Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: VuIgwkMhXf2/BbfiKxVZbRHaDiG6FoBiXZSBFv4Ry50=
Subject key identifier: C9:8D:C2:86:B0:57:88:BD:8D:7E:BE:EB:16:96:6E:44:4B:F5:F5:77
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 01A0D237002B372E879161831C31027D9C0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 07:00:14 +0000
Manifest this update: Thu 24 Sep 2026 07:00:14 +0000
Manifest next update: Fri 25 Sep 2026 07:00:14 +0000
Files and hashes: 1: 102rhK3hZolwzCt7IJfuq8GdQf0.roa (hash: YO/FD+MWLi1I9ePrVvUS7xZGRfMEMrX2LxQRpa4cPxs=)
2: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: gWOz5V9BICCXIOClydH2PT8Vm3YIktxaBN9k7CpjH5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:00:2b:37:2e:87:91:61:83:1c:31:02:7d:9c:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Sep 24 07:00:14 2026 GMT
Not After : Sep 25 07:00:14 2026 GMT
Subject: CN=c98dc286b05788bd8d7ebeeb16966e444bf5f577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:1b:f7:85:ec:c5:05:62:b9:4f:80:81:42:
61:52:a1:bc:d2:e6:ae:89:8e:39:f8:5d:e1:03:a7:
18:c6:2b:34:12:43:15:28:11:22:e8:ba:f8:3c:4f:
8f:40:9b:39:2b:b4:75:a0:4d:3e:85:00:64:e6:00:
52:c6:6e:db:b4:b2:c2:a2:ab:b9:a6:c4:66:2a:cb:
4c:e0:06:85:73:96:21:fb:1e:72:26:7d:cd:24:32:
44:8f:b0:09:0b:d2:95:3d:70:5f:e6:7c:fd:ae:4e:
71:9b:fc:ba:82:9e:9a:0c:4c:07:48:ed:8f:3e:9c:
97:95:6c:c3:2e:87:71:81:03:d4:7e:dc:37:dc:b5:
2b:e0:47:90:b0:5c:5f:10:35:66:32:40:2e:70:81:
58:2a:30:bf:db:f7:f1:58:e9:5c:3a:81:67:3d:4d:
2d:10:c6:6a:14:42:01:e9:5e:d2:27:c1:59:d5:76:
19:e5:b7:5c:ad:c0:c8:ec:2c:91:07:e6:fa:ae:77:
95:1c:ab:4d:1e:9f:20:2a:d6:80:c7:e3:a6:19:13:
54:9c:eb:c2:44:a2:ae:ae:4f:97:6c:c9:a2:6c:a4:
2e:4f:38:9f:17:8c:5b:10:94:31:0e:c3:6a:c5:6a:
83:dd:3b:11:16:44:89:6a:b6:e9:f4:4f:f6:ed:7b:
57:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8D:C2:86:B0:57:88:BD:8D:7E:BE:EB:16:96:6E:44:4B:F5:F5:77
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:48:fa:a1:c9:7a:38:5f:0d:96:6d:3e:c0:5c:ee:e7:31:a1:
8e:46:8f:3e:84:7a:90:4c:15:02:02:d4:e4:1a:17:53:6b:c1:
3c:63:63:95:a5:1f:0f:a5:86:15:86:df:13:a5:6f:51:65:5c:
ce:dd:6d:68:1d:c5:da:a3:c9:8e:cb:dc:80:af:d0:ec:0b:67:
d8:3e:7d:59:29:07:cf:4e:4a:ff:9d:80:2c:e0:4c:4e:0b:f4:
ca:9c:c5:b9:4d:6f:ad:f0:4c:a8:97:74:75:d7:49:09:1d:d8:
cf:13:09:19:fd:a3:24:e6:27:bc:23:86:70:05:d6:5b:4b:17:
56:8c:59:c9:bd:f7:f7:24:7a:e6:14:e4:73:49:fa:4d:b0:6f:
6c:2e:e7:65:2a:31:32:10:0f:38:1d:db:6b:24:8f:68:c8:0b:
33:da:3f:5f:4b:8f:ac:8d:3b:3e:83:f4:0b:89:c1:a9:48:0d:
d4:ee:2b:33:0c:e5:28:92:71:87:f6:76:8a:cb:80:9a:35:f4:
5f:34:7e:9d:0f:23:dc:d7:5a:b2:81:8e:d9:95:38:51:14:ca:
3a:41:39:37:dc:8d:6d:89:df:13:c8:94:cc:a5:d1:cd:41:73:
ef:1a:b5:fa:e3:f4:31:9c:53:c2:9f:36:79:6b:9f:e6:a5:fc:
5d:4d:f4:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:47:00 2026 by rpki-client