Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
File: 4chbPfGRu7SHTyElY_U2-CPqQzI.mft (raw, json)
Hash identifier: kJPE1aDwFUULBAwvJphyS0JQd/C5aFVT/4KM9syqDqM=
Subject key identifier: 92:28:14:6A:AC:38:A7:8B:9A:3D:60:C4:DF:5C:59:9B:F0:19:02:A9
Authority key identifier: E1:C8:5B:3D:F1:91:BB:B4:87:4F:21:25:63:F5:36:F8:23:EA:43:32
Certificate issuer: /CN=e1c85b3df191bbb4874f212563f536f823ea4332
Certificate serial: 01A1D07E97920C1C59D3E8386E8957D4F1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
Manifest number: 025E
Signing time: Thu 12 Nov 2026 16:01:59 +0000
Manifest this update: Thu 12 Nov 2026 16:01:59 +0000
Manifest next update: Fri 13 Nov 2026 16:01:59 +0000
Files and hashes: 1: 4chbPfGRu7SHTyElY_U2-CPqQzI.crl (hash: LivSJdh9RE+0QvrxqIb6WYyk2Bxsle1NTrFWu3OQJOQ=)
2: HGJATmPx_lb-up56PA9sws4LXzM.roa (hash: rP4ippAFPKo3N/gSznr5pBHOOcDkPGB3VJz0DMBiGGk=)
3: ZKlPGz4kI_uOgsyApeExYa33cEk.asa (hash: gHtpE0/vy2kYs9vRGqmcozAsLFQTnGOPyUQhZ0q23wc=)
4: vR8-TTbXfVDHZdgSnOr8TDlwnBk.roa (hash: jMzlWmBuharjGRH2L1aGRJN/4ce3UkOwdCSnIziX6x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 15:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d0:7e:97:92:0c:1c:59:d3:e8:38:6e:89:57:d4:f1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c85b3df191bbb4874f212563f536f823ea4332
Validity
Not Before: Nov 12 16:01:59 2026 GMT
Not After : Nov 13 16:01:59 2026 GMT
Subject: CN=9228146aac38a78b9a3d60c4df5c599bf01902a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f9:ca:2a:d7:5b:5a:58:66:a7:3b:00:f1:6b:
1a:f6:cb:48:85:e8:71:cc:48:f2:8a:35:37:69:06:
0b:bd:c6:ad:ed:49:bc:64:1a:e7:54:8a:e9:a3:8c:
11:2b:f4:8e:6f:1d:d3:5b:c4:45:c8:cf:4f:92:2c:
44:ad:89:47:1f:d2:89:f4:20:ed:ba:22:64:23:51:
46:bd:97:fb:88:41:6c:94:a2:d0:aa:63:50:50:86:
37:52:a4:92:15:f4:0c:f4:08:cd:b2:8f:2f:4c:2b:
9b:ca:d6:2e:62:93:ca:2c:e7:bd:6e:7c:64:c1:90:
b1:9f:fc:b5:04:b4:ad:96:33:8a:04:c8:7b:dc:b2:
99:92:d4:bb:1c:eb:42:2d:c0:87:aa:ab:f9:47:1a:
51:d6:fd:96:b1:7f:bb:62:ad:ad:01:b6:48:f4:2c:
35:28:67:6c:06:0a:56:7c:68:11:56:cf:d0:c4:65:
de:bc:0a:fb:05:40:41:b8:70:43:55:a6:12:ef:28:
53:1f:21:76:7f:c0:06:fa:76:29:31:e0:ea:cd:19:
07:80:0a:5b:4e:17:b7:f7:2d:fc:8b:12:24:d7:17:
c5:29:69:9c:a4:bd:ee:3e:e9:a3:97:93:86:9a:77:
82:fc:66:ba:72:18:81:e5:ba:25:97:1d:52:57:7c:
53:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:28:14:6A:AC:38:A7:8B:9A:3D:60:C4:DF:5C:59:9B:F0:19:02:A9
X509v3 Authority Key Identifier:
keyid:E1:C8:5B:3D:F1:91:BB:B4:87:4F:21:25:63:F5:36:F8:23:EA:43:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4chbPfGRu7SHTyElY_U2-CPqQzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fa8c59-daf6-4e6a-b366-e546c2a1d229/1/4chbPfGRu7SHTyElY_U2-CPqQzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:0c:bf:4f:87:9d:4d:71:aa:49:03:3f:4d:ab:f2:2b:a3:af:
f0:a8:68:15:81:97:b9:e7:e8:86:8c:03:b2:45:8f:48:34:f0:
fd:6d:e8:11:b0:61:74:67:6a:4c:c6:17:fb:09:03:59:e7:bb:
e7:a1:76:d6:04:29:fd:9a:24:7e:f5:60:6c:2c:10:52:05:db:
0f:e7:80:ca:bc:54:35:30:1d:e6:53:1a:a0:dd:36:29:bc:a0:
ab:68:f5:4c:7e:e9:32:df:a5:d1:36:67:53:9e:44:f2:14:44:
45:84:27:86:be:83:24:25:bc:20:c0:e0:44:7d:f3:ce:8d:67:
9e:5c:72:cc:3a:5f:b4:0d:fe:8d:5a:08:4e:26:17:e8:38:da:
23:bf:ad:a3:5e:57:5c:fd:60:c1:b4:97:dd:7e:e8:34:8b:10:
82:d4:24:ec:bf:aa:30:e2:54:eb:b3:af:65:79:9c:7f:27:df:
99:ae:98:49:18:76:0d:af:d8:67:24:47:4a:62:c7:3b:06:5a:
af:0d:95:5a:ce:19:1a:12:c9:ba:f7:bf:bb:e6:ef:f6:33:ca:
e7:0d:18:fa:a8:e3:d7:36:5d:aa:c5:fe:39:25:04:e0:e8:ee:
7e:58:da:f9:96:6a:53:76:6b:39:06:76:1c:ae:4e:e5:fc:5e:
8f:16:0b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 19:49:42 2026 by rpki-client