Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
File: 4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json)
Hash identifier: W2/Y+lLeEE4rISJFb9XOrK1uP8TxCy4aahalvRXjVJM=
Subject key identifier: 28:BC:44:CA:72:50:7A:1F:6F:1D:27:83:B3:AB:2F:D5:BD:3F:E4:B3
Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Certificate serial: 01A0D23779A1E0317A382AF5AA9191EB9617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
Manifest number: 07D3
Signing time: Thu 24 Sep 2026 07:00:46 +0000
Manifest this update: Thu 24 Sep 2026 07:00:46 +0000
Manifest next update: Fri 25 Sep 2026 07:00:46 +0000
Files and hashes: 1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: Gohv3Bdg+6OZBXtLh4DvE5Ut3QfSZ+WZ38VTWzT61Ks=)
2: WoJCGFQyPD7fJgWRXTNxxrmi7IA.roa (hash: rPmZbrV7SIsTdeGu/1qJQQ8AkYuLMStM58OYdp4CW6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:37:79:a1:e0:31:7a:38:2a:f5:aa:91:91:eb:96:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Validity
Not Before: Sep 24 07:00:46 2026 GMT
Not After : Sep 25 07:00:46 2026 GMT
Subject: CN=28bc44ca72507a1f6f1d2783b3ab2fd5bd3fe4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:38:9e:32:ac:c5:1d:f0:40:61:c6:d1:43:b2:
91:48:4e:b3:0c:62:12:39:49:75:15:c0:27:3a:4c:
ab:24:1c:c5:2e:ac:b6:27:85:6b:e5:1b:55:7f:cc:
af:b6:63:fe:bf:4b:2a:0a:96:e2:db:45:02:be:e7:
59:90:d3:17:85:d4:9f:a5:36:57:16:c9:5e:bd:e8:
22:a5:7d:cc:83:74:01:6d:c3:74:72:82:4a:e2:46:
bc:1c:27:77:c1:1a:47:21:83:fd:69:f4:15:2d:d4:
e3:26:85:32:3a:9e:2d:9a:c4:76:e5:23:69:21:21:
3c:04:d4:58:0c:55:13:dc:67:fa:1f:7f:56:99:dd:
eb:f3:24:b8:bf:1e:98:e6:ad:d1:ec:b1:20:0f:ae:
63:39:a4:b6:77:af:ce:b4:17:ca:f1:48:b2:1e:94:
3e:9f:ad:ed:81:3c:41:93:61:90:81:83:b9:6f:bb:
37:a5:2a:6d:18:73:ee:98:a0:ee:8c:07:2b:53:ef:
cf:99:e2:ee:14:d3:cb:15:7f:65:f5:c1:8a:14:90:
7b:0b:66:9e:e6:72:34:99:29:32:65:1d:d6:25:71:
36:52:52:9f:1c:0c:31:f3:9a:81:18:12:77:93:ba:
75:b2:4c:7c:6e:16:0f:f4:be:78:e8:e7:55:6f:29:
48:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BC:44:CA:72:50:7A:1F:6F:1D:27:83:B3:AB:2F:D5:BD:3F:E4:B3
X509v3 Authority Key Identifier:
keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8d:87:d1:04:67:12:cb:dc:cf:c4:fb:14:3e:fd:0b:6f:e7:
47:62:b6:eb:63:d8:ef:a2:ed:5b:89:8f:6c:d0:de:30:d1:34:
d4:b7:64:6d:53:fb:67:8d:15:94:57:a3:43:1f:76:fa:73:8a:
f1:2a:5a:76:02:01:2c:50:58:3b:ef:25:3f:79:e3:e4:b6:6e:
af:ae:7a:c8:23:84:0a:75:74:cf:99:15:0e:9b:82:da:28:8a:
2e:28:49:53:ed:8c:9f:1a:38:11:15:42:22:a2:81:57:99:b5:
06:39:24:8b:20:49:5c:ed:14:d3:85:24:61:81:19:48:75:9e:
75:86:3f:c5:9d:ab:b5:b3:f4:d5:22:1e:e1:ca:36:3a:96:70:
62:d0:ac:f3:81:a2:41:dd:50:f9:59:84:47:82:78:d4:38:52:
fd:db:b6:3b:ca:a3:0e:f0:a5:9e:e8:f2:04:e5:7c:e4:84:5e:
6f:97:60:db:cc:c4:d7:c0:98:20:fc:70:0d:64:27:0c:e4:3b:
2d:61:16:7f:34:64:f3:d6:47:cb:6a:e8:fb:da:cf:f8:c0:f0:
c1:38:8b:0d:3b:a3:2d:87:38:7e:a8:77:e4:55:8a:a1:40:f5:
e0:9a:c6:54:a1:84:55:25:b4:29:7f:54:30:bd:64:55:56:ee:
e9:76:3e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:31:37 2026 by rpki-client