Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: z9qe6lwan6CVFTClmb/wYkqOrvfhtWw/NfVfo1KChKg=
Subject key identifier: AB:F1:68:18:76:F2:83:74:75:8B:FB:F3:BD:2D:34:AD:EF:5D:17:DA
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 01A0CB23333988A7597D1B681BA38E4BD8C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 1A3C
Signing time: Tue 22 Sep 2026 22:01:16 +0000
Manifest this update: Tue 22 Sep 2026 22:01:16 +0000
Manifest next update: Wed 23 Sep 2026 22:01:16 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: IS1i011WfjVXwWFOjzVeaqqTkcJu9B1aVA2e8/Pz+M4=)
2: bfmoXJzoDdpM9K6Axg6RQ6PcK7A.roa (hash: z7weft+bC6v8Gp+CtsE+ZYXb+kZuusFeVfZLKQMSX24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:23:33:39:88:a7:59:7d:1b:68:1b:a3:8e:4b:d8:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Sep 22 22:01:16 2026 GMT
Not After : Sep 23 22:01:16 2026 GMT
Subject: CN=abf1681876f28374758bfbf3bd2d34adef5d17da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:1f:b9:a6:46:7f:63:db:3f:92:a4:12:77:
80:5a:17:8f:76:6c:d2:0d:c7:b2:4a:04:f3:7e:db:
30:1d:4a:bb:a7:7c:3d:e8:37:cb:0c:51:1a:13:0d:
ae:48:a9:d7:0d:ac:7c:59:b0:bf:7c:80:9f:00:c4:
66:6e:2c:30:e7:90:16:b5:a8:6d:d2:a2:4c:37:f8:
70:31:32:4b:c6:79:38:6e:44:9a:0a:1b:f5:46:09:
85:67:b5:49:b1:cd:a6:9f:5a:21:d7:8e:0e:41:59:
d1:c2:cc:72:fa:14:fa:b9:9e:de:30:0b:da:3e:7b:
40:18:2f:eb:86:7a:43:ba:12:14:f0:99:08:02:be:
71:17:44:32:ca:0b:cf:b6:93:d6:fa:ca:29:5e:b6:
e4:df:4c:e4:05:26:9e:56:55:87:c2:d7:28:90:83:
3e:f7:d4:48:9e:7f:b1:ff:05:13:5c:3b:0a:a5:27:
0b:cf:8f:bd:f0:52:01:28:af:62:69:5d:7d:72:f7:
8b:91:d0:3b:0b:97:68:96:ba:94:96:75:f6:45:1b:
45:36:7d:6d:42:87:44:f4:24:c7:1e:18:58:d4:04:
d2:36:5a:5d:97:47:66:b9:2b:a6:68:ec:a3:0d:6f:
e0:ba:43:9b:6e:b5:a8:c4:2d:c0:02:e9:ea:44:77:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F1:68:18:76:F2:83:74:75:8B:FB:F3:BD:2D:34:AD:EF:5D:17:DA
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:01:e2:a9:ee:6a:49:e8:32:5a:fe:f0:3a:ce:83:c1:88:d4:
d7:62:a2:d9:a0:d9:bf:7d:7a:be:13:09:aa:05:80:80:0f:fb:
97:da:f7:89:e1:77:6c:e8:c3:a8:11:9a:e4:7c:a0:6c:96:3e:
37:a4:ef:1f:5f:fa:e9:f8:5d:3b:8f:86:d9:c8:a6:4a:f0:d1:
22:5f:e3:8a:0a:1e:0e:75:6f:86:42:e0:f5:96:29:06:74:5a:
15:e4:7e:fc:88:5d:10:22:03:27:5d:5b:f2:58:c0:df:24:d1:
43:87:7b:d4:1c:1d:ff:44:f2:af:b3:5d:c5:67:3d:a4:e6:bf:
91:a1:f3:a6:76:d3:0d:cd:7d:20:32:58:2c:4e:cd:f2:c0:96:
3a:24:70:d9:21:16:d5:bc:3f:21:bd:a8:d3:32:81:25:20:f7:
18:f8:dc:34:2c:b4:8c:04:d2:01:7e:66:b2:31:9b:26:79:aa:
86:99:51:9b:0e:13:b2:42:fc:c7:3e:0e:c8:60:f3:46:30:e3:
71:a8:fc:f8:b7:19:b0:d6:4d:66:5c:d2:bf:e5:80:35:f9:54:
87:60:85:cf:b8:93:f7:4f:98:a6:24:49:82:70:0f:25:78:d3:
2c:09:c2:d6:bf:1c:a1:47:4b:72:54:be:02:79:bb:57:11:a1:
ff:8e:d5:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:54:25 2026 by rpki-client