
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
File: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json)
Hash identifier: Z1FKflce7+pk3/VfRp3OC0bz//2m+f6mC+lYQHLV2aE=
Subject key identifier: C3:BE:AF:F3:D1:12:E3:F2:53:52:87:1C:73:D5:E9:1D:BB:4E:2E:B8
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial: 01A0CE91CC887875A24FAC63D681B0CD6023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
Manifest number: 0A96
Signing time: Wed 23 Sep 2026 14:00:56 +0000
Manifest this update: Wed 23 Sep 2026 14:00:56 +0000
Manifest next update: Thu 24 Sep 2026 14:00:56 +0000
Files and hashes: 1: 4Ja60_Ob1qyQ36cA5voSc2uJesU.roa (hash: phe7oxYicIsE5Su+Fgz6QVulHqYmo2k2ps7HRljB/84=)
2: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: DZELPJFX2xEPjaRoSUZuoeJX5SCAzz0EIUkRw0SDv6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:cc:88:78:75:a2:4f:ac:63:d6:81:b0:cd:60:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Validity
Not Before: Sep 23 14:00:56 2026 GMT
Not After : Sep 24 14:00:56 2026 GMT
Subject: CN=c3beaff3d112e3f25352871c73d5e91dbb4e2eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:e1:73:a3:90:ef:0f:f0:cb:fa:ef:09:95:
83:76:2d:d5:96:60:0b:b9:32:ff:44:0d:17:0a:46:
1b:a9:6a:08:48:6d:8c:0c:55:b0:e0:f4:30:79:21:
fd:07:c1:b0:91:37:d7:99:b7:6e:51:c3:ed:9d:51:
90:0c:ce:6f:cb:0a:8a:e9:b4:54:82:3e:b4:6a:0e:
a0:a6:2a:57:01:26:0e:19:05:6a:3e:85:a4:9b:be:
2e:56:b7:16:18:41:83:7a:e0:9f:28:81:db:d2:be:
a7:35:e9:36:68:14:9e:f1:1d:57:41:f9:f7:5f:6c:
ab:60:68:da:18:ca:f5:48:f1:75:ee:b1:aa:a4:0d:
b7:10:25:c8:e0:34:64:f1:a4:35:8c:2b:90:90:ac:
ac:5d:6f:fc:64:23:c5:5b:24:93:ec:f8:4c:e0:3a:
b9:c9:c7:9a:61:19:6f:91:d6:04:95:77:8e:ca:ee:
45:73:da:78:eb:bd:4c:d1:83:26:60:42:f7:58:51:
ff:9e:02:d1:38:b6:a8:9d:da:a9:3e:59:ac:04:a3:
89:a2:b4:66:f3:a8:af:b6:11:9f:2d:d7:78:88:e0:
04:46:d6:81:9c:9e:69:1f:7f:17:57:d1:0a:d1:b8:
9a:10:1e:e6:da:2c:4e:cf:50:7e:8c:e2:07:ea:6d:
90:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BE:AF:F3:D1:12:E3:F2:53:52:87:1C:73:D5:E9:1D:BB:4E:2E:B8
X509v3 Authority Key Identifier:
keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fa:c4:57:b3:ba:6c:2c:74:f9:7a:ea:b5:df:25:98:eb:1c:
77:61:e9:6c:8c:04:32:f8:01:47:35:54:25:e6:c0:38:73:4e:
7c:66:93:95:e8:02:8a:bf:75:7c:7b:95:e1:41:de:32:16:12:
13:6d:d8:61:51:98:92:fc:fe:52:b3:eb:d9:cb:d0:0a:9f:a9:
8e:db:c8:3d:8b:e5:df:53:3a:db:8e:36:8b:fc:e9:ff:99:ec:
1a:b2:e8:16:89:95:8d:15:ea:e2:55:7d:4b:ec:03:5b:dc:b5:
a4:d0:be:03:be:6f:e9:de:54:fe:c3:2c:c0:a1:ca:71:5f:ae:
71:71:64:79:0b:10:c3:de:55:ed:6f:11:f1:e8:8f:60:8e:92:
99:55:31:03:9a:d1:9d:03:fb:42:44:d4:a1:56:53:79:ac:05:
a4:82:7c:8a:76:3e:20:d8:59:e3:87:bf:3e:83:fc:4e:3e:cf:
03:b9:fa:fe:b4:73:5a:8e:da:cb:ba:ab:2f:a1:a7:53:e3:84:
fe:2f:e5:f5:db:63:bd:11:f3:9d:bc:0e:ae:16:35:75:95:e3:
0b:8a:b4:74:4e:31:d6:26:ce:a8:35:b3:79:e5:e2:6f:96:71:
ef:00:24:7e:c4:ba:71:b9:90:ad:65:c0:e2:97:ca:d9:00:0e:
0c:ec:17:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:40:31 2026 by rpki-client