Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: Z4vz4SWJMA4lDYvVGokqen5H4AfuXFWTfvR0vcdKoyQ=
Subject key identifier: C2:14:02:4B:5C:4E:48:18:47:25:36:1B:40:6F:3F:60:B4:9B:6D:6F
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 01A0CD1170AF56FFE3D9284E5DF8FFD6D743
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 1122
Signing time: Wed 23 Sep 2026 07:01:07 +0000
Manifest this update: Wed 23 Sep 2026 07:01:07 +0000
Manifest next update: Thu 24 Sep 2026 07:01:07 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: f+3kq4+O3KzS83A/PhT0NyzCt5rwimXvCd8Z3pUVT0E=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:11:70:af:56:ff:e3:d9:28:4e:5d:f8:ff:d6:d7:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Sep 23 07:01:07 2026 GMT
Not After : Sep 24 07:01:07 2026 GMT
Subject: CN=c214024b5c4e48184725361b406f3f60b49b6d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:07:0e:cb:41:3a:52:32:f5:63:f2:69:7a:25:
78:f7:da:84:21:eb:c6:42:fe:c9:50:39:f1:30:9a:
e8:3e:f2:2a:9c:38:9f:92:d8:b9:10:d5:b3:6b:59:
1a:aa:d0:b7:24:ef:7f:e4:9b:eb:dd:63:06:7b:b8:
a7:e9:96:2d:9b:05:ef:ca:88:23:62:d8:15:da:d1:
d1:3a:95:0c:3b:b9:d1:11:c4:61:5e:ac:e2:c4:4e:
15:6b:2c:87:6a:4b:92:ad:48:d2:bc:8b:67:22:a6:
d8:11:7d:7b:27:b1:a6:2d:4d:28:da:f3:57:f4:08:
46:6a:99:de:22:b4:02:e4:9e:9d:0f:82:33:ed:f5:
4b:b3:e8:2e:c4:5d:4b:e7:97:e2:35:61:df:45:65:
4d:56:12:0a:0e:ab:f4:f9:0e:92:b5:83:a2:01:50:
b2:66:3c:f3:cc:64:91:db:ce:c1:6e:9d:8e:e0:35:
a3:47:c9:42:58:65:1b:fe:0b:68:b8:b2:09:f3:0d:
eb:3d:10:fe:30:ee:43:ea:07:19:95:01:78:21:87:
43:4d:69:50:aa:b4:ea:63:79:d2:6b:1c:ae:de:6c:
55:82:8c:22:1a:88:b0:9d:33:3d:23:64:16:64:7b:
73:81:bf:89:08:7e:57:c2:21:65:86:67:3f:c2:40:
24:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:14:02:4B:5C:4E:48:18:47:25:36:1B:40:6F:3F:60:B4:9B:6D:6F
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:20:c4:49:6b:2b:c0:7f:a7:27:2e:31:ff:0c:fa:53:e6:80:
a6:eb:f5:be:6b:66:fa:e0:f4:71:d1:be:f3:64:c4:ca:1f:ce:
e6:c7:04:3a:8d:0a:98:21:cd:f5:1a:cb:8a:e7:83:90:c4:c6:
87:50:84:3e:f7:c2:6d:56:7c:e5:96:9e:97:89:be:a7:8a:95:
eb:0b:32:9d:be:76:ec:f9:b0:b3:be:a4:8d:81:29:6e:cc:27:
6b:a2:50:ce:40:96:8b:51:ee:90:0a:40:eb:67:19:12:6b:1a:
2c:76:5c:e0:ac:71:4d:a3:92:fc:70:45:31:52:26:e9:42:4c:
4a:3c:46:07:b2:36:7f:16:d4:9b:85:db:b5:51:66:93:21:61:
0e:7b:9a:1f:cf:5f:20:a9:4a:3c:90:cd:a9:97:1c:dc:59:b1:
a7:20:c7:00:d1:b9:c8:a0:be:68:78:c3:d6:10:21:f0:1b:16:
68:dd:7d:79:01:8e:c3:31:e9:d7:b4:ac:81:7f:91:4f:76:99:
e9:9e:84:66:ed:7b:e7:fa:25:1b:d5:86:a1:ef:e5:f8:68:b5:
1e:fa:7c:2d:da:f7:1d:3e:4b:21:0a:61:e6:03:18:ed:fa:d1:
d4:a7:6e:9e:cb:e0:cc:f1:d7:f9:80:a9:01:bd:3a:60:fb:6f:
e2:e0:84:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:59:07 2026 by rpki-client