Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
File: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft (raw, json)
Hash identifier: fZlZ4ypHxFE/dMTdxd4jYEsQ9Mklwp2wi8JzvkjgLTM=
Subject key identifier: 3B:DC:84:82:42:B4:01:E1:A5:83:D0:C0:EB:27:70:05:20:62:9D:7D
Authority key identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
Certificate issuer: /CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Certificate serial: 01A0DF4EB5B43B16695BF2DD564EAFED4FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
Manifest number: 1433
Signing time: Sat 26 Sep 2026 20:01:12 +0000
Manifest this update: Sat 26 Sep 2026 20:01:12 +0000
Manifest next update: Sun 27 Sep 2026 20:01:12 +0000
Files and hashes: 1: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl (hash: BzPIuDAI21Exa2JdGNm/tssAo8IrWnsMR6G0dXY9dqI=)
2: VG_cPEe7kTG03PcAiKPKPDDX2Aw.roa (hash: NnQzM+622E7wmxItwJFMLMXDDYpziIokkpr04kWQKgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4e:b5:b4:3b:16:69:5b:f2:dd:56:4e:af:ed:4f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Validity
Not Before: Sep 26 20:01:12 2026 GMT
Not After : Sep 27 20:01:12 2026 GMT
Subject: CN=3bdc848242b401e1a583d0c0eb27700520629d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7c:b5:47:1f:cb:69:d0:a4:45:d2:ad:39:9d:
72:9c:f3:4e:0a:e4:20:36:d5:c6:f1:ef:7f:32:f4:
07:dc:ff:a1:39:fe:b9:63:d9:d8:5d:74:71:46:71:
25:f3:47:3f:cb:eb:21:0d:d3:fd:e3:c6:53:60:09:
ca:62:82:61:86:5a:31:fb:4f:7a:25:1b:3e:ec:0c:
52:c8:66:1f:f2:af:bf:5b:e0:51:30:ac:33:64:0e:
c9:85:cb:0e:c5:a1:86:1a:89:92:81:a3:e6:3a:9c:
51:57:50:0b:34:37:a0:80:2e:4a:ba:bf:bf:17:be:
8b:3c:cd:b6:bb:2d:1f:99:6c:a7:78:6b:a4:4f:54:
8f:b6:07:4a:94:8c:9a:5d:83:ae:f6:a9:dd:fe:a1:
c5:7f:03:63:20:e6:2a:9a:da:02:fd:05:8a:d0:76:
1d:0e:0a:d6:71:ae:e3:c6:f6:64:ed:44:78:41:fa:
60:05:e6:36:e9:9b:7f:fa:c6:42:ff:db:1d:4e:df:
a6:ad:dd:da:51:f7:ae:1d:b2:09:47:0b:62:04:7b:
94:d0:23:4e:b4:41:02:97:78:d4:66:f9:7d:80:28:
b2:bf:59:88:ff:83:4f:46:a1:66:c7:62:44:f1:fb:
ce:58:bb:69:1a:2a:c1:26:92:2d:a4:92:bf:22:35:
64:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DC:84:82:42:B4:01:E1:A5:83:D0:C0:EB:27:70:05:20:62:9D:7D
X509v3 Authority Key Identifier:
keyid:F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0c:17:4d:7b:34:30:99:a5:61:c6:66:3a:dc:6c:eb:e2:77:
a6:e9:72:0e:b4:bb:e1:8d:0e:97:b4:f7:9c:6a:81:1c:23:5c:
32:ee:62:2c:b3:e1:a5:8e:3c:92:c3:9c:37:43:fc:8c:8b:e3:
f4:75:9e:23:89:4d:17:7e:03:94:c9:31:6e:69:ee:3e:4b:56:
b0:da:ff:66:b8:5b:b6:64:61:fe:0c:95:17:65:88:aa:4a:4a:
43:43:f7:c5:77:fe:db:af:f5:f6:53:8e:b2:77:25:db:09:76:
ec:58:33:ba:0f:55:f1:a9:75:9b:7b:2f:66:b2:a9:0f:de:e0:
7d:ab:0e:9d:8b:d4:33:f8:24:03:c7:f3:a2:e8:ca:db:3a:72:
53:bc:c7:a5:dd:6a:40:b0:35:83:8f:60:b7:ea:5b:7a:55:a0:
ac:59:c9:d3:1a:09:18:8a:91:43:f9:5e:38:14:be:94:62:a0:
ed:2c:0b:ce:22:6f:26:9e:6d:4c:6a:bb:60:93:4c:10:c0:f1:
bc:c4:fc:61:f3:62:98:a3:64:ec:e1:08:17:ad:8d:57:64:32:
82:31:e3:31:1f:74:85:2e:30:e6:57:79:25:e5:34:56:dd:9e:
4a:54:34:e2:b6:7c:cc:ff:10:78:5e:a2:a3:df:d7:90:5b:41:
32:67:ec:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:48:49 2026 by rpki-client