Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
File: 4IEr3duyOb5jncddzS4pbE_PSpc.mft (raw, json)
Hash identifier: 2YlkRnzzGtXCaumMWJctf7kSYN2B8KcSooi1PPTJojU=
Subject key identifier: A2:7E:C2:E9:99:56:7C:F8:94:FB:CC:C1:6D:95:B8:67:1B:7F:FC:F9
Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Certificate serial: 01A0CCD9BFA48158A3E47DFAE4955B295EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
Manifest number: 16F1
Signing time: Wed 23 Sep 2026 06:00:17 +0000
Manifest this update: Wed 23 Sep 2026 06:00:17 +0000
Manifest next update: Thu 24 Sep 2026 06:00:17 +0000
Files and hashes: 1: 4IEr3duyOb5jncddzS4pbE_PSpc.crl (hash: KM51g0g2QZTZxBICbzcHff4J9tlPIeSCFqEXiIhUODU=)
2: aVmzMHPlxeyetIkGiXHw6OpjmXo.roa (hash: YrHKrHLca2iabjabrN2u5KCH0KbS3RXiM9KfCPPF7x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:d9:bf:a4:81:58:a3:e4:7d:fa:e4:95:5b:29:5e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Validity
Not Before: Sep 23 06:00:17 2026 GMT
Not After : Sep 24 06:00:17 2026 GMT
Subject: CN=a27ec2e999567cf894fbccc16d95b8671b7ffcf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:76:52:b7:32:1d:d2:52:3e:9c:cb:57:4f:59:
9f:04:63:87:79:1d:3c:71:43:0f:e0:45:17:74:ac:
a8:34:e9:c3:29:fe:79:2c:69:40:bd:96:49:23:d5:
3c:71:a5:c2:09:cd:c2:1d:cf:83:14:89:fb:ec:6e:
4e:eb:d8:36:ea:39:26:26:d5:93:fc:f4:3a:e2:25:
e1:79:21:56:7f:90:c9:86:7c:18:1c:88:f2:bb:b6:
b5:2a:1a:ef:21:10:8d:a1:25:cc:32:4b:1d:58:98:
87:44:56:9c:78:42:97:20:55:59:5b:1f:ec:23:ab:
52:83:4d:1a:f5:c5:84:12:b4:ec:89:19:c9:4f:1e:
a0:7c:32:a7:90:08:c6:8f:17:2a:de:4e:74:3f:40:
2c:8a:74:1a:e5:b0:1a:23:ab:ea:af:19:70:75:68:
67:67:52:f6:db:b2:17:a8:b4:d7:97:fb:a5:00:9b:
25:5a:dc:41:a7:b8:44:d5:6e:5c:e8:57:dc:62:19:
a2:de:55:65:6b:34:3f:f6:39:87:2e:34:22:0a:a1:
58:a3:f7:06:b5:26:03:6c:5d:19:06:61:d2:72:5f:
d1:b1:dd:68:9c:78:ca:a6:32:7d:94:01:26:d1:64:
0b:ec:f5:1c:02:32:23:d5:24:a3:27:21:cc:75:9c:
3f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7E:C2:E9:99:56:7C:F8:94:FB:CC:C1:6D:95:B8:67:1B:7F:FC:F9
X509v3 Authority Key Identifier:
keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:4a:5b:0f:b7:54:88:d8:fc:be:57:e1:31:98:e0:d0:36:33:
74:65:bd:0e:b2:ed:ef:b8:e1:0d:ce:54:a8:3d:95:34:3a:ef:
39:59:67:c6:9b:9c:c2:9a:55:81:27:f9:72:03:90:63:6d:c6:
01:f9:1c:21:c8:dc:a7:66:5e:a5:cb:1f:57:fb:2e:fd:6b:ef:
87:b7:71:c1:e6:f5:4c:46:c7:e9:e3:97:c4:bd:68:8d:c0:4d:
63:e5:8f:33:9e:5e:f0:fc:e8:79:e9:fd:c4:76:d8:c2:9a:b8:
c5:16:33:a6:6d:fc:e2:38:09:06:19:a0:14:2a:96:c9:86:fd:
39:af:36:a5:3b:13:96:de:d3:1e:ad:4d:97:71:1b:e0:25:74:
8e:ad:98:93:8f:17:a5:41:23:26:ca:cd:3c:61:94:e7:ee:90:
7c:cd:0c:ca:d6:b7:37:d8:60:a0:cc:06:f8:96:28:04:26:00:
e2:49:51:a9:14:18:2f:8a:ad:55:38:fd:fc:c4:70:ea:07:50:
8a:ff:f6:ad:21:d7:1b:85:7a:75:44:ce:e3:75:c9:e8:2d:ed:
09:a3:e9:0a:6f:7a:d5:7a:7a:b6:91:1d:b4:aa:07:26:80:16:
a1:98:b8:a2:01:a6:26:81:17:5b:7e:26:4b:fd:dd:26:69:e8:
60:e4:3c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:12:57 2026 by rpki-client