Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File: M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier: m7q1KrB/5BTKyRNGJG2eGZl2uJxRCAiiCVZG4FydPvU=
Subject key identifier: DF:4B:EE:EF:46:6A:6F:72:39:E2:12:85:58:8E:BA:3C:7C:E1:06:13
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer: /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial: 01A100C82F04FB2FEC303CF42B06AD943676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number: 19DC
Signing time: Sat 03 Oct 2026 08:01:21 +0000
Manifest this update: Sat 03 Oct 2026 08:01:21 +0000
Manifest next update: Sun 04 Oct 2026 08:01:21 +0000
Files and hashes: 1: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: YQFUlg0itzCXElS2IVJjVMevUS5HJEqZZZXJktLKauw=)
2: jO9rf4-cCHZRF2KoiLta2NyAQgU.roa (hash: UwmPs36c2ef9tHjcukHaPVItxdtDMmpbGOtpHRoCvf0=)
3: xn4i-fiHxOz0VUsB8YhWKLghbLs.roa (hash: Ptihx8qc04YVHI7Uz+aNOpCGFom4Sx5jCTJsyxvgVYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 08:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:00:c8:2f:04:fb:2f:ec:30:3c:f4:2b:06:ad:94:36:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Validity
Not Before: Oct 3 08:01:21 2026 GMT
Not After : Oct 4 08:01:21 2026 GMT
Subject: CN=df4beeef466a6f7239e21285588eba3c7ce10613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4d:87:a4:28:8d:55:6f:c9:78:18:4e:90:c3:
ca:df:9a:0b:b0:6f:bd:31:aa:f5:a7:08:75:81:4a:
54:6c:12:d6:ec:0a:bb:f4:f8:f8:2d:08:99:0a:d8:
be:42:a0:34:ce:44:00:b8:a5:22:e0:2e:c5:a8:8f:
c1:8a:f2:8a:17:e2:a0:d2:7d:e1:1f:e7:10:46:cf:
85:ca:6a:fa:fa:84:19:d3:fa:44:37:f4:b3:3c:34:
bb:bb:fb:bb:b9:eb:c3:f5:49:50:9e:05:e1:59:06:
af:71:ce:a7:df:8e:39:3a:27:a1:09:9a:44:99:b0:
81:92:d5:07:23:dd:08:26:f8:78:44:eb:86:84:ee:
e2:ed:42:ca:39:22:44:bb:ba:78:85:c5:da:81:65:
c2:0d:66:9d:fc:09:ee:ba:61:66:7e:0e:ef:83:08:
3c:c3:4c:31:d9:7c:59:10:37:15:25:29:c7:d4:14:
56:fd:b7:99:d8:74:8f:84:6d:61:4d:c8:db:84:a5:
2e:d3:bf:ce:6c:2b:5a:6b:ee:a0:1f:2f:56:d5:a2:
20:2d:dc:b1:32:53:58:29:81:78:36:d7:7e:88:0e:
a0:fb:2b:8e:a8:11:4e:e1:1a:65:b7:7d:9a:4d:65:
2e:47:db:2f:fd:29:b2:75:ae:9c:1b:a2:7e:1e:4a:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:4B:EE:EF:46:6A:6F:72:39:E2:12:85:58:8E:BA:3C:7C:E1:06:13
X509v3 Authority Key Identifier:
keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:62:fb:38:93:73:cc:93:58:ca:60:30:c4:20:bd:fa:58:8b:
bf:6f:dd:e5:b6:4f:9f:67:a1:09:dc:ce:dc:1d:e8:5f:3b:0c:
03:88:87:ee:9e:76:f9:4a:4f:c6:9e:62:00:83:73:ce:75:08:
1f:6a:5a:c8:c5:ce:66:54:94:93:72:92:dc:5d:fa:31:fd:a8:
bd:e1:bb:60:3c:4d:10:cd:bc:81:6e:8a:96:7e:52:6b:67:c9:
b1:75:f5:bd:2e:8c:1a:27:61:82:c0:2f:cc:57:ea:a3:79:cf:
25:3c:62:fc:f1:5c:79:40:91:7a:d4:25:68:ea:c2:48:b3:14:
19:de:49:b8:85:ee:00:6b:82:4b:99:df:3d:61:57:67:69:bb:
d0:5e:03:f9:d5:2b:f0:2b:f1:47:aa:19:c6:5b:36:c2:0d:a1:
ff:ed:81:06:73:4f:87:11:e3:aa:00:0c:83:fa:80:bd:75:09:
db:d9:48:da:e4:d0:7c:b1:da:68:fb:dd:52:6a:45:e3:cd:13:
c2:57:71:84:8c:b2:5e:bf:e0:e5:37:5c:6a:f4:f5:85:32:5e:
ef:c1:ea:c5:6c:19:49:26:c4:63:83:7e:b4:57:f8:e4:7c:2a:
34:8d:7b:2f:dd:60:76:7d:a3:ee:eb:be:14:90:01:8e:69:b8:
84:9d:4e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 18:54:07 2026 by rpki-client