Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
File: 4Fx81akbRFhmDQcOBHf75pXBKws.mft (raw, json)
Hash identifier: GJxzuESDj7Dmn3Z7MA66Phy6h2ozOKBHharfpZ5CNDU=
Subject key identifier: D0:BB:26:35:FB:D5:CC:A1:B8:DD:7A:6C:97:78:42:FB:AA:24:21:83
Authority key identifier: E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
Certificate issuer: /CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Certificate serial: 01A0D45D44D5B27418521A66394721CA5DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
Manifest number: 10EC
Signing time: Thu 24 Sep 2026 17:01:17 +0000
Manifest this update: Thu 24 Sep 2026 17:01:17 +0000
Manifest next update: Fri 25 Sep 2026 17:01:17 +0000
Files and hashes: 1: 4Fx81akbRFhmDQcOBHf75pXBKws.crl (hash: vEZhx+P1SFQG3dUHP+8LojT23HZJRAccYz7nuFef6lg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:44:d5:b2:74:18:52:1a:66:39:47:21:ca:5d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Validity
Not Before: Sep 24 17:01:17 2026 GMT
Not After : Sep 25 17:01:17 2026 GMT
Subject: CN=d0bb2635fbd5cca1b8dd7a6c977842fbaa242183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cf:10:36:f4:18:32:e9:27:13:42:02:36:4a:
9e:f3:5a:09:87:27:06:9e:6b:69:58:17:61:98:15:
f7:4a:94:49:01:3c:b8:76:88:86:ce:12:71:39:b8:
b5:bc:7e:87:0a:01:5d:6b:08:4e:26:51:8f:dc:c5:
c5:d6:1c:44:57:42:b4:44:96:b5:d9:02:9a:46:a1:
ad:cc:f3:db:8b:a5:a2:00:ba:0a:2e:76:e3:33:d5:
ff:97:5b:f0:35:f7:e2:ba:dd:68:9d:38:83:05:9a:
e3:57:9c:91:ec:c4:f0:12:7e:36:cd:36:18:eb:26:
54:12:35:78:11:26:e1:db:a3:f1:99:64:d8:5d:b3:
b9:81:cb:ba:6d:e2:7a:fd:5e:38:93:0c:7a:b4:06:
f6:ab:48:f4:5b:d1:06:ed:eb:c2:c5:ae:ae:01:27:
a4:be:a5:89:19:a6:fe:ce:7b:15:4b:a7:fb:1a:4d:
04:8a:0c:72:d9:64:89:60:d7:6e:19:6d:2f:3b:17:
77:7f:0c:5d:bf:44:5b:8c:58:66:86:33:02:ac:e0:
68:5b:0e:53:1e:50:f4:c1:e6:f6:36:e2:35:28:f3:
83:c8:5e:81:e4:69:c7:2e:f5:6f:e7:06:3f:f8:1c:
ac:e5:7a:8b:7b:f9:38:aa:04:02:d7:91:08:64:dd:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BB:26:35:FB:D5:CC:A1:B8:DD:7A:6C:97:78:42:FB:AA:24:21:83
X509v3 Authority Key Identifier:
keyid:E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e6:be:0c:16:c8:35:68:90:66:e6:c7:fd:00:dc:e4:6b:5e:
17:0d:94:0d:6b:72:c2:1c:8a:1b:36:31:9a:96:a3:b5:ce:b0:
23:c8:7f:36:e3:d3:c5:a2:fa:1b:25:da:87:17:e8:dc:b8:62:
bb:d8:7f:65:ae:2a:84:e1:e2:61:84:f0:01:8a:52:a1:b0:f9:
00:1b:ae:3d:4b:0e:3a:a5:79:45:52:9b:bb:ac:e3:55:61:bb:
e6:23:af:9b:51:96:31:71:35:57:cf:42:46:f8:64:52:ef:a4:
c5:ca:0c:26:dc:af:29:88:28:26:28:33:2d:27:53:27:9e:61:
ec:d2:fa:31:14:6b:5e:da:fd:e4:0c:6f:14:57:58:f7:51:3f:
1d:e2:a5:ab:aa:af:03:cf:c4:61:41:1d:35:c7:17:ad:5a:ca:
cf:0a:23:5e:84:ec:0a:3b:75:e6:84:0c:17:c3:3b:75:7c:53:
c1:62:33:2f:91:94:3b:78:6c:a0:f2:8d:12:34:fe:42:51:f9:
f7:68:4c:bf:bb:f0:12:8d:63:9f:5c:bc:cd:40:6d:f2:cf:11:
09:0d:35:db:9f:f0:52:ea:b0:28:89:ba:2a:f1:66:1b:61:86:
35:14:4c:f4:4c:bb:c2:75:c6:8a:34:db:4b:13:3d:5c:ac:27:
33:71:05:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:08:00 2026 by rpki-client