Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: uLzROnVX5ZJnM8uBQAME5q13eP5fv2ZG5FVpkCLTuNw=
Subject key identifier: 8F:E9:B6:AD:11:CF:5B:FC:14:70:9F:0C:81:24:D5:DE:8F:CB:44:B8
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 01A1513EE20B46AA8144385E160B5B1EC2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 17C0
Signing time: Sun 18 Oct 2026 23:00:37 +0000
Manifest this update: Sun 18 Oct 2026 23:00:37 +0000
Manifest next update: Mon 19 Oct 2026 23:00:37 +0000
Files and hashes: 1: 1eykC-2BnVsWo7Ye-BCUzkQkUoQ.roa (hash: XORzzia+v0TQle6S3eSeTmbfXijHFXJwl9VwUUmAcRw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: 4IBnvDidVUJi9NssxkA35ICxmi28+IMzr2Vgelqe4e0=)
3: NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa (hash: 3elpIcyAaRbsEU++I8EIRcmrePMiDX7Ycf8Xs+7sNy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:51:3e:e2:0b:46:aa:81:44:38:5e:16:0b:5b:1e:c2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Oct 18 23:00:37 2026 GMT
Not After : Oct 19 23:00:37 2026 GMT
Subject: CN=8fe9b6ad11cf5bfc14709f0c8124d5de8fcb44b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:71:a9:30:2b:3e:df:c6:4a:d9:e3:f5:56:
3a:82:63:18:e5:5e:c6:a0:f5:ec:67:11:86:f0:a5:
81:fd:81:24:a3:0e:ad:21:48:07:9c:70:49:37:8f:
20:c0:77:8f:d4:08:a1:6d:cd:cd:b3:bd:89:5c:7c:
00:de:06:33:b8:82:05:4e:9e:69:2f:14:2c:1c:af:
52:18:4c:e3:24:7a:fc:e0:fe:81:d6:a9:3a:77:84:
2f:ff:67:f8:50:ba:33:b6:50:0a:7f:73:c9:11:a4:
74:f5:06:7b:11:20:83:e7:b7:03:cb:ef:e9:cb:85:
d8:e7:0c:40:b1:92:0f:8b:54:6d:b9:78:72:a6:25:
90:eb:65:eb:f5:47:8f:d1:1f:bd:72:16:cf:d0:05:
be:02:72:61:cb:e8:cd:d8:a6:a5:62:64:73:51:bb:
ad:da:3f:17:51:e4:87:42:a8:66:24:e5:7f:b5:6e:
b6:2f:75:af:8a:2e:cd:a5:44:29:7d:2f:b4:ea:7a:
4c:a0:ea:6c:59:05:c4:a8:94:54:f5:2f:4e:68:f3:
07:a5:99:24:88:02:4b:76:1b:b1:e7:ab:d7:23:04:
88:99:1e:0d:a0:24:db:85:0b:a9:99:84:2b:a3:1b:
d3:c0:8f:9b:8d:2c:a4:5b:a1:43:d8:68:34:a8:f7:
95:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E9:B6:AD:11:CF:5B:FC:14:70:9F:0C:81:24:D5:DE:8F:CB:44:B8
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:37:48:e8:23:4a:74:6d:00:d5:0c:e6:3e:f0:ce:72:04:0c:
76:af:d9:7c:42:ff:b4:23:75:70:9d:98:9f:b5:e6:4f:a0:19:
6d:68:69:69:15:1b:30:cf:d2:c7:ff:bf:36:0b:58:c7:58:1f:
94:f5:1e:5e:33:3e:e6:29:cb:e4:a0:d2:7d:f5:86:d8:fa:35:
f8:78:11:86:31:e8:3d:70:8a:11:2a:d5:60:a3:4a:7c:df:d9:
4a:0c:65:cf:0c:f0:23:45:54:ac:d2:96:0f:65:95:c9:0d:18:
33:1a:d3:03:b0:51:ff:a6:0b:b5:d5:1e:ef:cb:ae:77:1f:06:
76:72:7d:d1:9c:88:3a:82:61:f5:2d:ac:c1:88:2e:89:8f:52:
f2:b0:62:cc:2b:11:f4:53:b1:ea:fc:85:f3:9e:b4:7c:24:c0:
99:cd:e0:e1:aa:10:e2:a8:28:2d:c1:f8:63:b2:45:92:82:f0:
00:27:8f:cd:c7:de:92:ec:e8:52:87:7c:54:73:16:b3:e2:6e:
e1:44:ae:4b:2d:8c:0d:71:5c:bb:22:aa:69:f9:c1:74:f3:83:
c1:bd:01:68:27:2a:86:c6:bd:74:72:2c:60:b3:2f:fa:90:9e:
7c:4f:73:37:1a:0e:4f:f0:43:0b:b8:10:ca:6f:70:25:05:19:
84:e3:48:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:23:41 2026 by rpki-client