Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
File: k4otcueQJvUr9WV-l__RsRvohkE.mft (raw, json)
Hash identifier: OX7QOaK1Stx41g+YOhB7JSz0HfOnQXavR8864X2GgZQ=
Subject key identifier: A6:19:EA:57:10:58:F3:5E:C1:BC:5D:67:F8:9B:92:7A:2F:CD:A7:DA
Authority key identifier: 93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
Certificate issuer: /CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Certificate serial: 01A0E17526F63ABC6D7B81842BA2B4704358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
Manifest number: 0BD4
Signing time: Sun 27 Sep 2026 06:02:26 +0000
Manifest this update: Sun 27 Sep 2026 06:02:26 +0000
Manifest next update: Mon 28 Sep 2026 06:02:26 +0000
Files and hashes: 1: ILa8ZoCJZMkNP3VlFiAUG63QFj0.roa (hash: ithiJooqYNVv+hqIuWx9pXDq5+Ysuyh5ujkHJJ0K2Hg=)
2: U1jyhx8j_nvKcfk3KhbdWc9bhC8.asa (hash: ILl2CBQ+zUjpqpbOucbHOIyx0PlfJ9zR6X32LAUCxD0=)
3: k4otcueQJvUr9WV-l__RsRvohkE.crl (hash: 3rZlJwbEXX3qKdBkgWTMkCM4Gcby+7tO4bcaPABXjmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:75:26:f6:3a:bc:6d:7b:81:84:2b:a2:b4:70:43:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938a2d72e79026f52bf5657e97ffd1b11be88641
Validity
Not Before: Sep 27 06:02:26 2026 GMT
Not After : Sep 28 06:02:26 2026 GMT
Subject: CN=a619ea571058f35ec1bc5d67f89b927a2fcda7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:20:77:86:1b:07:c7:af:ee:a0:e5:02:ba:
00:30:12:9c:db:fa:98:c8:7a:59:2b:5a:fa:23:a3:
73:d7:15:0b:ca:6c:0f:f4:7f:9e:a7:4a:27:c0:30:
68:5d:b6:ef:8b:84:d0:50:ec:c5:17:ef:b1:79:0a:
b9:6c:62:55:67:ff:ee:bc:83:4b:4a:11:e3:62:44:
ec:6d:b8:3a:23:f4:14:ac:d1:2f:07:7b:ed:a0:b6:
ba:ff:57:49:b6:a6:25:47:a6:dd:1e:df:c8:31:2f:
ff:30:45:ff:f0:b9:e8:2c:16:6e:92:50:0a:5f:10:
4e:4e:3e:51:f5:c8:54:9d:32:89:e9:86:95:6a:42:
14:52:b4:a9:db:20:5a:bb:92:92:99:3b:30:60:5e:
b1:53:f2:a2:b4:3a:4a:88:97:ef:2d:14:2f:01:58:
d1:a8:7d:35:dc:86:05:04:35:b0:5c:fb:e7:c1:be:
cf:c7:54:51:1f:73:21:ee:17:44:90:ed:27:bd:fe:
2d:db:65:2b:56:bd:c8:3e:a0:4c:e4:ca:ec:3c:00:
18:1a:01:d1:7f:5d:10:bd:a8:7d:85:33:47:8a:9d:
08:0f:31:80:1c:3d:36:70:25:8a:ba:b6:a5:3c:96:
0c:cd:74:80:f2:6f:73:c4:b4:89:09:8f:5c:ab:01:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:19:EA:57:10:58:F3:5E:C1:BC:5D:67:F8:9B:92:7A:2F:CD:A7:DA
X509v3 Authority Key Identifier:
keyid:93:8A:2D:72:E7:90:26:F5:2B:F5:65:7E:97:FF:D1:B1:1B:E8:86:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4otcueQJvUr9WV-l__RsRvohkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f7d37-a740-42b0-acd0-c36976363968/1/k4otcueQJvUr9WV-l__RsRvohkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:1d:8f:5e:b4:5b:92:27:05:47:ad:22:16:28:af:fc:7f:54:
43:ee:07:f8:d3:f4:d0:ff:7a:29:8b:88:11:fc:dc:5d:32:3f:
fc:17:da:33:26:ad:40:7b:b5:56:c3:e5:a8:a8:3f:5e:9d:0a:
01:d0:5a:65:27:6f:14:e8:52:4e:f8:d0:5f:1a:62:74:2f:3d:
41:b3:4b:84:5e:22:8c:ae:e1:47:a3:54:5a:59:72:53:c9:04:
2b:0a:71:a4:74:da:e7:09:ce:69:f7:97:5b:15:f8:04:f2:b3:
84:5d:26:8a:17:34:5f:52:45:2d:a7:8f:44:24:b7:64:b1:31:
4b:da:26:dd:44:1b:db:ab:21:52:d1:ff:e0:7e:76:96:3e:92:
80:e9:57:13:19:fb:6b:a9:68:be:7b:75:11:2d:01:cc:90:4d:
2c:d1:1f:30:d1:89:0d:b0:56:4d:8b:0e:12:43:82:ac:e0:57:
05:eb:19:c7:2b:81:bc:ff:96:78:f3:67:d9:d8:22:a1:bd:54:
ee:be:70:b7:fc:90:ce:75:6a:97:67:e3:45:98:92:f9:3e:5d:
5c:72:69:2a:d5:0b:24:6e:5c:a7:fe:79:10:e0:7d:16:f8:05:
af:6f:16:19:c9:24:39:27:82:1c:14:c3:5f:d3:31:03:83:b1:
95:5d:b9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:37:17 2026 by rpki-client