:25 2026 by rpki-client