Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: sR7O+7YQrejKrSO3PQhgXfq/zPzZmlekDOvhIqtRh08=
Subject key identifier: 35:AF:EB:EA:29:13:1A:E1:14:05:32:77:BB:96:F1:08:64:7A:04:44
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 01A0D5A6C7C16D7F17F9D49196F7F80BFA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 1A78
Signing time: Thu 24 Sep 2026 23:01:12 +0000
Manifest this update: Thu 24 Sep 2026 23:01:12 +0000
Manifest next update: Fri 25 Sep 2026 23:01:12 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: IIiPZA16HRwl+MX7AmJyeE9A3gPzgOufTJ1hHxQaXR0=)
2: CpV5ifZcjPyGOZZo5Kthc-0aYIE.roa (hash: lgb25S95umOL8YFj63EWLcLTY42lwBMqoGZsvrLzBnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:c7:c1:6d:7f:17:f9:d4:91:96:f7:f8:0b:fa:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Sep 24 23:01:12 2026 GMT
Not After : Sep 25 23:01:12 2026 GMT
Subject: CN=35afebea29131ae114053277bb96f108647a0444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:ef:a3:7c:87:55:82:ea:cc:ae:06:e7:b0:
b6:40:97:0c:8b:18:00:f6:59:48:59:4d:bb:02:b8:
58:9b:a3:0c:b7:5b:bc:d6:d0:63:a7:db:85:6f:dd:
4e:3d:3a:ea:40:30:94:63:f3:d7:11:b0:ee:c0:1b:
cc:80:1d:e7:0d:fb:e7:34:d3:db:0e:8f:f8:4c:f1:
20:c7:12:62:71:6b:c5:18:5e:73:3d:cf:f7:f3:05:
69:24:25:a2:fb:bf:05:97:a9:c4:f8:9d:4c:95:f8:
0a:91:16:5f:7f:1d:46:aa:b2:60:ab:a5:0a:a2:89:
a1:5b:80:2a:98:81:8e:6d:cd:63:9a:3a:b4:9c:92:
1d:e5:05:0e:ea:e8:e7:09:2c:29:e1:fa:3a:58:ab:
55:b9:30:fb:fd:a9:75:8a:36:90:92:72:c5:47:b4:
ed:44:d1:fb:87:2a:d6:52:71:80:79:b5:b7:38:1f:
57:d4:85:81:9a:b0:a0:93:5a:15:08:7a:e0:a3:41:
16:5d:42:79:36:c8:5b:09:d1:5c:8f:7a:09:92:b0:
b8:1a:8f:30:1c:7f:fe:20:1b:d5:76:2f:3e:48:ca:
f0:28:48:b8:0e:6f:ca:9f:06:5c:65:bc:f1:7b:f0:
2e:3b:3c:80:99:6d:fe:2b:7b:b3:1a:2c:09:4e:8c:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AF:EB:EA:29:13:1A:E1:14:05:32:77:BB:96:F1:08:64:7A:04:44
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e1:e6:23:c5:8b:69:cb:55:09:59:45:54:24:a9:0f:cc:ad:
9d:2e:d8:e3:0d:c6:3e:af:e2:7b:a1:f8:6f:2a:7e:e5:b8:c0:
60:ad:b8:41:98:6e:4a:94:c6:07:53:60:f6:ed:c5:b5:3e:6c:
71:2c:bb:af:f6:3f:7f:5c:a0:c6:ec:87:dc:4e:81:8a:c8:34:
99:8b:77:38:79:9e:d6:7b:b1:42:7b:38:cf:19:65:1c:22:7c:
79:d9:ed:2d:61:a5:cc:de:49:19:13:e0:0b:c4:89:55:43:2d:
10:9f:c4:b4:a0:e0:43:32:4c:5f:52:c8:73:53:6a:bc:9c:78:
74:5f:2f:3e:1f:b4:4a:2c:71:fc:27:fd:e8:b6:44:10:ff:47:
53:59:09:6d:68:45:e5:fe:2b:6c:21:1c:ce:97:1b:98:72:2f:
e4:57:63:a6:3f:f2:65:4e:bb:7c:39:57:fc:be:7f:7b:43:f3:
1d:b0:6c:1b:29:15:12:ff:d6:4f:d1:7d:54:a7:99:be:8a:60:
8f:7a:57:d4:17:eb:36:9c:a1:ee:0f:7a:f2:b4:38:d0:75:42:
ad:29:2f:60:ac:8e:72:2d:7e:1a:7e:46:f1:d6:ef:51:49:30:
05:c4:93:e0:16:d3:d3:fc:88:35:a8:31:a6:24:4c:dc:de:53:
fa:24:35:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDVpsfBbX8X+dSRlvf4C/p7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMjI3N2ZkZjY1ODI4ZWY0MGI1OGNlMTAxOTQ2NTk1NTA3
ZjEzMzAwHhcNMjYwOTI0MjMwMTEyWhcNMjYwOTI1MjMwMTEyWjAzMTEwLwYDVQQD
EygzNWFmZWJlYTI5MTMxYWUxMTQwNTMyNzdiYjk2ZjEwODY0N2EwNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa/vo3yHVYLqzK4G57C2QJcMixgA
9llIWU27ArhYm6MMt1u81tBjp9uFb91OPTrqQDCUY/PXEbDuwBvMgB3nDfvnNNPb
Do/4TPEgxxJicWvFGF5zPc/38wVpJCWi+78Fl6nE+J1MlfgKkRZffx1GqrJgq6UK
oomhW4AqmIGObc1jmjq0nJId5QUO6ujnCSwp4fo6WKtVuTD7/al1ijaQknLFR7Tt
RNH7hyrWUnGAebW3OB9X1IWBmrCgk1oVCHrgo0EWXUJ5NshbCdFcj3oJkrC4Go8w
HH/+IBvVdi8+SMrwKEi4Dm/KnwZcZbzxe/AuOzyAmW3+K3uzGiwJTozldwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDWv6+opExrhFAUyd7uW8QhkegREMB8GA1UdIwQY
MBaAFOIid/32WCjvQLWM4QGUZZVQfxMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy80ODE3ODYtNzdmZC00MzE2LTk2Y2Ut
ODIyYjg0MmMzYzBlLzEvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy80ODE3ODYtNzdmZC00MzE2LTk2Y2UtODIyYjg0MmMzYzBl
LzEvNGlKM19mWllLTzlBdFl6aEFaUmxsVkJfRXpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+HmI8WL
actVCVlFVCSpD8ytnS7Y4w3GPq/ie6H4byp+5bjAYK24QZhuSpTGB1Ng9u3FtT5s
cSy7r/Y/f1ygxuyH3E6Bisg0mYt3OHme1nuxQns4zxllHCJ8edntLWGlzN5JGRPg
C8SJVUMtEJ/EtKDgQzJMX1LIc1NqvJx4dF8vPh+0Sixx/Cf96LZEEP9HU1kJbWhF
5f4rbCEczpcbmHIv5Fdjpj/yZU67fDlX/L5/e0PzHbBsGykVEv/WT9F9VKeZvopg
j3pX1BfrNpyh7g968rQ40HVCrSkvYKyOci1+Gn5G8dbvUUkwBcST4BbT0/yINagx
piRM3N5T+iQ15g==
-----END CERTIFICATE-----
Generated at Fri Sep 25 05:48:29 2026 by rpki-client