Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
File: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft (raw, json)
Hash identifier: /RG5zT7k2Nv4kX6gUilc2a7u+2eLtBYx8QIbWb5CXuk=
Subject key identifier: C0:18:52:AA:5B:77:25:00:B5:40:05:59:E4:BF:CD:6E:24:41:31:8F
Authority key identifier: E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
Certificate issuer: /CN=e0d1a8366c21159f079478a9030843fbf60631b9
Certificate serial: 01A1DFBA41FDB3896B38B15FBCF797E1055E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
Manifest number: 1A8A
Signing time: Sun 15 Nov 2026 15:01:27 +0000
Manifest this update: Sun 15 Nov 2026 15:01:27 +0000
Manifest next update: Mon 16 Nov 2026 15:01:27 +0000
Files and hashes: 1: 2Yc5Pc_w4EBrqOMKmFKQLhTLkdw.roa (hash: xcDU75sza534zn4A1SLY0N4eKvAgRsSzSIlzRIhia7Y=)
2: 4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl (hash: lAjYRzcKno4U/ulsA8tU5hICv6NPhZahjMegnt4IUk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:41:fd:b3:89:6b:38:b1:5f:bc:f7:97:e1:05:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d1a8366c21159f079478a9030843fbf60631b9
Validity
Not Before: Nov 15 15:01:27 2026 GMT
Not After : Nov 16 15:01:27 2026 GMT
Subject: CN=c01852aa5b772500b5400559e4bfcd6e2441318f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:62:d3:fb:ee:8f:1c:a6:13:cc:95:6d:50:8c:
79:2d:ed:78:ba:1d:13:f0:c7:b1:27:12:55:ca:61:
66:74:54:d7:e9:3e:c8:d3:f7:34:18:a3:70:d8:6b:
99:24:24:7a:f8:f1:d3:d2:57:33:a5:b1:2a:47:5e:
32:fb:dc:25:fa:a1:37:ee:7a:f3:9a:7e:7a:c6:64:
62:30:2d:68:05:8b:ec:b9:fd:56:63:43:ab:64:12:
6d:b9:f9:9b:d2:c8:99:a9:00:d4:28:20:11:b6:98:
93:f5:da:09:13:1e:ee:95:cf:e4:e4:f1:13:7a:93:
47:9c:fe:77:0a:4b:33:f3:6c:69:20:19:b9:fe:79:
58:fa:25:2b:61:5e:2d:a1:db:2d:4e:b6:c7:88:39:
fa:b4:94:ac:0e:62:f4:93:bc:86:13:64:94:18:aa:
7f:34:1a:2b:ad:e1:ce:00:fe:f2:45:e5:38:22:64:
1b:1a:57:71:e0:a8:02:39:bb:00:21:e4:54:2d:b8:
ee:56:cb:f0:22:13:19:6b:e7:c2:d5:02:2d:66:3e:
d9:74:bc:8d:da:43:86:61:42:06:52:0a:ee:15:ba:
32:86:61:75:ad:7d:32:81:b1:03:2e:c5:79:00:79:
2e:b1:8e:ae:2c:21:8f:be:81:43:3d:4b:2a:87:c7:
92:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:18:52:AA:5B:77:25:00:B5:40:05:59:E4:BF:CD:6E:24:41:31:8F
X509v3 Authority Key Identifier:
keyid:E0:D1:A8:36:6C:21:15:9F:07:94:78:A9:03:08:43:FB:F6:06:31:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NGoNmwhFZ8HlHipAwhD-_YGMbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2de324-86c7-43d6-9df2-f8ae0dbc5df2/1/4NGoNmwhFZ8HlHipAwhD-_YGMbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:c9:04:41:c6:9b:ea:10:da:12:bc:43:c6:5a:0f:be:4e:c8:
bc:4b:dd:56:8d:41:b4:37:f6:f9:57:5c:ae:ec:7a:72:cd:01:
9a:11:68:81:fa:a8:e9:76:fc:1c:aa:ba:0d:bb:69:11:db:4c:
75:9d:13:ad:52:11:28:2c:a8:b2:f2:fd:43:3b:5f:3b:3d:89:
3d:a3:d9:87:5f:12:75:14:da:79:00:e8:45:23:3e:e7:d5:c3:
1c:a0:a1:29:41:a9:49:ea:da:6b:00:cd:ae:43:6a:3d:9b:9a:
b9:56:55:ce:3f:e4:dc:b7:cf:0c:d0:99:c0:34:d8:9e:c5:7f:
e2:10:e4:20:e4:98:5b:eb:eb:2f:71:6e:79:c3:2e:eb:80:7c:
b5:e6:08:a7:ed:86:86:cf:a7:7c:7e:a4:90:6a:e4:bc:31:b7:
80:85:fa:0b:19:57:89:55:38:3a:ec:d5:6e:90:16:b6:55:72:
f8:a9:ee:89:48:05:33:87:ee:69:91:5e:70:55:4c:10:b6:5b:
02:18:89:7f:24:f2:53:0e:65:2b:d2:ee:a8:f1:ae:06:02:24:
02:a8:35:d2:3b:fe:92:01:b5:60:1e:64:9d:74:ab:18:1b:14:
1e:72:c4:d3:95:9f:76:da:bf:8f:c7:25:42:9d:92:cd:d2:51:
92:e8:bc:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:10:20 2026 by rpki-client