Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File: 4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier: +/67RD5VQWM+I2SEL8i12ymvnvUUDZXcHEtxMfT+2g8=
Subject key identifier: 63:A5:41:E7:79:5F:81:86:07:CA:3A:49:96:2D:68:A5:C6:61:14:3B
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial: 01A11C0763F4C8962198C7FBAFDE28F4F151
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number: 1AA0
Signing time: Thu 08 Oct 2026 15:00:08 +0000
Manifest this update: Thu 08 Oct 2026 15:00:08 +0000
Manifest next update: Fri 09 Oct 2026 15:00:08 +0000
Files and hashes: 1: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: 9O7ghxsWzvcO//arkskse54A/zNaErV49d5uvAZMJag=)
2: 5Jc6tMJwHs6_kDZssNgNCa5DcfQ.asa (hash: hK1xGE+N20KJfOPReB2sfspix23SnKunSEzOm7SLfDw=)
3: 5aSu5rDgohcAcFRBlVeL4KQf-Bc.roa (hash: TBrAPV4bOwpXI3ikK/+R0NLpPd2CyHMsQiSsoHb0Hng=)
4: B4UdmI4nMjXvDI9mqvP3jq5Yyds.roa (hash: TvdoyPhTynvytwC8PwcUZrOiE5PXu6aF1+Z/HvWiCkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:16:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:07:63:f4:c8:96:21:98:c7:fb:af:de:28:f4:f1:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Validity
Not Before: Oct 8 15:00:08 2026 GMT
Not After : Oct 9 15:00:08 2026 GMT
Subject: CN=63a541e7795f818607ca3a49962d68a5c661143b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c0:2e:e3:f5:fe:9f:df:0e:e4:c4:0f:f0:bc:
8a:d1:d6:93:26:11:8e:5f:8d:cc:92:1f:6a:d0:f5:
46:f9:a5:a7:26:cb:64:58:e7:42:ff:ea:81:b7:a4:
22:13:13:28:dc:1f:b8:42:00:df:eb:43:2d:46:f9:
f5:17:20:35:fd:cc:8c:d2:a8:27:83:2d:29:38:38:
0b:cf:7c:38:61:1a:35:4f:c5:b3:9f:47:90:58:cd:
43:b1:18:8c:4b:9d:62:52:d2:cc:a8:c3:4e:fe:b5:
6c:a6:1c:33:db:c9:21:61:11:9c:bc:0e:05:31:b4:
b3:4f:25:d9:fd:8d:70:7e:78:b9:4a:1b:80:82:41:
db:6f:ed:b1:84:fd:6b:b4:56:ae:77:78:e1:4e:11:
3e:5d:8e:76:81:de:b0:12:a5:a2:1f:a7:b9:d6:7a:
c3:c2:4a:f0:8a:09:7f:8d:5b:9a:c9:f3:6e:3c:ae:
71:7a:f1:7c:de:c5:a5:3a:97:18:60:02:a4:47:d0:
89:cc:12:7f:56:94:dd:6e:e0:b9:a5:dd:d7:f2:02:
1f:57:0e:12:1d:78:89:d1:84:75:f6:f6:46:d1:01:
53:25:99:21:09:ce:08:f8:64:32:10:b1:73:e9:f8:
91:8d:8d:39:f9:a9:44:9e:00:08:56:ec:88:f3:46:
03:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A5:41:E7:79:5F:81:86:07:CA:3A:49:96:2D:68:A5:C6:61:14:3B
X509v3 Authority Key Identifier:
keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e0:ff:76:d6:03:71:43:a0:47:f6:c5:6d:e9:86:4a:fd:d8:
6f:f7:cb:7c:b6:ce:f7:bf:f4:e4:a3:e6:f0:03:75:bd:1e:15:
40:7c:09:ce:83:44:3f:18:66:9e:06:e3:33:b0:d2:f4:25:9e:
a3:d4:c7:0e:1f:05:ff:94:1c:08:48:e0:54:20:2c:8f:1e:ef:
91:f3:1a:7a:e9:85:72:11:d0:1e:7c:6c:e2:e4:21:e5:92:1f:
e1:45:dc:f7:56:07:17:e8:64:ba:2f:aa:cc:4c:14:21:8e:6e:
c6:60:bb:16:2d:93:cd:56:99:52:fe:41:31:14:69:5d:ec:51:
c2:1e:c2:71:bb:5b:5e:5e:01:83:cf:34:18:2e:52:e3:a8:91:
9e:60:81:bf:93:95:4d:89:53:72:a1:f9:9c:fd:c1:1e:ff:cd:
3a:31:cc:6e:ec:2b:fa:c8:bf:a8:5a:7f:04:86:0d:4f:79:e1:
c8:de:0a:cd:67:b0:e1:9b:39:1e:1f:b2:5a:4e:35:5d:8e:d2:
a6:4d:3a:1c:b1:1e:54:bb:0b:b9:3b:ed:5e:14:90:cf:6a:d4:
af:0b:0a:39:8a:76:27:37:7a:fe:3e:37:ca:3b:67:8a:8b:2c:
ca:6f:42:31:7e:ef:13:d5:18:71:5f:b1:78:0a:68:cc:10:db:
91:fa:80:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:42:21 2026 by rpki-client