Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
File: 4bYF1mYOmDMcLiBJgPKldv30lhk.mft (raw, json)
Hash identifier: geRLH3SLy46IWOheLz5Su78BDDlUT0D2bmRP8YomGcU=
Subject key identifier: FA:0E:6D:D3:BC:DE:62:23:0C:BC:9A:C6:1F:C2:7F:23:E2:48:FC:26
Authority key identifier: E1:B6:05:D6:66:0E:98:33:1C:2E:20:49:80:F2:A5:76:FD:F4:96:19
Certificate issuer: /CN=e1b605d6660e98331c2e204980f2a576fdf49619
Certificate serial: 01A0D9BB2B895502C1D9F53D9A53F211D068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bYF1mYOmDMcLiBJgPKldv30lhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
Manifest number: 0211
Signing time: Fri 25 Sep 2026 18:01:57 +0000
Manifest this update: Fri 25 Sep 2026 18:01:57 +0000
Manifest next update: Sat 26 Sep 2026 18:01:57 +0000
Files and hashes: 1: 4bYF1mYOmDMcLiBJgPKldv30lhk.crl (hash: SsLzvH4ptUygPsH+BTUJ/+zhkNuN8clRs6WOWyNcxY8=)
2: 5kAvBd30hpJ31v7a5btR1f3C5_c.roa (hash: z1wDX3ExFB1UHqUZVdNED873b9M0TIqJFILLETY+deY=)
3: J4mXmms4TiP28PN9LBCVFRM01HA.roa (hash: VUMEpxKdTm7c58+fUJJlRr+8yRrKuCjq0GD1rQWYd3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bYF1mYOmDMcLiBJgPKldv30lhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:2b:89:55:02:c1:d9:f5:3d:9a:53:f2:11:d0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b605d6660e98331c2e204980f2a576fdf49619
Validity
Not Before: Sep 25 18:01:57 2026 GMT
Not After : Sep 26 18:01:57 2026 GMT
Subject: CN=fa0e6dd3bcde62230cbc9ac61fc27f23e248fc26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:87:ef:86:b1:85:de:70:3c:ca:3e:37:eb:
ee:0c:5a:30:c4:f1:71:68:ab:de:4e:ac:17:eb:d1:
b9:e4:dc:1d:d4:58:56:78:d6:07:b2:69:f4:0d:4b:
6d:bb:75:f8:8a:1c:0b:a3:f3:3c:d7:37:6e:65:fa:
60:88:f5:36:e4:cd:42:f5:c9:42:2f:4a:a9:e7:fd:
80:05:d5:c4:7b:be:ed:71:a7:d7:2c:38:cc:bb:1c:
a7:8f:79:02:c6:37:69:49:57:ad:4e:17:c3:b4:e2:
1c:eb:8e:f3:fb:90:57:51:47:e5:7d:83:46:1c:74:
6a:e3:8e:35:03:36:b9:12:0a:31:e2:a7:d1:70:24:
c5:0a:ef:67:a6:96:94:85:a3:ff:3e:93:a8:69:01:
ec:bc:4e:64:f0:fd:4a:98:0a:2a:e0:56:24:90:6e:
55:42:5c:c3:80:3c:91:35:00:35:d3:c4:fb:17:0f:
3b:c2:45:1e:bc:04:89:b4:51:10:77:90:57:c9:b0:
bc:3f:74:0b:bf:1f:ff:ff:fb:11:da:8b:44:8c:7b:
22:16:14:05:98:9d:91:d6:b6:8e:0c:b7:31:7d:3b:
34:97:7c:53:37:13:cf:0d:4e:58:01:dc:ec:69:67:
dc:ef:3b:bb:73:a1:04:00:d6:4b:8e:f6:d5:84:2d:
04:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0E:6D:D3:BC:DE:62:23:0C:BC:9A:C6:1F:C2:7F:23:E2:48:FC:26
X509v3 Authority Key Identifier:
keyid:E1:B6:05:D6:66:0E:98:33:1C:2E:20:49:80:F2:A5:76:FD:F4:96:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bYF1mYOmDMcLiBJgPKldv30lhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ad:a4:ea:ef:83:76:34:6a:3d:67:8f:70:81:2a:e8:52:86:
2a:89:99:be:67:71:a1:da:a3:ad:4b:43:f9:42:75:85:fd:2a:
1d:e0:f9:ce:67:39:14:12:16:ee:38:1e:b4:db:b3:66:c4:74:
29:4a:bd:e9:fa:89:f8:e9:9b:62:96:eb:f9:62:f9:ab:c4:16:
cd:23:9a:b7:b1:f6:90:7c:9e:5d:b4:a5:d5:fc:d6:37:60:07:
6a:0f:47:8f:b4:bf:12:67:3a:a4:76:ce:dd:20:24:57:f7:d3:
21:65:9f:d1:d1:27:33:a1:c5:18:fc:14:42:8e:b6:17:67:ff:
31:12:a1:cd:e2:c5:28:ae:79:b9:42:ab:a2:42:94:4b:97:87:
af:a7:0a:f9:15:66:24:0b:26:f7:79:96:af:81:42:d5:1e:74:
e3:1f:3f:ca:3c:bf:8d:ce:f7:e9:6c:2e:61:0b:0c:2a:f1:e6:
1a:af:09:87:41:55:d6:e1:77:1f:6c:6b:4c:1c:d7:68:1a:0a:
38:f1:e8:48:2d:f1:01:96:dc:ce:12:58:91:ba:e5:f0:c1:5b:
d4:f0:0a:bc:de:c2:6d:cb:99:0c:4e:ff:71:a6:d6:2f:42:99:
61:2c:98:f0:9c:b6:07:78:3f:a5:04:16:67:c6:96:91:3f:06:
9e:2f:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 01:58:56 2026 by rpki-client