Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: dZ02DckfyZy0hH9Gsx2KfWaaWJhyExjKFcmJSmj+x08=
Subject key identifier: 58:C7:C4:1B:68:73:3A:DD:55:53:0A:EB:48:73:7F:CA:27:FE:2C:4B
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 01A0CF6D16327B2F36EC295B0AC1E8810629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 1A6F
Signing time: Wed 23 Sep 2026 18:00:27 +0000
Manifest this update: Wed 23 Sep 2026 18:00:27 +0000
Manifest next update: Thu 24 Sep 2026 18:00:27 +0000
Files and hashes: 1: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (hash: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU=)
2: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: Odgk29D9flWruIOcMulrwjndzX3qIekL1G79mF1u01k=)
3: drikzNt5D9jwedYli_IhOY-bx94.roa (hash: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:16:32:7b:2f:36:ec:29:5b:0a:c1:e8:81:06:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Sep 23 18:00:27 2026 GMT
Not After : Sep 24 18:00:27 2026 GMT
Subject: CN=58c7c41b68733add55530aeb48737fca27fe2c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:be:8d:f9:1b:5b:db:72:c7:14:d1:43:d0:e3:
e9:e8:7c:93:c2:1b:18:92:4e:81:09:54:2c:30:5b:
c6:2a:f9:1f:64:78:38:10:d4:f9:b5:ff:1a:b0:47:
e6:2b:ec:de:4d:d6:80:cb:09:e6:e2:37:e2:9b:53:
c7:ff:d8:38:e3:ea:7f:ff:eb:44:1e:3c:47:3e:e1:
c9:58:fc:b5:3e:71:b7:03:41:67:9d:26:32:20:78:
28:94:31:86:30:15:d4:cb:87:5b:35:98:68:26:da:
e6:e2:c3:4b:6c:7d:63:3f:2f:c7:f1:a7:5d:db:e9:
c1:be:26:4f:7a:ea:d6:74:9c:8c:c5:94:31:bc:b0:
eb:5d:2c:3a:db:c8:48:84:ec:5f:a6:1a:4d:02:86:
de:19:f7:33:9c:c7:a0:ea:ac:96:a5:da:fd:70:91:
c1:2a:0b:83:08:5e:97:3d:54:8f:f7:d0:eb:f8:de:
52:4e:ae:9d:e3:9e:8d:63:d0:ce:41:66:65:74:b4:
2e:13:4a:68:9e:ef:a2:79:87:14:1f:c9:09:84:e7:
a6:e9:14:1e:dc:75:1b:c6:a0:c7:d8:8f:df:9a:b7:
a7:91:5a:a4:15:46:b9:5e:fe:82:31:8f:da:37:ac:
dd:39:cd:af:3d:25:b7:57:1e:62:9e:0a:28:d2:a5:
83:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C7:C4:1B:68:73:3A:DD:55:53:0A:EB:48:73:7F:CA:27:FE:2C:4B
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:57:b5:3a:ea:a9:37:50:bd:81:b5:56:7e:b2:13:78:3d:b8:
77:7f:f6:03:ca:4a:07:b8:85:58:e9:f0:ac:6c:0e:cc:52:69:
76:a9:ec:35:ab:96:b2:1a:ee:2b:24:4f:4f:ba:99:dc:ed:21:
07:12:f8:05:b6:4e:58:c6:6e:aa:f1:49:9d:1a:94:43:37:a7:
83:8d:de:75:c6:00:25:35:63:fa:54:7a:6e:0d:fb:35:a9:ac:
bb:b2:8a:3a:27:5d:cc:17:e8:c9:e0:89:5d:9c:83:53:45:de:
a2:75:6d:ef:82:1b:89:c4:3a:d0:6e:b3:94:a8:e4:dd:04:72:
e1:6f:88:02:04:cb:d3:77:a4:04:63:74:9d:20:ad:49:14:e9:
25:1f:8f:7f:7f:24:cf:0c:68:ef:61:9b:ab:8f:ae:4d:00:a9:
c8:df:c2:77:f9:f5:97:72:76:16:b2:7d:8c:d4:cb:f3:4b:de:
ae:2e:85:c7:85:91:30:37:8e:da:92:a3:b8:ca:02:5a:e7:53:
9a:a9:d0:d1:f3:57:a4:3c:3e:09:01:3c:5a:a1:5f:52:ad:b8:
55:88:80:ab:b0:56:39:37:3c:78:c1:87:09:a0:a6:bd:6b:1f:
04:0a:ea:11:ae:b5:d8:d1:cb:da:c3:64:7d:7d:8c:4d:25:c3:
2d:ba:95:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:21:16 2026 by rpki-client