Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
File: 4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json)
Hash identifier: higyWK88/49ALvbXcHuAp/SX1aLL+D8D9MeJ7lqh3L4=
Subject key identifier: E6:EE:3A:B9:35:17:CD:2A:88:09:23:14:24:50:3D:EB:0A:0F:D8:81
Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Certificate serial: 01A1DE39D06A7188F4DE3990354212A63080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
Manifest number: 1A8D
Signing time: Sun 15 Nov 2026 08:01:33 +0000
Manifest this update: Sun 15 Nov 2026 08:01:33 +0000
Manifest next update: Mon 16 Nov 2026 08:01:33 +0000
Files and hashes: 1: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: SI72LU9cfyTK9WVtYcIV71rD2ENrxp2TW12fuJ2u3kk=)
2: w9M7qFYAM8Bc_3Ry_zHFbT7tXaQ.roa (hash: S9cgU4aODgbYFlt1oo6eD08eYcxMr87FOJ/xbk/bpB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:d0:6a:71:88:f4:de:39:90:35:42:12:a6:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Validity
Not Before: Nov 15 08:01:33 2026 GMT
Not After : Nov 16 08:01:33 2026 GMT
Subject: CN=e6ee3ab93517cd2a8809231424503deb0a0fd881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b2:48:77:c7:db:ef:f1:7f:2b:3b:da:7f:f8:
8c:20:ca:13:92:61:41:91:62:3c:e4:1c:3d:58:ca:
ca:32:04:4e:0d:f9:73:82:8d:de:e7:50:ea:0c:8a:
3d:db:d1:66:18:f2:d5:b4:88:28:ac:c7:3e:ca:a1:
be:82:ab:7c:a2:fa:2c:df:7b:66:eb:be:76:bf:c2:
8d:f7:21:6a:40:d1:cc:93:78:85:f9:5f:91:26:01:
67:85:a0:89:d2:c3:44:97:b7:36:48:f4:d5:ba:88:
ed:d4:59:6a:23:9b:2f:79:41:92:ac:65:a0:62:a9:
8d:ef:54:97:89:5e:a3:6f:cc:ff:9a:b1:d6:cc:a5:
2f:5e:b3:1a:9f:81:ba:ee:02:90:3b:54:29:48:1e:
dd:e4:65:20:25:80:ba:5c:2d:91:27:a9:c2:5e:ac:
a7:44:0b:26:ad:0b:e4:3d:6d:95:b0:ba:1e:60:9d:
b9:64:82:a8:27:5c:09:3c:ea:03:6f:e1:7b:99:0e:
d5:9b:ae:ae:10:a2:36:48:39:9e:a4:21:e0:0f:94:
a4:88:4b:a9:40:27:49:bd:a6:6d:be:88:0e:63:4c:
49:1e:a2:6b:fe:8a:4f:8a:b1:89:b9:bc:aa:d2:8f:
2c:32:d2:2a:ce:8e:6d:69:6a:0e:79:5c:ec:21:28:
63:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:EE:3A:B9:35:17:CD:2A:88:09:23:14:24:50:3D:EB:0A:0F:D8:81
X509v3 Authority Key Identifier:
keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:9f:67:9b:cb:7a:11:8d:16:33:65:d1:07:23:ec:e5:f8:63:
4f:8b:11:e2:38:18:73:d8:5d:0f:89:81:9a:52:d4:53:e3:f1:
5f:bf:0d:f4:a0:66:08:f5:f4:0a:2e:59:6b:81:5b:ad:56:c0:
28:86:d3:98:0d:f6:0b:ab:11:ab:58:f5:36:70:21:73:68:cd:
71:b6:63:84:cd:0b:31:64:06:e6:3e:25:8b:e4:58:98:7f:91:
6d:95:39:f7:08:9a:a8:28:28:a3:b8:1f:2d:c3:a1:dd:01:0f:
61:40:e5:c7:74:9d:f7:69:40:a0:6c:70:21:a3:1e:12:9d:72:
6d:e0:27:0f:4f:3d:60:40:53:2c:6d:0d:1f:b2:09:cf:92:f4:
7c:74:34:28:8d:01:70:77:e7:cd:21:e5:02:d1:97:94:38:46:
a5:bf:81:cb:38:c9:18:a0:36:e7:01:8b:26:dc:fd:ac:bc:69:
10:14:f1:ad:58:7c:57:0b:a9:1e:c0:c6:38:5b:1b:8d:14:8f:
ce:26:96:25:03:a6:01:e6:3c:4a:f8:d3:7f:70:04:aa:bc:fb:
a2:0a:d7:9e:d7:81:79:0f:4b:79:93:58:6e:94:d7:54:bd:a9:
ec:ef:7d:00:f7:7a:de:8c:25:1f:6e:5a:31:c8:39:01:f1:f6:
ee:c6:32:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:30:49 2026 by rpki-client