Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: 6xmfcbBN6ZH9kWONVdsBJtU8wlSFecr0gXMUFTrqWAg=
Subject key identifier: A1:6D:01:FA:FD:4A:19:53:E4:19:C5:FE:34:86:B5:E9:11:D1:0D:74
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 01A0CBC78B0A7603654411529B8E8374BCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 0A21
Signing time: Wed 23 Sep 2026 01:00:46 +0000
Manifest this update: Wed 23 Sep 2026 01:00:46 +0000
Manifest next update: Thu 24 Sep 2026 01:00:46 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: qkWjTY0UmIxr/+61YFXs72PQaw/kXxFbMMQ3YMIrWhs=)
2: QGMbmM8ll11r2ayfmomjOP9Vi5c.roa (hash: XGhVAar8wCBxCyb0ylA0x+uNoCI6FXRlTU/gvBj/94g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:8b:0a:76:03:65:44:11:52:9b:8e:83:74:bc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Sep 23 01:00:46 2026 GMT
Not After : Sep 24 01:00:46 2026 GMT
Subject: CN=a16d01fafd4a1953e419c5fe3486b5e911d10d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:af:f9:7b:53:32:1b:13:84:c2:2e:b4:1a:c6:
2f:6b:ae:25:17:ee:1c:9f:b1:9c:48:f4:e2:52:f1:
6e:6d:ed:17:44:e7:0f:a1:00:fb:12:67:1e:71:5c:
65:4d:cc:38:8d:36:d5:0e:3e:1f:72:e5:c8:04:de:
ff:5e:d5:4c:8f:cd:0d:30:0e:be:43:96:19:d3:55:
d7:49:22:93:05:97:c3:40:04:f8:b9:7e:e7:26:de:
12:0e:b5:21:b8:7a:ab:3c:ae:a6:ed:7b:97:99:67:
ca:21:eb:19:08:bd:db:38:6c:ba:20:d2:43:0e:c9:
df:bc:18:bb:09:82:c6:88:37:79:aa:de:55:ca:6d:
c0:35:4e:49:69:8e:67:6e:5e:78:9b:34:4a:36:64:
93:29:7a:d6:bc:ae:b6:2e:47:b7:1c:0f:5b:1f:76:
3b:34:4f:3d:1c:c4:93:09:92:d8:0a:01:33:2a:c4:
5b:e2:c2:a9:96:47:ba:35:2f:e5:95:7d:87:17:40:
39:a4:85:8e:be:e0:61:48:2e:11:a9:36:1f:55:bf:
dd:63:c4:23:97:18:80:1d:12:7d:2a:35:02:e7:d6:
c0:88:04:e7:60:43:ff:ec:e6:87:d7:e6:1c:74:2b:
13:a6:06:dc:3b:f3:03:00:00:ad:16:ce:ed:97:3c:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:6D:01:FA:FD:4A:19:53:E4:19:C5:FE:34:86:B5:E9:11:D1:0D:74
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8e:33:77:26:ec:37:26:ad:18:b4:46:4e:00:24:f9:6c:29:
f6:de:0d:c2:ea:d1:ba:d9:84:90:11:5c:22:af:e2:83:55:3c:
cf:18:a3:47:0c:15:8d:f4:6f:df:67:c8:56:98:e5:03:44:e9:
db:88:66:23:e0:36:cb:0f:be:1b:7b:6b:bf:5b:5e:db:cb:ae:
4e:81:9a:7b:9f:ed:b8:cc:19:19:66:81:7d:14:88:43:85:8f:
c6:77:79:ce:c1:d0:24:30:1f:22:8c:cc:32:28:93:90:95:c6:
5d:4a:5b:5f:a3:0e:d2:03:74:e0:ea:9b:e3:75:66:33:c4:d8:
ad:3b:fa:ae:5a:4f:54:fa:6a:92:3e:02:4c:42:aa:47:e3:12:
f5:08:08:13:2f:ff:93:19:e9:ae:cd:ba:ff:a9:86:c7:45:76:
dc:27:78:2d:ba:44:f4:4b:d4:d5:9b:a3:10:cd:c3:d8:7c:59:
79:e4:74:b6:3d:38:ea:18:80:58:64:e6:27:01:0a:e8:c7:ef:
a0:f6:90:89:54:13:e6:a2:9b:5a:08:6b:36:1e:54:2b:d1:dd:
12:7f:76:1f:72:28:7d:66:52:b4:d8:04:69:bf:f1:3e:df:8c:
2e:03:6e:54:8c:16:50:48:63:2a:91:5f:93:7d:fd:ec:1d:69:
e6:62:d5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:17:34 2026 by rpki-client