Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
File: 4MKGY5gUKldLpHsZfXF5G14jr3w.mft (raw, json)
Hash identifier: KHuh7J1MSZ+VzkRQ7048sWMxGGVNGs4xJbk0CTun6tI=
Subject key identifier: 9A:ED:D9:4E:0F:B6:FB:44:3B:00:45:32:CB:0A:E8:44:33:74:CF:24
Authority key identifier: E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
Certificate issuer: /CN=e0c2866398142a574ba47b197d71791b5e23af7c
Certificate serial: 01A0D501E7D711F956585B063E4E4588BD87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 20:01:06 +0000
Manifest this update: Thu 24 Sep 2026 20:01:06 +0000
Manifest next update: Fri 25 Sep 2026 20:01:06 +0000
Files and hashes: 1: 4MKGY5gUKldLpHsZfXF5G14jr3w.crl (hash: XzMXBLfiDdUDCc9ZF/Oef5oGdA4d574l74yT6PVBdJs=)
2: QH02WxuzjvjRn51oLBiPvrujLa4.roa (hash: IQDzIfbbVCDUYyTY4gs2wjyKwyhZrH0/tzgcEn65G5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:01:e7:d7:11:f9:56:58:5b:06:3e:4e:45:88:bd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c2866398142a574ba47b197d71791b5e23af7c
Validity
Not Before: Sep 24 20:01:06 2026 GMT
Not After : Sep 25 20:01:06 2026 GMT
Subject: CN=9aedd94e0fb6fb443b004532cb0ae8443374cf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6c:75:2b:10:b2:03:c5:82:8d:5f:d4:72:a6:
aa:f2:55:05:06:93:fe:c9:f6:40:ae:ff:de:fb:33:
3a:82:ec:02:14:86:c8:3c:a6:77:1e:ef:82:e0:18:
de:0c:c8:35:db:3a:2f:29:cf:75:63:e4:e8:36:6b:
26:c0:e2:6a:80:86:5f:40:42:73:36:f8:ad:e5:d8:
32:f4:da:d1:da:ed:95:47:a8:3a:dc:51:2b:60:ae:
37:92:f4:c8:f2:76:a6:2c:a4:1b:4d:3a:5a:c4:27:
c8:c1:e4:84:c1:ea:83:eb:57:9b:de:34:80:a7:5c:
1b:2a:5c:0a:d7:1e:44:c4:30:d3:0d:cd:4b:83:2e:
de:f4:b7:d4:b8:d9:bd:23:9d:43:d2:a7:ff:b4:88:
92:19:a3:41:28:15:6c:7b:4e:d4:65:55:22:61:34:
dd:d1:97:f0:14:e1:63:8b:cc:1c:81:2f:fe:b7:a9:
71:74:94:d5:c6:0b:ea:25:90:d1:e3:15:41:40:d8:
1a:5d:a1:f8:b6:78:b8:3c:f8:10:dd:7f:ac:f2:26:
3a:dd:94:d0:ea:bc:ef:79:e0:8f:ac:2a:7f:90:60:
7c:f2:fe:9a:95:56:35:ba:fb:ab:2c:6d:60:4d:95:
ed:32:80:bc:23:c5:c5:46:f2:44:7c:78:8d:dc:fc:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:ED:D9:4E:0F:B6:FB:44:3B:00:45:32:CB:0A:E8:44:33:74:CF:24
X509v3 Authority Key Identifier:
keyid:E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:28:9b:d1:d7:ef:15:b6:f5:3e:2a:56:4e:b6:f1:39:b2:4e:
e8:95:95:38:0b:48:31:84:6d:59:4d:5f:df:5a:da:0a:77:6b:
04:df:c6:1a:60:a3:53:ba:0c:a0:b0:75:6b:b7:14:7c:fe:8b:
51:39:bf:04:29:2a:38:ed:a6:4b:b5:f9:a0:be:33:98:1b:2a:
04:16:65:41:26:32:e3:29:53:85:a4:32:0f:ef:0a:67:e1:bf:
23:1b:34:d8:65:1e:86:d1:11:2f:a1:45:99:84:2a:02:62:3f:
b2:4e:18:83:65:8a:66:06:71:53:20:86:86:68:50:44:67:1c:
c9:02:7a:ed:d2:5b:2a:ed:b3:57:f4:1f:cc:04:5f:59:c6:bf:
33:11:7f:e6:b0:25:cb:5c:39:29:7a:11:f4:ff:01:74:45:5e:
01:13:7e:9c:da:ad:6f:cf:50:bb:df:d1:86:9b:46:ce:de:5c:
f1:ec:58:d3:9e:18:8d:f4:7f:4a:8c:c6:08:d1:17:d9:fe:b8:
4c:7f:25:a4:4b:4b:77:d8:05:de:eb:40:12:cf:4e:9e:ed:16:
00:8b:c4:a2:8b:86:90:64:63:fa:bd:4f:44:cc:a2:08:9f:4b:
46:41:3d:22:f1:5d:f6:a7:8d:70:f4:77:49:5b:e4:67:e7:b7:
d1:25:10:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:41:22 2026 by rpki-client