Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier: 0i3FItDfZSgb4HpqhJCXTYVgk6SNHtUT94cWy5Em8ok=
Subject key identifier: 25:01:9A:E2:66:56:59:EA:9A:06:DE:E1:D0:FA:E1:7A:DD:F6:7E:2D
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 01A0D20077272560CA0C700AA43BC4CB0963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 06:00:40 +0000
Manifest this update: Thu 24 Sep 2026 06:00:40 +0000
Manifest next update: Fri 25 Sep 2026 06:00:40 +0000
Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: n/StClItIZHpbxSCH7tKpBOXeVYcrIl9w4YYmc86vMI=)
2: azb1_WO3_kwPuSAgYoVTIRPk0go.roa (hash: 1/nAUytly79O0AERwCaGs88tFerHBFBw3HoH4Qov+gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:77:27:25:60:ca:0c:70:0a:a4:3b:c4:cb:09:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Sep 24 06:00:40 2026 GMT
Not After : Sep 25 06:00:40 2026 GMT
Subject: CN=25019ae2665659ea9a06dee1d0fae17addf67e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:eb:db:7e:0e:54:34:e5:1f:44:2d:1c:48:d2:
a3:6d:19:91:17:7c:fe:61:a9:26:6a:e2:85:e1:aa:
89:68:96:2a:12:3b:7b:0b:09:fc:aa:5e:75:b3:56:
8b:79:34:e3:e7:c4:54:6b:78:66:f3:de:3a:ab:e0:
bc:97:d9:6d:15:e0:53:79:3a:d4:a7:08:1d:07:07:
40:d2:7e:12:fd:dc:da:11:23:da:ca:c3:f6:6d:01:
f5:a9:71:f4:5a:cd:3b:4a:54:54:b3:99:38:15:5c:
d6:ea:a5:d3:a6:a8:b4:60:26:bf:e0:4b:84:db:3f:
d4:f1:83:6e:89:13:e6:d4:9a:cf:1d:ab:b3:35:fc:
29:1d:df:62:e1:a7:f4:ac:bb:52:9a:6e:df:1e:8b:
fd:20:62:f8:2e:6f:80:4a:3f:36:da:1b:d1:e1:95:
ea:3d:77:87:11:88:7b:ed:57:10:6e:6f:0a:3f:c8:
e5:f3:1b:21:fb:7b:69:a7:ea:ab:8b:cc:35:fb:c9:
91:49:f2:bb:fc:2d:8d:f1:ac:50:90:d8:4b:a2:d3:
1f:78:9a:4c:5c:be:46:2d:6c:5b:0e:33:8c:0f:4b:
d8:a0:fc:0e:74:51:45:35:21:b7:b0:ce:cf:46:fe:
54:10:e6:f8:c5:5c:9a:45:9a:dc:61:4f:64:8d:93:
78:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:9A:E2:66:56:59:EA:9A:06:DE:E1:D0:FA:E1:7A:DD:F6:7E:2D
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a6:f9:f6:39:c4:47:de:fb:da:4a:73:7f:c0:ca:d7:c8:33:
5a:c3:e4:fd:92:b0:e4:93:1c:41:08:c6:23:64:56:c1:00:4b:
4f:d0:a8:f6:47:92:2b:b3:59:94:fd:61:f1:8e:9f:67:14:1d:
02:27:be:b4:57:e9:6e:f3:bd:05:bf:6e:45:c7:36:2e:ba:6b:
bc:f5:e3:16:3b:41:35:67:d5:40:51:b1:b9:db:3a:b2:d4:eb:
a7:70:ee:b9:c9:d5:69:87:f2:58:dd:bd:07:dd:ca:46:d2:a4:
81:16:66:77:8f:4c:c8:d3:5b:64:13:05:c6:8f:db:60:41:4f:
45:91:e5:bf:04:35:6a:49:f2:5f:71:b1:31:44:d0:36:c2:62:
84:ef:b8:cf:4b:7c:36:55:7e:9e:5a:2d:b1:b8:65:98:09:90:
08:19:ec:cf:65:31:dd:f8:2f:34:24:4b:4d:06:a2:c3:44:80:
38:7e:3a:6a:2b:03:4e:7d:7e:f1:7a:92:24:4b:4d:9f:a8:63:
11:e2:ff:b8:e6:ae:36:ec:8b:b9:a2:1d:c5:e9:1d:2e:8b:88:
0c:94:75:35:80:8f:88:0b:4f:97:85:ef:95:e8:16:d7:9d:8f:
fe:cf:78:e2:f4:0c:cc:c1:20:7a:54:a3:d4:71:75:03:16:9a:
db:0e:b6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:03:02 2026 by rpki-client