Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
File: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft (raw, json)
Hash identifier: G4bPUY5j6nmkuDQjd1G8saihFQHjgAj6Gc7kfAS3Vuk=
Subject key identifier: B3:1B:30:B8:41:90:BA:0F:30:E9:2D:73:9D:C6:8E:63:5B:EF:82:63
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Certificate issuer: /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial: 01A0DACCECAAD00503F1522EC1D814F49A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
Manifest number: 0DB6
Signing time: Fri 25 Sep 2026 23:00:57 +0000
Manifest this update: Fri 25 Sep 2026 23:00:57 +0000
Manifest next update: Sat 26 Sep 2026 23:00:57 +0000
Files and hashes: 1: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl (hash: YV0ggGxpFAlNiLE5OQUu5MWBgOzww+8wdHVwFUyG4/M=)
2: F354eI049VK49q6Qgm7U8i60b2s.asa (hash: pA+2lvFRT5MH4svMFLwsCGwy8FSdH8pLNuayp6USO0E=)
3: WTnZHawCrFt92HJ5c52B4Lpjzyk.roa (hash: ULPffjH4r407eXPyl6PQZZu6OtSid0XwosfEwigrGuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:cc:ec:aa:d0:05:03:f1:52:2e:c1:d8:14:f4:9a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a323546484220cb402063380f4016369262acf
Validity
Not Before: Sep 25 23:00:57 2026 GMT
Not After : Sep 26 23:00:57 2026 GMT
Subject: CN=b31b30b84190ba0f30e92d739dc68e635bef8263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:50:95:b1:2e:80:7e:34:bd:c2:dc:f9:01:09:
0d:c4:bd:8f:ab:5f:13:b3:8d:7c:df:c5:c7:65:6c:
d1:50:26:19:16:8e:09:65:94:e6:d7:f8:06:18:9e:
09:1f:c3:32:29:c2:a0:57:b1:d3:42:4b:f1:3c:35:
30:72:3d:2c:07:be:71:41:07:0e:8c:97:70:a7:9c:
db:7e:f0:c3:78:d5:83:7e:6e:c2:7b:59:d4:b4:b4:
7f:04:92:0c:0f:de:fe:bf:de:24:54:2a:1f:29:3d:
16:c2:75:8f:69:1f:e0:2b:f0:2b:50:58:64:e1:ca:
4f:9e:8e:50:09:12:41:45:ff:c3:15:1f:e4:f7:4a:
0b:2e:fd:bc:e6:b0:89:a7:0a:e8:86:d7:60:b4:2d:
a0:e4:ff:94:c3:68:68:01:31:6e:9f:a2:12:dc:5a:
1b:db:76:5a:88:00:da:f8:b5:10:34:47:31:b7:8b:
f4:02:8b:df:c5:87:7b:95:ee:ef:f5:d0:2c:71:c1:
82:29:e3:a4:90:4a:ac:32:cb:61:35:ea:ca:6b:25:
eb:f7:48:a1:9f:7a:69:ee:ca:4a:c1:87:e7:ea:72:
b6:2f:9e:82:13:55:49:40:37:1e:eb:4d:4d:6b:6a:
2d:45:59:c1:2d:a3:97:ba:3b:1b:fb:60:79:98:58:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:1B:30:B8:41:90:BA:0F:30:E9:2D:73:9D:C6:8E:63:5B:EF:82:63
X509v3 Authority Key Identifier:
keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b6:3b:0f:bd:e2:c8:6e:ae:1e:23:22:ee:b4:4e:cb:63:88:
c3:12:e6:66:15:36:d4:1c:b7:7e:63:53:a4:56:77:f4:6e:29:
00:96:21:20:73:75:ae:87:d2:d2:70:bc:7a:26:b7:b0:07:45:
99:d0:eb:ed:25:0b:47:b4:72:09:aa:ab:2c:6e:26:e9:fd:fd:
dd:b3:7c:e2:67:43:10:5f:76:cb:6e:2d:a7:43:96:79:12:03:
81:7f:8f:07:2e:ee:5b:e8:dc:7a:db:f5:fd:40:82:c2:b9:d5:
1c:01:30:03:72:a2:c7:5f:bf:be:29:b0:78:e6:66:39:62:bd:
6f:61:b7:ce:a6:0e:9e:f6:03:c2:e4:ea:b0:1e:ed:03:a4:d6:
27:f5:aa:cb:1a:d2:4f:d4:7b:34:20:4d:07:63:7a:8b:a5:fb:
bc:d4:73:ec:8a:3e:be:8b:a6:1e:a7:1b:19:36:7d:c1:17:3d:
0b:b9:e3:39:77:e3:ba:43:43:12:0b:d6:10:23:57:df:dc:24:
fb:fe:8e:96:9b:37:28:b0:28:dc:fa:8b:06:78:b8:9f:f4:3c:
15:3a:6f:50:3f:6c:eb:ae:9a:3e:51:55:4a:ea:a5:c0:8f:19:
ee:b4:51:52:ff:dc:e5:99:55:98:41:84:bc:5b:5b:77:6f:eb:
22:05:fa:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:47:21 2026 by rpki-client