Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: Nn6AtNIRPWq3RM2mdvKAdt72+bAKJ1gm/U+slmHEbWo=
Subject key identifier: 2F:55:25:49:3F:68:A3:CF:BD:72:E9:06:82:26:3C:A8:41:39:8F:0E
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 01A113AA634FAE6BFD6DA88C18DB527DFE5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 17E1
Signing time: Wed 07 Oct 2026 00:01:35 +0000
Manifest this update: Wed 07 Oct 2026 00:01:35 +0000
Manifest next update: Thu 08 Oct 2026 00:01:35 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: p86T5ouDbawmK61c/cav27W2ogJm9AGB50VcM8DbF7o=)
2: ZFPsdpNLJ5l0WxKp0MW2ehft5Vc.roa (hash: 9gNaT5xTEshkzEjpFa3J0fv6CbE+hBJqY5VddI2BOX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:aa:63:4f:ae:6b:fd:6d:a8:8c:18:db:52:7d:fe:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Oct 7 00:01:35 2026 GMT
Not After : Oct 8 00:01:35 2026 GMT
Subject: CN=2f5525493f68a3cfbd72e90682263ca841398f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:a9:94:0a:29:ea:37:ee:25:3a:28:b4:f1:
78:63:74:2e:ea:8b:93:0d:f4:8f:cb:67:2b:96:f8:
b1:25:d6:ff:2f:50:37:8b:e0:78:21:45:43:e1:0c:
5b:4b:25:0f:98:fa:a3:d6:a4:0a:12:30:c1:42:b9:
88:33:eb:44:21:d6:4f:70:9a:7c:43:dd:82:d5:d5:
8f:9d:13:13:8a:48:9e:35:93:33:2f:c0:1e:f6:0d:
e5:83:99:05:2b:a5:d3:11:10:46:b8:6a:13:8c:97:
ec:c4:9c:7d:17:1c:82:1c:06:0a:9b:a5:58:21:e7:
9c:70:00:33:bc:57:0e:65:a0:d9:e8:1a:4d:b1:80:
f9:c3:5f:2c:4a:4c:b2:ff:17:44:93:f6:5e:59:6b:
91:2c:e0:32:e3:f3:6e:a5:93:7f:00:c3:cf:55:5f:
e2:6d:57:1f:62:55:5b:b1:93:f2:6b:99:7e:35:45:
e0:e4:52:a8:25:b1:6e:27:5a:c8:4c:82:66:50:26:
9e:91:10:dd:72:13:79:f7:5d:6d:64:5d:17:0c:6d:
80:d4:1c:49:f3:4b:a0:b6:12:3f:94:18:c7:4f:14:
1f:02:6e:e1:cd:97:1e:d9:33:e5:0d:17:78:80:15:
9c:0b:15:58:07:4d:04:76:67:f5:f9:70:b4:3c:ba:
9e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:55:25:49:3F:68:A3:CF:BD:72:E9:06:82:26:3C:A8:41:39:8F:0E
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a2:cb:ff:67:ab:26:05:0d:44:ff:89:c9:58:a2:e6:6e:ac:
38:40:df:77:0d:c0:9b:76:a1:5e:46:c6:58:62:d4:05:f0:0c:
6d:12:51:65:fb:c4:20:81:7a:47:c8:d1:9d:8c:de:13:ec:05:
81:54:8b:46:93:b2:4d:93:53:48:c0:f6:fb:f1:6c:94:43:20:
ea:0b:f0:b3:20:e3:5d:72:72:10:bc:08:c6:70:9f:93:68:4e:
78:62:c3:42:b5:1f:9d:c3:67:12:f3:0d:c9:a5:76:e9:88:26:
90:ea:cc:94:a5:5f:58:a9:09:f4:8b:88:d6:43:59:eb:8d:7a:
1e:7a:d0:58:bc:cc:57:1d:2a:5e:df:2a:06:8a:4c:1f:4f:cf:
9a:52:d8:a2:d0:d1:b9:e2:c6:99:1a:bd:69:f0:33:6b:5e:c1:
9e:e7:b2:39:48:18:5d:c8:74:79:a2:7c:55:fc:a3:7d:e6:d2:
c0:ba:4e:9a:c7:dd:b4:63:54:ff:4f:c1:4f:af:06:0e:66:17:
26:da:c2:91:13:97:64:f5:2b:5e:52:15:92:51:4e:8f:23:58:
81:ec:1a:60:03:45:3c:b0:0a:5a:35:3e:df:2a:a4:0e:60:c0:
f1:67:49:e2:a5:e6:b3:05:aa:1d:b6:f9:a8:e2:39:d4:cb:75:
98:14:cb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:18:24 2026 by rpki-client