Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft
File: 0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft (raw, json)
Hash identifier: PitHNUHqEouDFfoPqL0qQLRvvPHupevMMJn4J9gVmX0=
Subject key identifier: 80:CD:F1:52:93:3F:24:18:15:DF:E8:3A:D4:1B:9E:92:E5:BD:49:6A
Authority key identifier: D3:16:B9:21:90:7D:88:45:A5:0C:71:21:0E:A3:94:08:10:F7:74:18
Certificate issuer: /CN=d316b921907d8845a50c71210ea3940810f77418
Certificate serial: 01A0CE23E914B9C558E1F7D13EFA8D2A22C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xa5IZB9iEWlDHEhDqOUCBD3dBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft
Manifest number: E4
Signing time: Wed 23 Sep 2026 12:00:54 +0000
Manifest this update: Wed 23 Sep 2026 12:00:54 +0000
Manifest next update: Thu 24 Sep 2026 12:00:54 +0000
Files and hashes: 1: 06qsiTs00oCJ2kROd3qD36mUxjE.roa (hash: z4BUL/0kp3HzAZA+43CMRJbHV1qXo2AEN+PYpjUwUcU=)
2: 0xa5IZB9iEWlDHEhDqOUCBD3dBg.crl (hash: BMLmekUqfdMOs19wGSz0tbdtfWbrRBJf5jSTF5o5mzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xa5IZB9iEWlDHEhDqOUCBD3dBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:23:e9:14:b9:c5:58:e1:f7:d1:3e:fa:8d:2a:22:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d316b921907d8845a50c71210ea3940810f77418
Validity
Not Before: Sep 23 12:00:54 2026 GMT
Not After : Sep 24 12:00:54 2026 GMT
Subject: CN=80cdf152933f241815dfe83ad41b9e92e5bd496a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:3e:9e:86:19:a9:99:4c:09:ae:44:60:80:
9c:a1:fb:5f:d0:69:82:62:ac:07:fe:57:ea:7c:78:
18:c6:aa:c0:cf:c7:f1:6c:8e:57:73:23:a6:79:09:
be:54:93:29:63:eb:0c:c9:f5:10:4b:7c:bc:3c:01:
1a:3a:3c:5a:81:41:f4:d3:7b:57:92:52:60:03:ad:
80:42:b1:14:cf:c7:b0:1d:1f:54:ad:08:bd:b6:c4:
67:c6:a7:ca:03:8a:c9:1f:af:0a:13:0c:79:1b:b2:
33:5c:e5:e5:78:b6:7f:3a:fa:4c:34:26:54:09:69:
a2:b4:11:01:1c:fe:60:27:2a:bc:33:dd:bb:ac:82:
a9:f2:16:3c:f4:ab:eb:62:4b:b5:01:28:a3:76:89:
91:9a:28:26:37:91:51:bf:9a:f9:3d:47:c1:70:7c:
36:4b:b3:2c:2a:dd:1e:1d:57:60:b5:55:c0:eb:fc:
61:d2:58:6f:76:cc:a9:94:53:e8:4e:75:8c:31:c3:
a1:9c:52:ca:dd:cb:bc:67:3b:04:ad:47:64:5c:57:
26:21:3e:a3:8c:66:b8:c6:96:b5:06:e1:34:3f:97:
7b:34:33:04:34:4d:80:a1:b7:88:cd:34:9d:17:6e:
f4:4b:4a:e5:6c:a9:3c:09:2b:0e:35:a7:a5:cc:95:
a7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CD:F1:52:93:3F:24:18:15:DF:E8:3A:D4:1B:9E:92:E5:BD:49:6A
X509v3 Authority Key Identifier:
keyid:D3:16:B9:21:90:7D:88:45:A5:0C:71:21:0E:A3:94:08:10:F7:74:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xa5IZB9iEWlDHEhDqOUCBD3dBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/0xa5IZB9iEWlDHEhDqOUCBD3dBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:35:ce:dc:46:1a:b5:c8:2d:23:7e:5e:f6:84:6a:d8:f9:cf:
9b:7e:fd:b6:95:eb:7d:97:49:b1:5b:4e:f6:e4:f3:54:43:bf:
3a:f4:3c:83:04:1c:20:a2:66:e6:a5:ae:51:36:8f:02:de:0b:
26:87:8f:cd:bf:13:90:66:0d:21:41:9b:93:20:f1:48:a7:8f:
27:64:f2:3b:98:9c:10:ac:f6:58:bd:ff:d0:49:64:87:59:3a:
a2:69:45:15:65:06:b0:90:47:bd:71:fc:ca:5f:48:c5:01:e2:
e2:1d:8c:23:73:bc:ab:9b:3e:86:75:4a:14:51:b8:66:36:31:
a6:4d:02:8d:bb:81:4d:80:77:54:13:5c:18:8d:bb:32:1e:71:
8c:03:d7:d7:ba:11:61:43:23:c9:80:b3:ea:0b:d8:4f:38:38:
99:dd:a7:d4:63:b0:32:f1:31:9c:2a:4a:85:ad:e2:47:01:1c:
9a:42:8f:24:f3:76:ae:43:58:2b:11:69:a1:aa:06:c6:dc:76:
ec:cb:0c:59:5f:75:d8:4f:5f:b3:ea:38:75:e6:9b:fe:db:9b:
f4:eb:8e:76:3c:d0:96:3f:50:b5:fc:12:02:e8:ec:f1:51:ae:
b1:6e:00:93:58:ad:00:16:b7:8c:dd:68:9b:16:be:b1:2b:38:
80:58:64:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:07:42 2026 by rpki-client