Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
File: 4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json)
Hash identifier: 88PecuG8q9YpE5WCeiZlCD6p9uoqlXKU9gY3OZ+0DXw=
Subject key identifier: 25:F9:21:50:3A:E3:BD:FB:F3:BB:10:CF:61:69:D8:A9:9F:75:EE:27
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Certificate issuer: /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial: 01A0CB22F5791048BC0EB88AF598295DFDD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
Manifest number: 0A83
Signing time: Tue 22 Sep 2026 22:01:00 +0000
Manifest this update: Tue 22 Sep 2026 22:01:00 +0000
Manifest next update: Wed 23 Sep 2026 22:01:00 +0000
Files and hashes: 1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: xXfJOTz2NMxfQnLYSRwfu3QCYEXCzHwnw6HYazuBVM0=)
2: BxZPTQDdLKKz_KzmvAmu63Br_30.roa (hash: RJzmMfXa1i3UOXt5apo9yzIAminXwO5ap7oBJzJBEJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:22:f5:79:10:48:bc:0e:b8:8a:f5:98:29:5d:fd:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Validity
Not Before: Sep 22 22:01:00 2026 GMT
Not After : Sep 23 22:01:00 2026 GMT
Subject: CN=25f921503ae3bdfbf3bb10cf6169d8a99f75ee27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:61:a2:fd:fe:b0:cd:dc:81:0c:8a:be:14:
73:11:ac:7b:06:89:5d:37:72:4e:32:82:c7:07:94:
d6:47:65:4b:e3:cc:84:d9:ca:0a:f0:d1:99:38:6a:
d8:35:8c:e6:c6:30:4e:f7:a2:8c:db:9e:d8:a5:ed:
92:38:6a:30:fe:ca:38:cd:7b:15:bb:c3:b5:c9:18:
01:79:c5:89:7a:7c:15:52:83:30:92:08:db:59:4b:
a6:7d:34:ff:80:ae:67:76:1b:56:5f:35:58:93:bb:
0f:56:98:48:f2:5d:97:74:4a:1f:82:57:88:71:49:
bf:5c:52:f8:ce:80:9e:6f:97:60:ea:db:b4:06:06:
66:ca:9c:62:bc:e9:06:b8:4c:a7:fa:d0:de:39:f0:
e7:2f:ac:8c:8c:84:f0:be:72:60:9d:9a:2e:3a:8a:
aa:40:3d:90:3c:e7:3f:f0:17:ec:1a:a3:e7:24:a4:
56:61:5c:47:44:23:c8:81:db:bf:6d:cc:22:10:b8:
9a:61:ff:bd:f3:18:04:f3:c6:8c:ec:6d:0c:7c:4f:
c2:12:ed:c6:ff:e1:e8:d7:1c:52:d2:37:af:b8:42:
c0:55:f3:df:62:e5:da:89:b8:9a:ca:ed:34:c7:f2:
c8:3a:18:38:ef:df:0e:7d:d4:fd:de:9d:b5:a8:46:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F9:21:50:3A:E3:BD:FB:F3:BB:10:CF:61:69:D8:A9:9F:75:EE:27
X509v3 Authority Key Identifier:
keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f3:79:99:90:31:ed:d5:dc:d3:f7:67:76:f0:a0:56:c3:59:
d4:e7:ce:06:de:c5:d3:c5:51:63:f2:c4:f2:f3:41:94:04:1c:
91:56:4b:3b:84:01:2d:ec:59:70:59:9d:7d:d0:60:c0:c3:77:
56:67:57:43:af:54:a6:d8:f1:6a:e0:16:bc:bd:24:2f:10:9a:
16:e6:91:53:35:02:24:5f:26:28:5a:ab:38:07:57:d8:79:fc:
93:3b:11:5e:a1:ab:76:0d:a8:5c:5e:5f:5b:4a:80:9b:3a:23:
c0:57:c4:4d:88:e0:44:e2:b8:23:97:d3:1b:75:9b:0e:b5:2e:
9a:e3:e1:75:54:ab:b8:11:b4:07:32:d7:54:e9:d5:bd:76:99:
32:40:0b:05:a1:22:c3:71:ad:52:62:59:9c:50:4c:60:3e:55:
37:fa:85:69:11:bd:e3:7f:5e:7d:36:d5:9c:0e:f0:c7:87:0f:
7c:e5:e4:21:fc:48:7b:13:4d:e4:5f:a8:98:10:ca:cc:c9:64:
84:34:04:f2:3a:40:b6:d7:62:41:37:60:2a:68:eb:5b:45:c8:
f2:da:c4:f1:3b:2c:e2:dd:fd:dd:fe:5b:a9:47:47:70:86:e4:
93:22:0c:7a:45:ca:7d:f7:69:cb:96:97:b7:c0:be:22:78:80:
77:f3:10:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:37:14 2026 by rpki-client