Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: m21Bw/nnl5u6OKHQjgpWAfQUlF72yg7RUlAys9bMh+g=
Subject key identifier: BA:F0:89:3D:08:4E:3D:05:02:F3:81:BC:A2:3E:A9:07:BC:8B:F8:68
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 019FF5D929D4C08EBFEE6B764552EA57C563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 1A05
Signing time: Wed 12 Aug 2026 12:01:17 +0000
Manifest this update: Wed 12 Aug 2026 12:01:17 +0000
Manifest next update: Thu 13 Aug 2026 12:01:17 +0000
Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: rwtuUt63eytKk6tRLuFfs1+n2acUJGXxEFZMu+As3dM=)
3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:d9:29:d4:c0:8e:bf:ee:6b:76:45:52:ea:57:c5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Aug 12 12:01:17 2026 GMT
Not After : Aug 13 12:01:17 2026 GMT
Subject: CN=baf0893d084e3d0502f381bca23ea907bc8bf868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:5c:9e:bc:cb:47:3b:a7:8f:d0:69:6e:5f:
20:f5:29:e4:10:88:5e:ac:4e:1c:d3:f4:a7:44:ec:
b1:29:ef:6f:92:60:5e:f4:53:50:1b:10:96:bc:ef:
d9:fb:9b:48:d9:cd:d3:4e:75:fe:d9:40:11:d1:8e:
92:1b:26:1e:cc:49:95:8b:76:91:b1:3c:99:99:83:
64:b3:3c:15:a0:a5:3e:83:62:b4:09:cf:89:6f:fa:
37:ce:67:57:96:d1:e7:07:b8:23:2c:af:db:11:b5:
da:6f:8c:5a:11:00:6f:87:50:25:46:1a:3c:4b:c1:
5a:e8:33:8f:62:ca:35:2b:50:dc:c0:b3:df:f3:9d:
9a:99:bf:85:a7:22:28:05:4f:02:cb:5e:92:8d:6e:
30:44:2a:7d:2d:ee:a7:4b:8f:e1:2f:45:1a:d9:5d:
ae:b7:00:8a:b5:af:64:99:3a:ca:57:73:7e:83:3c:
77:d3:7f:8c:01:4e:b8:8f:60:bb:98:70:d9:e4:7e:
ef:13:00:a3:c5:1f:04:9c:9b:3c:19:ae:a6:bb:ac:
cb:9e:14:58:3e:18:93:95:3d:0b:1c:3e:c1:64:1b:
a5:ff:fe:98:1e:c8:dd:8c:50:89:ba:aa:f7:bf:e8:
98:7e:f9:b3:24:da:72:39:7c:27:54:88:69:74:f6:
c1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F0:89:3D:08:4E:3D:05:02:F3:81:BC:A2:3E:A9:07:BC:8B:F8:68
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:84:19:58:ff:6a:f3:31:7f:3b:b9:60:1e:9a:64:1e:1f:8c:
59:0a:61:f9:e2:e0:4c:f1:5f:6d:75:bb:8b:eb:4f:6a:cd:de:
a1:da:19:27:0e:e5:41:ff:4c:b2:24:4e:2b:6b:0c:58:14:3f:
86:6f:61:fc:ca:d5:f9:f4:1a:6b:60:e5:92:35:8d:b5:82:88:
26:d0:77:90:00:ca:91:f5:f0:ca:87:e7:15:10:63:6e:30:3b:
33:72:b6:7f:af:8b:88:04:1a:9b:ce:6f:9c:34:f4:96:87:d6:
41:b6:6a:7b:56:d0:9e:51:d7:3c:b4:1d:12:29:56:46:91:23:
98:ed:01:88:f3:5b:7f:b4:2b:2f:13:b3:83:51:cf:f6:74:5d:
5d:0e:99:a3:1c:c7:5a:02:14:b3:97:19:ed:74:3b:e1:54:97:
95:44:53:8d:84:70:a8:0b:ce:07:4c:1c:8b:dd:60:f4:8e:16:
41:89:6d:4c:12:4b:dd:bc:38:c9:2c:67:c4:1c:ab:fb:93:36:
d2:87:81:fc:91:78:31:0e:76:e9:0b:d4:8a:cd:1b:2a:cc:25:
1f:54:22:d9:5b:25:32:30:7b:1a:55:7a:0b:a0:12:b1:df:49:
b5:68:c5:4d:c4:aa:7f:5c:57:61:98:ad:bb:fc:14:0a:50:18:
f5:9d:8f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:13:40 2026 by rpki-client