Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: 2fxw3IiwJjgoa8OGsc2FfSW7ElbbCgdMZuH17gTLxSQ=
Subject key identifier: 96:33:A0:31:66:F6:A7:41:21:48:E6:12:60:09:ED:99:6E:34:FC:61
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 01A0CB907C94CDE12EA358834FA23482D3E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0E95
Signing time: Wed 23 Sep 2026 00:00:38 +0000
Manifest this update: Wed 23 Sep 2026 00:00:38 +0000
Manifest next update: Thu 24 Sep 2026 00:00:38 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: SjUJ8AHN9UYhcukqSN0/vNHfKeQ9dmq1i2QmoaT+/KQ=)
2: 6c0GmPSIo0E5XPLL6BcvGXFoeoU.roa (hash: XKGNTxIctVAHlMjqMo1n+V2kjvQsJG2Ze8aGQf0oQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:90:7c:94:cd:e1:2e:a3:58:83:4f:a2:34:82:d3:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Sep 23 00:00:38 2026 GMT
Not After : Sep 24 00:00:38 2026 GMT
Subject: CN=9633a03166f6a7412148e6126009ed996e34fc61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:26:cd:79:e7:0f:00:fd:40:91:5a:21:e8:
a3:e4:14:b2:cf:c6:a0:2a:d5:4e:30:7f:18:db:65:
30:91:52:d3:16:5d:29:02:8a:3f:e6:04:f6:76:ed:
7b:fc:a8:e5:8c:d0:3c:f3:bc:77:70:12:71:a0:a3:
96:82:36:b5:d0:09:49:2a:fe:61:9e:7b:9b:b6:b6:
1c:1e:b4:36:2b:17:59:61:e5:24:3e:ec:24:3d:87:
2b:45:6e:eb:f1:ab:8f:d3:a4:78:ba:d3:56:fb:22:
2a:b0:8f:04:64:88:07:cd:53:63:f9:ae:c1:a9:43:
9f:71:2a:d0:46:85:aa:ba:9f:95:8a:0f:c0:88:11:
c0:df:42:1c:58:13:89:6c:3d:ff:75:95:ff:cd:4c:
b8:2d:af:3a:12:fe:6f:b2:dc:d9:65:db:01:37:63:
a7:ac:3f:41:56:69:e5:f4:54:07:c9:84:5e:dd:b2:
47:29:e0:0b:15:1a:ba:aa:ce:1d:aa:17:7f:a6:18:
5c:f1:5c:68:9e:f7:2e:fb:f5:74:5e:16:58:9b:1b:
65:3e:15:5e:c7:5e:d7:be:87:58:cf:74:53:f2:d8:
40:ba:02:3e:2c:57:73:d5:56:ca:cd:8d:3d:01:48:
b5:27:bd:80:1d:32:14:08:22:c1:98:6f:e8:fd:e0:
5c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:33:A0:31:66:F6:A7:41:21:48:E6:12:60:09:ED:99:6E:34:FC:61
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ea:66:85:2a:4d:d4:3d:96:6d:a2:60:bf:00:07:85:a7:55:
d9:4a:96:78:8a:ba:51:32:cb:82:82:9a:6b:e6:77:5c:73:ea:
ff:19:86:35:94:95:8f:42:3c:8a:64:1a:f6:66:a6:2e:4a:94:
ce:b4:0c:1c:71:72:ff:8c:e1:d0:de:2e:94:b2:9b:06:8c:bd:
53:65:0c:b8:ec:5c:7e:7c:99:b1:f5:9e:d8:b7:dd:9c:dd:b9:
08:55:5f:ca:a2:0e:bb:11:65:61:54:f5:e1:42:35:0a:c4:a7:
36:90:79:58:87:89:2f:94:9a:42:c4:54:f2:15:0e:c0:5e:8e:
90:e9:e4:40:b8:5e:d8:1a:3c:2d:5f:8d:25:d8:04:84:23:57:
97:c8:ed:42:4e:8a:9c:6c:92:49:56:c4:24:7a:a1:b0:37:aa:
b4:1b:9e:63:92:a0:6c:56:bb:96:2c:e9:b3:b8:63:9b:68:44:
fd:b7:76:fd:41:ce:3d:79:ab:77:cb:04:99:f8:b6:6c:4f:1f:
28:a8:1f:5e:74:5e:6e:54:ab:51:f8:29:d2:d1:1b:3f:0a:54:
5e:c7:3f:79:6d:01:9d:bf:0d:2c:cf:db:8e:a7:39:d9:3c:b4:
e2:c6:39:16:d4:63:53:60:22:86:eb:e6:46:32:a7:c9:c7:b6:
c6:82:e8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:04:19 2026 by rpki-client