Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier: UfNUAUjWh7tIFc8ErNbxvfnFBTBSTvb8e/CV03NdJkM=
Subject key identifier: 7F:F6:62:5C:FD:AD:94:FC:BB:15:2F:44:4C:4D:AF:BF:B6:B7:2C:D3
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial: 01A13DB8D69A545007413317E78DB633225E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 04:01:26 +0000
Manifest this update: Thu 15 Oct 2026 04:01:26 +0000
Manifest next update: Fri 16 Oct 2026 04:01:26 +0000
Files and hashes: 1: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: 1szZL5W3AaPnOOia92XNgYYQPmYkivZ7XycfluH9uD4=)
2: Tixj9aaXyoxnN9Im74ziDdIZ_Zo.roa (hash: a1BJKfn6mW/dx8FDsu8a6wmd/TNTkHkzXAOJRfIddFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:d6:9a:54:50:07:41:33:17:e7:8d:b6:33:22:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
Validity
Not Before: Oct 15 04:01:26 2026 GMT
Not After : Oct 16 04:01:26 2026 GMT
Subject: CN=7ff6625cfdad94fcbb152f444c4dafbfb6b72cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3d:a7:42:66:fd:ee:e8:11:84:20:41:74:d9:
07:2a:57:e4:35:69:00:e1:d3:81:cb:7a:9a:9a:e3:
a3:c4:c8:f4:fd:40:6a:7b:e0:bd:19:94:f5:7d:02:
75:b4:ce:83:ac:74:e1:23:f8:1c:9f:8d:70:03:12:
01:5a:6a:f7:f2:dd:32:c3:2c:52:cf:cb:b8:6d:e3:
78:0d:54:57:e5:c0:7c:03:90:25:21:bc:76:2d:b5:
65:40:25:68:d3:40:d1:d9:15:ea:17:a9:78:1e:71:
5e:88:40:9e:d6:02:e5:cf:f9:4e:15:08:e1:d4:88:
8e:f4:f3:23:80:4f:4b:22:09:1c:5c:95:79:ad:d5:
ea:30:91:ca:2a:7a:9e:7a:2b:74:6c:e3:b1:0d:4e:
8a:46:72:b5:d3:48:3d:98:49:d3:b3:09:01:a9:fe:
bb:e8:e9:7c:1f:0e:78:09:ef:ab:09:c9:78:ea:4a:
a9:07:12:ea:bc:41:88:21:4f:ba:d5:5f:b1:78:47:
bd:63:99:46:fc:dc:08:de:d5:28:8c:79:43:6c:2a:
49:4a:25:e0:91:33:8b:a0:de:96:12:fe:ea:be:5f:
66:d7:a3:9d:e0:51:e9:c5:29:c2:3c:b1:7c:22:2f:
01:5b:26:dc:5c:21:4b:38:4c:5c:0e:9c:4a:82:36:
8b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F6:62:5C:FD:AD:94:FC:BB:15:2F:44:4C:4D:AF:BF:B6:B7:2C:D3
X509v3 Authority Key Identifier:
keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9f:fa:3b:42:d3:56:9e:57:af:58:68:18:6f:6c:08:df:2c:
79:0d:e5:25:50:f1:dd:79:f1:f4:c3:5e:dd:45:6f:bf:2a:f5:
fc:6a:2d:ad:19:5e:a2:d6:30:09:ae:63:8b:dd:64:c4:83:08:
cf:09:b9:d2:37:44:49:b6:c4:f8:28:a6:bb:c8:44:54:0b:d4:
53:d8:1e:5a:f5:9d:9e:5b:b3:1a:dd:5e:1d:66:8d:57:8e:4f:
7b:0d:6b:a5:b1:af:ed:4d:37:5d:f7:02:45:9e:64:f2:de:d6:
98:ec:12:b2:4c:72:2b:db:34:a2:14:45:40:5b:6f:19:b5:87:
d6:65:09:60:a0:01:0f:c3:42:96:44:e7:17:d5:26:a4:e7:10:
b8:cc:7d:fe:f2:3c:c0:80:45:c4:3e:94:e8:97:00:57:1e:d3:
e6:dd:9a:c2:de:77:3a:67:8b:8b:65:39:f5:93:73:0a:0f:83:
78:75:82:97:56:93:9c:37:e2:87:70:ac:d9:fd:98:91:b7:10:
cb:9d:1e:4f:0f:76:20:aa:be:86:44:60:c2:74:7c:0d:8e:5f:
a2:db:67:94:1d:58:98:ef:4c:a0:8f:a2:11:a1:22:09:7f:36:
00:46:f7:d3:e9:b3:d4:02:98:76:34:12:36:f5:5c:68:ec:0d:
c5:05:d7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:05:36 2026 by rpki-client