Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File: 4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier: mE2vu4JncOzdIAXJdm21AgGjlcF3U452ZLSzUK0WL54=
Subject key identifier: B1:19:3B:14:1B:7F:97:D2:91:D8:8B:94:65:BE:D1:34:0C:FA:7F:E6
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer: /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial: 01A0CF6D4C3A6ECA01C7DD8DBAE730E5CFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number: 1A6D
Signing time: Wed 23 Sep 2026 18:00:41 +0000
Manifest this update: Wed 23 Sep 2026 18:00:41 +0000
Manifest next update: Thu 24 Sep 2026 18:00:41 +0000
Files and hashes: 1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: /NVsmrPq1jJk6vEmE2Q4Qam4WOSvfILL5sIK9eO/nPY=)
2: EC4GBb1LJjJ7pV8_x0txKCEIXSg.roa (hash: 9oW73pfxOP8M7veC/PL5Kk4ZUA5njttoIdfA+gSwRO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:4c:3a:6e:ca:01:c7:dd:8d:ba:e7:30:e5:cf:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Validity
Not Before: Sep 23 18:00:41 2026 GMT
Not After : Sep 24 18:00:41 2026 GMT
Subject: CN=b1193b141b7f97d291d88b9465bed1340cfa7fe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:e5:e2:d6:e0:7d:4d:4c:a2:76:e1:c9:d3:
f9:1d:a0:46:b5:21:2e:c1:97:0b:c2:3a:ad:18:87:
c6:1e:cc:8b:72:29:fe:f7:b5:b5:9b:57:c3:73:b0:
19:59:9f:41:ef:38:a2:47:82:04:b7:68:95:00:bd:
6f:cb:f3:22:79:e6:9e:e4:23:c4:f3:af:b0:0b:68:
25:01:02:81:f3:47:db:c6:3e:45:66:42:89:e9:77:
90:91:70:62:e8:2c:7c:94:46:b7:09:26:01:f4:bc:
1a:8b:81:ea:bb:f1:71:10:8b:04:92:d4:50:95:f7:
d5:67:18:4c:ef:8b:20:d8:a5:19:1f:ee:2b:85:2a:
1a:20:59:e9:77:7f:43:f1:8f:18:8a:a4:47:c2:41:
f2:d2:03:8f:dc:8a:1f:30:35:0f:ff:2e:80:75:19:
23:fc:ca:64:84:a5:c4:af:de:c3:f2:57:34:a7:29:
5f:ea:36:f2:96:45:51:f0:a3:4c:84:3e:53:45:47:
5c:2a:ce:5c:7e:ad:6d:af:94:5a:d3:eb:1f:5e:f6:
49:b3:71:aa:90:bc:bf:e8:be:ea:0a:1c:80:26:e6:
d3:8b:af:f2:99:aa:90:0a:88:99:7f:8d:b5:b4:c0:
2f:4d:9e:33:73:8f:f8:85:26:2a:ae:0d:ef:9f:48:
1c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:19:3B:14:1B:7F:97:D2:91:D8:8B:94:65:BE:D1:34:0C:FA:7F:E6
X509v3 Authority Key Identifier:
keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:34:3c:81:56:8d:b5:9f:d4:2f:c1:f6:0b:59:5b:dd:e8:6d:
c1:f5:f7:8e:b2:c8:93:af:c2:8a:b2:3f:a5:4b:32:84:0e:eb:
3f:60:74:10:6a:84:0d:e7:95:b0:ac:19:38:05:50:3c:0d:19:
1b:50:d3:14:fd:9a:14:ab:33:29:79:b0:89:64:54:54:85:52:
12:95:0d:f8:c4:b2:30:2c:b3:67:e7:cd:b3:44:12:df:03:e4:
3a:41:28:d1:48:eb:e4:4c:41:0a:35:d0:b1:4b:e5:13:16:22:
d1:39:b7:a9:65:4d:ea:44:d2:26:45:6d:45:f4:5d:4b:03:dd:
92:ea:93:31:4a:45:4d:c5:7c:2a:30:5e:18:5d:b7:b6:6e:40:
c3:01:39:b8:4c:2d:a6:6e:e1:17:e8:b1:84:f3:93:93:60:31:
d7:ca:3c:23:06:6e:58:23:cb:fe:56:ed:48:96:87:57:46:d6:
a1:8f:0e:98:49:85:45:59:2a:2c:e2:f4:f7:c5:d8:58:4a:17:
f6:0b:5a:a3:b1:df:e0:a9:76:ca:75:bd:5a:bf:8a:5c:f2:bb:
45:51:14:8d:3c:81:8f:39:cd:03:87:15:46:14:04:bc:d5:28:
43:de:81:9e:5b:5c:18:f1:5e:ca:47:5a:08:6f:b5:fd:ac:bb:
f5:73:18:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:21:54 2026 by rpki-client