Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft
File: 4gShwspKTbAzN142DeMjeQumpbk.mft (raw, json)
Hash identifier: jCC8nUviB7KN+F+BTuU8OK/K7F02Lv05cYziU3IX2Ps=
Subject key identifier: BE:E1:30:14:B1:E2:CE:3A:34:3F:2E:C1:4B:71:5B:2B:85:69:5B:AA
Authority key identifier: E2:04:A1:C2:CA:4A:4D:B0:33:37:5E:36:0D:E3:23:79:0B:A6:A5:B9
Certificate issuer: /CN=e204a1c2ca4a4db033375e360de323790ba6a5b9
Certificate serial: 01A0D382C2B40C422007C1FEA84DC9802874
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft
Manifest number: 1302
Signing time: Thu 24 Sep 2026 13:02:37 +0000
Manifest this update: Thu 24 Sep 2026 13:02:37 +0000
Manifest next update: Fri 25 Sep 2026 13:02:37 +0000
Files and hashes: 1: 4gShwspKTbAzN142DeMjeQumpbk.crl (hash: 6zk79Lm7vIQflrl6z4aRmQKefBTdY00jAFi06lMRYa4=)
2: Q_JnpghBEdCLh0xBHJB-tx_t2gw.roa (hash: Ab9wt6TXLrpI0IOi098sXRGVv7NV4z8Pe9YK/pyc2Mc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 13:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:82:c2:b4:0c:42:20:07:c1:fe:a8:4d:c9:80:28:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204a1c2ca4a4db033375e360de323790ba6a5b9
Validity
Not Before: Sep 24 13:02:37 2026 GMT
Not After : Sep 25 13:02:37 2026 GMT
Subject: CN=bee13014b1e2ce3a343f2ec14b715b2b85695baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:29:54:b5:c0:0a:ae:e8:46:af:5a:7d:56:
df:d2:c9:93:0d:86:84:44:0f:56:1f:7c:85:e4:06:
94:59:66:d4:56:94:b9:c5:9a:76:34:0e:33:41:f4:
5e:cc:38:69:95:c4:58:56:17:5d:df:63:b1:52:74:
c4:1e:c7:d5:07:be:bd:2b:91:d5:48:e8:1c:a1:86:
9c:c8:ec:5d:8b:5a:10:fc:f3:48:f7:4a:72:5a:f8:
37:f7:51:dd:a5:0f:85:09:cc:16:b1:0b:62:7a:35:
99:3d:4f:59:82:18:f2:30:87:19:61:5b:79:7f:19:
47:d6:49:87:82:79:8d:f6:a1:4d:52:9a:1b:e6:7c:
6c:32:a9:82:da:36:f5:b4:c9:b7:97:91:8d:5a:51:
0d:37:a4:69:73:5c:ae:2a:cf:43:4a:0a:fe:fa:ef:
6d:92:ef:9b:7e:a4:0e:e6:6a:3c:95:5a:94:aa:92:
64:3c:f3:07:62:4a:f0:4c:4a:52:f9:86:88:38:b4:
df:9f:b0:8d:9e:6a:2c:0e:82:d8:25:1e:15:87:4e:
9b:99:c5:26:9b:bf:60:45:2a:82:14:cc:4c:31:b6:
7f:ac:d7:e1:73:48:6f:b6:73:a7:13:2b:bb:4c:bc:
91:31:82:34:4a:cb:73:81:fe:8c:a9:d7:b5:a9:2c:
d4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E1:30:14:B1:E2:CE:3A:34:3F:2E:C1:4B:71:5B:2B:85:69:5B:AA
X509v3 Authority Key Identifier:
keyid:E2:04:A1:C2:CA:4A:4D:B0:33:37:5E:36:0D:E3:23:79:0B:A6:A5:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gShwspKTbAzN142DeMjeQumpbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/12e905-7854-473c-950b-cf4bd4f3f29d/1/4gShwspKTbAzN142DeMjeQumpbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d3:4b:57:3e:49:1c:84:5d:fa:dc:d2:b8:fd:f9:a7:dc:5a:
f8:09:4a:c6:3a:50:84:00:46:2a:39:58:c5:4c:59:f4:3e:a0:
86:8c:c3:01:3e:20:a5:2c:c7:19:1b:8d:9e:94:9a:8c:f8:4f:
01:b0:cb:f9:b9:49:f0:e0:23:c9:f5:05:e9:ed:ba:17:ef:3c:
06:63:e2:e9:f5:64:9f:77:f0:ee:be:a4:2d:9e:02:5a:cb:ea:
4b:7e:0c:a1:68:06:40:86:79:9a:45:9f:e7:e7:df:91:e5:11:
d3:f3:0e:de:be:17:b9:d3:bb:cb:b5:d7:14:20:23:ae:6e:83:
7f:06:e3:98:b0:cb:79:4e:3e:de:38:99:d1:05:89:24:01:89:
24:d1:0d:67:5a:73:1c:52:3f:0e:c5:cd:44:11:62:6e:cf:ea:
20:04:92:63:8b:86:d4:3d:60:86:ed:85:f6:2c:f8:a9:82:71:
a3:cf:8b:f2:c8:7e:7e:da:33:5d:f9:f4:94:f3:e9:58:e3:31:
4f:e7:cb:a4:43:25:b9:13:7e:8c:58:f8:a3:28:4b:50:5c:d6:
11:b7:f0:9e:79:9f:94:13:9f:69:3c:a7:05:ce:70:fa:6f:5e:
06:29:50:96:a2:e2:03:e7:d0:17:0a:39:e6:15:e3:5b:7d:9d:
0d:77:09:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:03:54 2026 by rpki-client