Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: mT/sACIHK4Q6EMG117JVxh2vokLKejvnWfV6S/tLF9U=
Subject key identifier: BA:36:DB:52:D3:30:AD:0C:C8:7F:1F:CB:17:48:CE:A4:5E:8C:F7:8E
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 01A1D9B8471DA01DD8E7F2CEEDD48C825557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 1AF5
Signing time: Sat 14 Nov 2026 11:01:35 +0000
Manifest this update: Sat 14 Nov 2026 11:01:35 +0000
Manifest next update: Sun 15 Nov 2026 11:01:35 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: B4MNtjpCbxhI3VhX2W6kKeAFVLrFaBx4SxjFLMzmhn8=)
2: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (hash: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec=)
3: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (hash: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 10:37:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:b8:47:1d:a0:1d:d8:e7:f2:ce:ed:d4:8c:82:55:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Nov 14 11:01:35 2026 GMT
Not After : Nov 15 11:01:35 2026 GMT
Subject: CN=ba36db52d330ad0cc87f1fcb1748cea45e8cf78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:57:0f:ad:7e:b7:df:ae:77:be:4b:9b:7d:
c5:49:cd:84:b9:95:39:36:34:8a:56:24:48:62:51:
95:14:19:85:ea:7c:86:72:bd:b1:f1:fc:40:19:ac:
a1:05:b8:53:f5:16:aa:46:f9:1f:c4:28:c3:59:67:
d9:46:06:ca:f2:73:10:64:40:04:c7:6a:85:f2:f5:
1a:40:96:0e:f0:6f:d1:51:b1:79:00:db:dd:e3:4b:
bc:7e:a9:0d:70:04:cf:1e:9e:d2:2e:54:ed:e2:4c:
11:76:a3:6c:58:c5:d1:74:f4:79:05:24:8a:d9:fe:
21:df:c1:54:87:29:88:4d:d3:f4:47:ea:a8:04:5c:
be:2e:43:5c:35:dc:e7:3a:10:06:dd:23:f0:ce:08:
e5:ee:c0:d0:a0:b4:11:ce:ed:4d:80:70:f5:ab:33:
bc:fb:a5:6e:a9:d3:66:27:65:ea:01:9b:f4:d9:71:
ed:7f:2c:87:d1:83:b1:7b:b4:dc:2f:93:9f:b5:24:
6a:22:79:bd:f9:5e:1f:be:fa:55:42:d4:a0:c1:89:
fe:58:9b:b2:6d:2f:9b:bf:51:07:85:d3:f3:a0:63:
37:7b:01:68:9e:7e:56:6d:95:2f:7b:3f:fb:d7:20:
b2:ea:18:4e:38:c9:5a:bb:81:86:c0:88:79:fa:e0:
e6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:36:DB:52:D3:30:AD:0C:C8:7F:1F:CB:17:48:CE:A4:5E:8C:F7:8E
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bf:a4:2e:1a:ba:66:81:96:19:29:96:c2:4f:b8:04:67:78:
97:e6:7c:d8:21:58:56:84:a9:83:60:42:c4:e6:ab:9b:13:1f:
42:d8:12:b1:6b:39:4a:c8:48:4e:aa:85:42:3e:00:d8:9e:aa:
d1:18:61:a0:28:29:74:b3:13:d7:11:b5:8b:e3:95:fe:90:df:
ce:64:49:f2:4c:4f:2c:d6:15:fd:02:7f:d1:83:d5:35:b6:4d:
5f:18:fa:e7:57:7a:43:12:6c:1f:d9:5f:04:17:d4:54:02:b0:
06:49:ad:07:a6:59:79:80:2f:2f:a2:70:08:e2:b8:7e:29:8f:
1f:79:34:d5:bd:49:07:20:c0:c5:7d:00:63:d9:82:6e:c6:cb:
3f:75:54:d7:7a:5c:91:5a:7c:0d:8c:1b:d8:cd:56:b4:b3:e3:
9b:fb:0f:59:16:57:0f:12:e5:8f:6d:ed:4e:e0:73:38:82:cd:
3d:c1:e0:ad:3e:ac:66:ea:3e:fb:31:a4:f4:8a:89:ca:1f:3e:
bc:2f:d0:d7:13:71:2a:44:95:7d:ac:72:15:68:9a:78:c9:2c:
b7:58:df:be:33:27:cb:46:81:e3:7a:3f:3e:eb:04:11:f3:09:
c5:53:82:2e:6e:e9:61:35:59:88:b8:1c:87:61:67:d1:4e:c7:
1a:4d:d7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 20:43:29 2026 by rpki-client