Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier: Mj2bO4r6RGaIteIqIusCtf61D1tcZmzgMD9VcGQ7diU=
Subject key identifier: 24:5A:E3:00:81:B2:30:E6:16:FD:6D:B9:89:21:80:D4:50:0C:10:53
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 01A0CD7EC55A2AA46039DDF6C7900BDA59A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number: 16A3
Signing time: Wed 23 Sep 2026 09:00:32 +0000
Manifest this update: Wed 23 Sep 2026 09:00:32 +0000
Manifest next update: Thu 24 Sep 2026 09:00:32 +0000
Files and hashes: 1: 3Kqw9tljPQG5d-js0HaYveBuk-4.roa (hash: D1nlz+BjAzn+Pt0loadLXbRjBXPaaFlVhaNwxEkZAGY=)
2: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: vs2std2kUq5/V+iMg3DXQVqeyaT74heCwE+tc5yEeHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 09:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:7e:c5:5a:2a:a4:60:39:dd:f6:c7:90:0b:da:59:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: Sep 23 09:00:32 2026 GMT
Not After : Sep 24 09:00:32 2026 GMT
Subject: CN=245ae30081b230e616fd6db9892180d4500c1053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:dc:fa:98:85:ca:e4:de:45:e8:49:93:c3:63:
1e:a8:6e:51:a6:7f:9b:d4:fa:a4:c2:42:99:d8:56:
9b:58:92:01:5c:2d:81:90:a5:38:d0:6c:4d:83:87:
e1:c0:82:3b:2a:30:93:d3:d1:77:72:99:2e:a3:28:
31:92:a3:7b:d6:1d:4d:52:2a:f0:42:99:48:7a:64:
33:4a:ca:53:5f:2a:c8:37:2f:42:e7:9b:d3:f4:70:
b9:80:ae:8c:96:c5:d5:76:2b:7d:2c:37:90:31:4d:
c6:27:b2:4e:4a:f9:4e:fb:ee:24:31:f2:30:fb:90:
35:fb:ee:7a:2e:6e:0e:a9:16:9c:66:a2:0f:47:e0:
a7:08:2c:e2:5c:06:00:f7:b9:9f:f1:e4:6f:60:a8:
f5:cc:5d:1c:34:7b:f0:6f:c2:59:5c:f3:4b:12:37:
8a:f0:f0:02:32:71:b6:21:3a:d3:85:7e:35:e7:7e:
72:11:48:21:a7:60:fc:5b:e7:33:b4:b2:d0:b2:d4:
33:e7:5f:76:80:91:4f:18:52:66:f6:9f:85:81:29:
1c:86:0c:a0:05:e2:3a:80:4b:86:78:a1:67:10:a1:
74:5d:15:08:09:de:a4:bc:fa:cf:52:91:63:9a:da:
e8:f0:1f:e0:1f:23:b8:be:6d:a8:06:86:a0:f6:b3:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5A:E3:00:81:B2:30:E6:16:FD:6D:B9:89:21:80:D4:50:0C:10:53
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:58:01:81:75:83:0f:4b:8c:a4:46:1c:67:0b:67:e2:27:a6:
99:6f:b5:e5:a0:a4:34:22:8c:85:6c:24:87:15:3a:2d:83:7a:
61:29:0e:e7:73:bd:57:50:2b:ad:14:9a:60:7a:bc:ea:50:c9:
f1:dc:ef:6f:12:29:b9:51:3f:fb:da:98:f7:12:16:7f:48:b1:
bf:f4:ea:be:2a:11:73:0a:4f:fd:ba:8e:4a:67:d9:27:15:6c:
31:f9:5d:6d:19:7e:f8:27:c5:8b:c0:7a:42:73:c7:94:80:34:
11:77:9f:e0:b3:57:14:39:6a:5e:af:99:f0:a8:95:31:a2:72:
ad:26:46:90:9b:cb:0a:05:7c:a5:ef:94:c5:bc:ce:72:17:6e:
0b:7d:eb:1c:c9:cf:66:0f:7b:6d:99:ab:64:30:75:98:ed:39:
77:23:8f:02:74:e6:48:12:89:6b:10:63:32:73:0c:0e:27:b0:
6a:40:10:56:df:39:cd:27:01:59:0a:6b:fc:10:1f:b8:38:dc:
b4:c7:e7:2c:6f:de:99:20:8e:2f:2d:0b:03:e6:71:e8:cb:a5:
ba:15:dc:20:19:ff:2a:46:7a:8c:10:86:16:82:14:ba:ea:b1:
cc:70:3c:37:27:28:80:2f:00:e0:2d:bc:71:64:b6:9f:03:64:
00:5d:e2:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:49:59 2026 by rpki-client