Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.mft
File: 4BiCRMvb9IR_QR3v-kCcodsYQbk.mft (raw, json)
Hash identifier: A0011NTqTC3Ay0APYqWL+XHa1JD5khF5R1EtVVxzbd0=
Subject key identifier: B8:86:36:1F:30:61:A3:41:89:03:7D:23:96:75:0F:68:AD:EA:33:59
Authority key identifier: E0:18:82:44:CB:DB:F4:84:7F:41:1D:EF:FA:40:9C:A1:DB:18:41:B9
Certificate issuer: /CN=e0188244cbdbf4847f411deffa409ca1db1841b9
Certificate serial: 01A0D4CBD65F419A116838E8359C21043C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BiCRMvb9IR_QR3v-kCcodsYQbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.mft
Manifest number: 4A
Signing time: Thu 24 Sep 2026 19:02:03 +0000
Manifest this update: Thu 24 Sep 2026 19:02:03 +0000
Manifest next update: Fri 25 Sep 2026 19:02:03 +0000
Files and hashes: 1: 4BiCRMvb9IR_QR3v-kCcodsYQbk.crl (hash: mnWban05Pqm//ExUf1zvJCLrhGw7nvSjiwIH8ApC+K8=)
2: AO8goRbzV7PBCtbzwtt1-y0Y_cE.asa (hash: dom8RHI6jzPo201yvdJYcI+G83hClL+fbPQN0nSSOgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BiCRMvb9IR_QR3v-kCcodsYQbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:d6:5f:41:9a:11:68:38:e8:35:9c:21:04:3c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0188244cbdbf4847f411deffa409ca1db1841b9
Validity
Not Before: Sep 24 19:02:03 2026 GMT
Not After : Sep 25 19:02:03 2026 GMT
Subject: CN=b886361f3061a34189037d2396750f68adea3359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:a6:c6:51:69:94:1b:db:66:3f:f6:9d:d2:
4f:01:10:96:b2:67:6c:3d:43:e5:c2:d7:70:80:5c:
23:53:92:42:d0:90:a0:7a:5f:bf:8a:dc:64:e5:21:
85:0e:a8:36:dd:e7:b9:3c:7a:1a:2d:8e:29:4a:8c:
68:30:d0:2b:7c:54:26:f7:a1:be:04:db:52:c8:37:
6b:3e:1e:f3:ba:9f:1d:d5:44:33:ee:4f:ea:99:67:
89:cb:e0:0c:35:0c:6b:b8:21:3b:95:67:22:02:2c:
8a:35:e4:d8:d6:ca:e8:c6:b8:aa:b3:6e:ff:99:f2:
b4:45:04:3f:f3:44:50:13:8e:b3:8e:22:22:dc:3f:
69:e6:8d:1f:23:35:96:e8:32:51:e9:6c:99:39:33:
38:da:d4:10:98:cd:54:4f:7e:b1:78:f5:02:f0:47:
45:58:f1:3c:cd:1e:eb:6c:87:30:db:5b:34:8d:39:
01:aa:84:22:01:84:9a:2b:8e:76:64:8e:03:3e:6c:
15:11:b2:99:53:0e:69:22:1d:dc:8e:d5:3d:e8:67:
3a:74:1c:8a:57:37:f8:3e:27:76:dd:f5:99:88:32:
0a:07:80:56:53:73:98:50:7a:4c:b9:57:83:29:0f:
50:fa:73:cf:10:10:23:07:63:ec:49:94:72:1d:32:
7d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:86:36:1F:30:61:A3:41:89:03:7D:23:96:75:0F:68:AD:EA:33:59
X509v3 Authority Key Identifier:
keyid:E0:18:82:44:CB:DB:F4:84:7F:41:1D:EF:FA:40:9C:A1:DB:18:41:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BiCRMvb9IR_QR3v-kCcodsYQbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/067e7e-9337-4275-938c-3423cacefc93/1/4BiCRMvb9IR_QR3v-kCcodsYQbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:25:7d:9c:b0:00:83:ff:f5:c6:a2:48:ee:53:b1:32:c9:1d:
88:5b:25:42:e0:eb:9c:7f:8b:f4:55:a6:f5:1b:7e:78:4b:76:
4b:43:9a:0a:a2:d9:06:34:4f:cc:3f:54:65:7f:8f:e7:42:3a:
12:e4:10:8d:b8:74:68:66:f9:11:8f:54:ac:83:55:09:d0:cb:
6b:dc:b3:94:46:7b:69:9c:97:9a:b1:be:03:03:ab:50:cc:fe:
53:88:ca:8d:37:0d:7e:3b:36:2d:04:6e:57:e7:e7:69:36:73:
53:c5:a4:7c:e5:a5:7e:20:27:dd:d4:66:65:0e:99:d5:dc:ad:
cb:c4:39:17:83:3b:b6:31:30:0b:43:bc:da:53:75:1d:8e:1e:
d5:a5:e8:56:c6:75:6e:30:f3:ba:f0:5e:37:cc:b1:5e:be:0b:
02:2a:a9:64:27:6a:a5:36:4f:0b:fb:27:5a:8a:83:4b:82:0b:
98:dc:e1:b5:dc:82:b9:34:e0:d8:71:d2:38:0a:cf:a1:ba:a5:
17:45:cd:c5:6c:24:93:59:ea:9f:8c:9f:4a:df:80:69:48:67:
35:6b:5f:35:b9:70:62:5f:d5:58:08:c9:08:72:15:b3:ee:1f:
7c:5b:ec:e2:05:c6:29:7b:aa:c4:89:ae:db:3a:42:25:02:05:
8a:ce:87:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:43:10 2026 by rpki-client