Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
File: 4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json)
Hash identifier: NRyxkHg6VxsahbsiU7KUB6LRScwWHn47mDKQ/7L+RRI=
Subject key identifier: 79:4C:CD:F3:EA:4E:BE:BB:C2:80:61:82:0B:7D:31:73:3E:98:38:9D
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial: 01A106CA2E0076CA4322112F20662B06972C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
Manifest number: 0A51
Signing time: Sun 04 Oct 2026 12:01:15 +0000
Manifest this update: Sun 04 Oct 2026 12:01:15 +0000
Manifest next update: Mon 05 Oct 2026 12:01:15 +0000
Files and hashes: 1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: ppEeQ21rmksxv76OYXm2ZxVruslaE1fMy1nVXSn4H0s=)
2: KNOVXoGQsdCxPsZM3zKJ6uFmptI.roa (hash: UiYbuT4DjmIashb94arKXLuitUGRN2TvoEQlDnO6RSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:ca:2e:00:76:ca:43:22:11:2f:20:66:2b:06:97:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Validity
Not Before: Oct 4 12:01:15 2026 GMT
Not After : Oct 5 12:01:15 2026 GMT
Subject: CN=794ccdf3ea4ebebbc28061820b7d31733e98389d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:83:79:c6:ae:3f:3a:b7:f6:d6:ce:53:b5:
05:a2:41:6d:01:3d:87:4e:15:60:0d:98:c7:79:8f:
c3:c3:a8:dc:e4:94:f6:e4:6f:17:23:47:78:8e:c5:
29:a9:33:34:24:b6:ef:76:fc:4c:0b:2d:cb:64:df:
7a:ff:59:10:d7:22:f9:2b:ab:28:06:da:52:7e:ab:
21:f7:28:98:70:92:20:8f:64:7e:09:da:b8:db:9c:
78:49:6d:46:72:81:92:bf:72:b8:e5:97:24:69:0b:
84:bf:29:69:33:a1:da:c1:38:ce:c2:e6:24:55:dc:
72:e0:51:5c:75:df:7c:7e:76:24:b2:a2:59:50:0c:
45:2a:b8:dd:a3:a0:c5:b7:e5:cd:0f:02:7d:b9:55:
60:9e:9f:ec:5b:e4:83:c1:20:b9:96:dc:b7:a1:1d:
dd:f5:c7:d5:25:eb:5c:96:dc:23:50:3b:53:41:56:
8a:c3:ac:99:79:eb:c0:15:da:04:51:7f:d7:80:99:
51:ee:ad:b7:79:be:4d:23:8a:12:de:4c:6d:66:97:
4d:eb:8d:78:64:01:83:c3:43:67:cf:d0:6f:3a:8f:
f7:db:bc:0e:29:d2:64:3e:0e:de:1e:31:3a:d0:ae:
55:91:b7:b0:b6:de:b3:a5:e3:84:88:6a:8c:96:de:
8e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:4C:CD:F3:EA:4E:BE:BB:C2:80:61:82:0B:7D:31:73:3E:98:38:9D
X509v3 Authority Key Identifier:
keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:0a:ea:82:07:4e:60:84:c4:f0:e6:35:be:59:93:d5:c1:9f:
a1:e2:a5:54:a5:7b:5e:d3:dd:31:7c:d8:1a:ea:fb:2a:66:08:
7d:cc:1e:5f:91:5b:72:7c:2d:e8:7e:1c:84:96:3c:98:cd:3e:
a9:db:f7:66:f6:29:d9:26:d5:40:26:7e:af:5e:82:c7:3a:8e:
2f:10:c7:c8:5a:74:37:2d:1a:1c:62:1c:16:e4:18:05:7b:aa:
56:d7:a4:36:e3:9e:58:3f:4d:0b:2e:0f:d7:7b:04:4e:6e:c3:
5f:88:84:8f:39:c9:d3:39:20:53:ec:21:ab:c4:8e:d7:67:2f:
42:ca:c8:74:ed:ed:d1:0c:44:68:58:1b:7a:6b:52:1f:7a:0f:
4c:26:14:dc:d1:c8:53:a8:2f:f8:72:ae:fd:9e:29:e1:3c:25:
15:c8:1e:6a:ff:91:e0:31:20:8c:9d:07:6a:95:da:39:89:98:
6f:94:2d:74:03:e7:a8:20:6a:8e:0d:be:8b:a7:e7:17:f3:90:
97:39:a8:f2:b7:56:c5:d8:eb:5d:f7:f5:a7:36:be:7f:fe:cf:
11:06:d7:d1:b5:8b:a6:39:9f:d4:24:7f:df:50:55:92:71:80:
6c:35:f3:ee:55:65:06:8f:7c:94:71:39:74:a8:bd:a5:b2:f9:
81:5f:2f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 22:34:34 2026 by rpki-client