Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
File: R4urL0xbYpNYFZNPSoH1YNLXMsg.mft (raw, json)
Hash identifier: 08DDyBmaGUb4Z0FRNgFNxvnK2Y5ktphsIqBkY7qH7mM=
Subject key identifier: 14:BE:8D:9B:AF:B1:2C:50:6E:A1:E6:B0:73:7B:04:88:94:B9:9F:48
Authority key identifier: 47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
Certificate issuer: /CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Certificate serial: 01A0D917710B5588C9DFCE4CDD491B4E33F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
Manifest number: 013F
Signing time: Fri 25 Sep 2026 15:03:07 +0000
Manifest this update: Fri 25 Sep 2026 15:03:07 +0000
Manifest next update: Sat 26 Sep 2026 15:03:07 +0000
Files and hashes: 1: OP4GnLmThCBFy87U3IPXWaJdkGA.roa (hash: CzHuhJNSL0fmMbMPkWZNZ3g6rBvAOQunuRNzTNwmsOk=)
2: R4urL0xbYpNYFZNPSoH1YNLXMsg.crl (hash: I21t2ke/80yYaydl7/x8zXz7R1sCzrSovEB36CX7a9Q=)
3: w9hMpn22nS31hORs4FbfAZ4nCN8.roa (hash: R5QWnTCvV96e97UtI23G1RgAIOStBivXSgOB+MvPMuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:17:71:0b:55:88:c9:df:ce:4c:dd:49:1b:4e:33:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478bab2f4c5b62935815934f4a81f560d2d732c8
Validity
Not Before: Sep 25 15:03:07 2026 GMT
Not After : Sep 26 15:03:07 2026 GMT
Subject: CN=14be8d9bafb12c506ea1e6b0737b048894b99f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:50:64:44:4c:31:54:58:66:e0:85:d2:df:51:
8b:8b:45:ce:4f:b8:21:84:9e:cb:54:55:f3:96:5a:
16:dd:da:82:fd:c9:46:1b:20:f4:d2:ec:a9:6c:5c:
41:de:93:60:f2:df:6a:74:51:4f:ae:38:ef:0d:d7:
1d:eb:28:5e:66:d6:35:dd:b4:63:17:e6:d9:ef:46:
81:18:c7:1e:76:15:e6:90:90:09:aa:24:1b:b1:0b:
31:85:77:ee:89:76:b3:39:37:93:65:e5:72:12:22:
db:ef:2f:6e:8b:78:28:ee:b6:df:c2:eb:80:c1:19:
db:c1:26:06:ce:14:88:05:b6:49:17:37:54:d8:b1:
4b:d1:26:ec:1e:68:49:5d:8b:d2:9e:09:eb:ea:43:
d0:27:d8:7e:40:7b:de:f3:c9:c9:9d:a2:a4:78:4f:
83:09:ab:7e:5e:3a:f1:a1:b0:c9:a8:f7:be:04:10:
89:6d:16:4e:ba:ae:00:79:4d:19:11:07:a6:17:60:
ff:70:4b:fe:8e:86:76:3c:ce:ad:49:0b:da:b0:ea:
d7:dd:7b:5e:ae:e8:50:c4:68:c8:04:dd:bb:a9:f2:
f8:43:c2:b1:5b:d0:24:a1:4f:04:07:aa:f9:61:15:
73:ea:cb:82:f7:ae:c8:da:96:69:4c:ba:1b:42:16:
8c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BE:8D:9B:AF:B1:2C:50:6E:A1:E6:B0:73:7B:04:88:94:B9:9F:48
X509v3 Authority Key Identifier:
keyid:47:8B:AB:2F:4C:5B:62:93:58:15:93:4F:4A:81:F5:60:D2:D7:32:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4urL0xbYpNYFZNPSoH1YNLXMsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/0274a1-f8fb-4eed-832e-42ad2f225fef/1/R4urL0xbYpNYFZNPSoH1YNLXMsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:7e:9c:84:ec:38:3c:3e:7e:2e:c6:f7:dd:8c:7a:92:b2:74:
5d:52:d6:2d:37:78:38:7e:06:1f:eb:75:50:db:a2:a7:9c:1a:
60:c4:85:3a:e4:7b:35:71:f4:bb:74:03:1e:51:bb:5f:d2:ba:
c1:37:df:05:cb:0d:6e:bc:f4:4a:4c:98:5d:5a:c9:29:7f:6d:
06:fb:76:7e:7c:34:ff:07:ce:ce:b1:7d:5f:90:e3:c6:74:ac:
2a:f2:52:b3:d9:f7:8d:6f:29:ba:88:3b:fb:4a:04:c1:30:2e:
bb:3c:89:e9:a9:17:fd:ef:3d:7f:00:1b:8a:ec:44:47:3f:a6:
54:a1:11:be:c7:42:e3:a1:2e:85:02:67:0c:8f:b5:08:ac:53:
92:c8:a1:27:0d:6f:12:76:2a:22:ac:31:8d:c5:29:7a:17:e5:
2f:f3:ac:42:00:0e:3f:b5:1e:bc:2c:1e:ff:23:e8:4f:11:52:
29:a6:2b:12:94:61:24:dc:72:4e:2e:70:27:79:e2:69:12:c3:
74:71:f1:bf:7f:c5:fb:0f:19:fc:ce:df:83:7a:9f:53:cb:7d:
bf:cc:4a:be:f6:44:a4:e1:cf:29:fb:e1:b3:39:17:da:07:c7:
c2:2c:b7:ec:e1:a0:c1:d6:69:e0:af:60:e2:67:02:4f:01:86:
f1:72:17:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:28:00 2026 by rpki-client