Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: ZBpPB2UDOxGz2/ggwdj3NTQlqj5vBN45IroiPyEu9dg=
Subject key identifier: 4C:09:97:83:F6:7F:FA:B3:D1:9A:B9:7D:FC:B1:43:1F:9D:6E:33:D1
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 01A0CF367A9A8E3D356EBE8D9EE1C455F79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 1A6B
Signing time: Wed 23 Sep 2026 17:00:48 +0000
Manifest this update: Wed 23 Sep 2026 17:00:48 +0000
Manifest next update: Thu 24 Sep 2026 17:00:48 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: rX4mH5ATW3d+LGuRs6uG/WoSMwmx6lXL7L8TtclTDaY=)
2: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (hash: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec=)
3: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (hash: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:7a:9a:8e:3d:35:6e:be:8d:9e:e1:c4:55:f7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Sep 23 17:00:48 2026 GMT
Not After : Sep 24 17:00:48 2026 GMT
Subject: CN=4c099783f67ffab3d19ab97dfcb1431f9d6e33d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:80:2b:95:4e:e4:ec:1e:94:19:4f:df:b0:b5:
b8:69:6b:49:fe:4d:d4:50:da:73:e1:5e:0c:c5:17:
66:17:f3:76:de:79:ac:9b:69:79:02:5e:cf:5d:59:
ac:11:2b:35:ba:69:20:19:3e:0f:05:df:d3:a9:e3:
35:78:13:37:26:5c:1c:a3:c6:71:2d:2b:d8:20:9c:
0e:5e:47:86:0a:f1:3e:ac:38:a9:cf:59:27:71:fe:
b4:32:9d:a7:6c:e6:b4:b0:61:8f:43:be:71:11:69:
c3:43:e0:37:79:14:8d:28:1d:9f:cb:1f:80:8b:0e:
de:27:f9:da:74:d8:0a:90:ff:3a:75:67:bd:7d:34:
44:82:c2:89:55:ef:fe:7a:d0:db:fa:c3:1b:e3:a5:
71:c8:13:71:05:ea:1b:d4:9b:fb:c9:66:e0:18:92:
b5:c0:d4:90:4e:c0:d8:1f:fc:64:32:f9:bb:15:64:
01:a8:bf:c2:95:65:95:07:3d:a4:fa:44:ab:35:0e:
c6:0b:9d:70:1d:fb:36:8c:8e:30:e3:a9:de:4b:48:
a0:0f:b6:d8:bc:5f:a2:5a:0d:e4:94:f1:a8:47:7a:
6b:7e:0b:25:84:33:6e:97:f9:c5:a7:03:c0:15:fb:
6d:ce:69:43:78:47:49:6d:85:4a:79:29:3f:c3:0e:
8b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:09:97:83:F6:7F:FA:B3:D1:9A:B9:7D:FC:B1:43:1F:9D:6E:33:D1
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b6:40:d2:95:97:14:8d:26:6f:07:2e:26:76:04:80:a9:8e:
d7:56:f9:3f:a9:d6:d2:81:16:8b:c3:fc:21:00:e6:eb:cc:84:
64:53:d6:53:da:05:7c:d7:c0:dd:a6:df:2c:89:bf:7e:33:55:
d8:44:92:19:63:82:65:c3:95:a5:18:cb:c4:c2:19:ef:0d:4c:
69:b9:e5:ab:33:fc:28:45:15:9d:28:c1:e9:82:60:ca:3e:17:
7e:cc:f1:ee:3c:ef:cf:d5:06:29:a6:9b:13:72:01:b0:51:68:
7b:44:97:a1:1e:d1:98:36:db:fe:24:51:cc:a5:f4:6d:f2:bf:
98:30:66:a0:3c:e3:54:69:d0:43:c3:f1:c3:9e:91:e4:11:a9:
28:86:2b:b2:20:81:61:b7:88:12:dc:40:f4:ad:09:68:34:01:
da:dc:03:a8:9f:28:c1:d7:c3:32:22:3a:e1:1e:a0:03:5d:2b:
a7:ea:cf:61:16:74:a9:60:92:fe:4e:c2:5e:bd:45:ea:34:0f:
40:a4:e6:4e:59:6b:cb:33:5f:d6:ea:dc:b2:a4:8f:83:24:70:
bd:b1:62:40:9c:83:15:13:98:a5:2c:65:08:2d:28:88:b5:1e:
68:6d:28:4e:a7:40:79:a0:5f:bf:36:72:2b:43:9f:bf:5b:4f:
98:cd:62:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:36:42 2026 by rpki-client