Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json)
Hash identifier: 8BE5MRppFlckXkJaB0vO04Def7QmzLzWH91mL75DYA4=
Subject key identifier: 83:75:5B:AA:91:DF:93:E7:7A:E4:03:0B:B9:D2:21:72:72:8F:D2:30
Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f
Certificate serial: 01A0D314FDE0B98E659618B43D4929C930B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
Manifest number: 065E
Signing time: Thu 24 Sep 2026 11:02:43 +0000
Manifest this update: Thu 24 Sep 2026 11:02:43 +0000
Manifest next update: Fri 25 Sep 2026 11:02:43 +0000
Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: 9vprhtwkye/YSZ5LdSnG5mwr0UijoaNnUiT4wwpxM9s=)
2: 8J8jqfIBZIcDi5qcEjDOA-SS3uk.roa (hash: P2MosB3uZAItjOGMQglzm3PWOTUEZCA6IE9hN8uIIUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 11:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:14:fd:e0:b9:8e:65:96:18:b4:3d:49:29:c9:30:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f
Validity
Not Before: Sep 24 11:02:43 2026 GMT
Not After : Sep 25 11:02:43 2026 GMT
Subject: CN=83755baa91df93e77ae4030bb9d22172728fd230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:e2:c5:03:17:d6:85:02:41:5a:75:4a:77:
19:dc:04:08:a0:97:d1:c5:ef:b4:8c:40:05:02:1c:
57:42:ad:e2:c6:6f:2b:48:22:40:81:36:b1:0f:79:
67:ec:1f:4d:30:fc:18:94:52:d0:a4:06:94:0e:03:
76:19:d8:c6:ed:89:6b:93:c5:13:a3:94:b2:4c:ff:
e1:64:23:d9:7e:c0:d1:ac:d6:a9:d9:bd:1b:c3:fa:
ef:25:5b:d2:2c:e7:1f:c9:38:b4:cc:ec:71:1f:e0:
60:44:39:1b:8f:89:6a:74:c4:17:23:9e:cb:02:98:
b1:b8:2a:35:d1:9d:e6:4e:fc:16:9e:b0:c0:45:09:
99:10:5b:4e:4b:d9:63:7a:e2:63:a5:2f:58:e0:eb:
63:42:2a:f7:e7:c7:76:b2:46:cd:3a:f0:f7:b6:89:
3f:d1:d7:1d:59:8b:f6:3a:0b:33:55:a8:84:b7:de:
90:c6:09:90:df:b5:db:d5:86:6c:03:cb:48:90:79:
9f:50:61:4b:19:db:f5:6c:ac:f3:d4:1b:bd:ba:f4:
a5:f2:f1:cd:d1:75:02:34:06:18:7d:b4:81:3f:2f:
ce:4b:ad:2f:bb:6f:46:9a:d2:bf:62:2a:f6:63:75:
c0:9c:6f:8f:05:44:fc:28:79:1a:31:3a:64:a8:67:
bc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:75:5B:AA:91:DF:93:E7:7A:E4:03:0B:B9:D2:21:72:72:8F:D2:30
X509v3 Authority Key Identifier:
keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7c:78:a1:78:87:6b:4e:ca:02:5f:8e:b9:26:9d:5d:67:8e:
19:8b:04:47:17:a2:f7:1a:c6:99:d8:bd:b6:31:a6:fd:a9:4b:
c1:a3:94:db:fd:b4:23:ac:c2:56:b5:2c:3c:bf:f5:a2:f2:0b:
c8:4a:b8:c1:6b:8b:a7:d5:94:a5:e6:1d:c1:70:1f:ae:88:a9:
7c:6b:43:8f:8b:eb:02:a2:bd:0f:e4:77:bf:ba:80:9c:97:ee:
a7:d4:bc:de:5e:01:16:1a:f8:6f:ac:10:96:8d:99:65:3c:91:
25:75:3a:1a:92:b6:b8:7f:55:a6:a6:6b:26:2c:1b:4e:58:cd:
c3:b0:fc:d1:c2:56:a2:fa:57:f1:36:18:90:f0:74:35:02:08:
45:12:06:d3:c2:bb:76:84:4c:8f:9d:d5:a4:54:8f:0e:40:6d:
d8:bc:e0:23:82:9e:cd:8b:e3:99:1b:ff:3f:f4:74:e0:72:a1:
45:e7:79:38:1a:c7:2e:3b:0d:6e:23:47:b0:bc:1c:e9:d4:05:
0b:5d:88:79:02:aa:ce:65:6f:f2:fc:dd:01:06:4b:03:4c:f1:
30:7f:6a:1f:6b:16:c0:f3:cd:69:d2:27:fc:de:f9:01:8b:ff:
6e:28:9b:9b:bc:68:fe:61:71:80:ca:db:e0:c5:09:0f:8b:3a:
d4:7a:e2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:53:12 2026 by rpki-client