Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
File: s4-3-dr7t_J8ZSqEbTf7nimODho.mft (raw, json)
Hash identifier: 0l/Sf/2s2a8jNN92bE4jCEAhCP2EiWMurJgyaT3NXTg=
Subject key identifier: 85:42:7F:23:BA:9A:CD:C0:FA:95:44:E3:F5:72:14:64:56:F6:CC:82
Authority key identifier: B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A
Certificate issuer: /CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a
Certificate serial: 019D27043AD2E1F16826CFDB90E3AA978181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
Manifest number: 02FD
Signing time: Wed 25 Mar 2026 22:01:21 +0000
Manifest this update: Wed 25 Mar 2026 22:01:21 +0000
Manifest next update: Thu 26 Mar 2026 22:01:21 +0000
Files and hashes: 1: s4-3-dr7t_J8ZSqEbTf7nimODho.crl (hash: 1oV+C8lRRHfb2HSTXBDTMJ9SlLOaU+aGBVrBCLQOtbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:3a:d2:e1:f1:68:26:cf:db:90:e3:aa:97:81:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a
Validity
Not Before: Mar 25 22:01:21 2026 GMT
Not After : Mar 26 22:01:21 2026 GMT
Subject: CN=85427f23ba9acdc0fa9544e3f572146456f6cc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:dc:d6:b2:ee:99:2d:be:a8:2e:09:27:4e:08:
12:c7:41:05:74:5e:76:da:b4:c4:07:f9:df:83:1c:
25:eb:41:5b:e6:1a:c4:e1:7e:88:12:c0:59:ec:b3:
88:38:c8:e7:58:b9:5c:09:b8:89:73:50:13:ed:dd:
05:4e:b5:5c:63:72:9d:1f:72:39:65:71:e9:f3:a2:
b4:a8:1d:83:3a:c2:63:d9:98:7a:97:b0:fd:4c:93:
10:d8:84:2e:c3:15:4f:91:94:a9:4a:b1:0b:83:ec:
c6:23:c9:9d:31:3b:81:c2:7b:82:2a:d6:2d:f7:db:
c8:3a:69:9d:43:0c:7f:9d:ca:73:f0:ae:a5:34:19:
fd:5f:d3:1c:2e:fd:38:70:b3:d8:03:d7:82:6f:3d:
3f:52:90:d3:d5:94:0c:9c:cd:e5:bf:74:5c:cb:6f:
36:6e:37:41:c7:73:77:08:cc:d9:ca:d5:6c:c2:05:
30:1d:7e:64:d3:c5:3f:88:0a:68:6c:b5:f4:80:fd:
54:e5:b7:df:34:5b:68:02:92:46:61:c4:f0:da:92:
e5:5e:5e:8a:de:08:da:4d:fa:42:a0:bd:73:b7:c9:
78:56:5a:17:0b:f4:48:5f:8c:0b:9a:f4:6a:11:dc:
f7:1a:4e:39:d7:ba:95:8f:ad:e3:bd:8a:a4:85:8a:
59:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:42:7F:23:BA:9A:CD:C0:FA:95:44:E3:F5:72:14:64:56:F6:CC:82
X509v3 Authority Key Identifier:
keyid:B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:47:57:49:14:49:ad:de:9f:9a:0a:34:5d:1f:ca:f9:8f:02:
c0:9c:56:61:ca:48:ae:00:27:b2:7d:ed:5b:04:2e:85:74:8d:
c5:1c:11:aa:b4:87:b7:1f:9e:f7:82:2b:92:b2:7e:52:3a:29:
ef:f0:c6:1d:22:5c:fd:ee:1d:31:cb:04:37:c1:83:71:fd:0a:
6e:fe:e6:09:c3:0c:27:19:46:77:67:74:c3:70:4f:16:a2:4e:
bf:f4:91:6b:0c:44:8e:63:42:0a:e9:83:a6:ad:79:c8:40:16:
35:46:ad:cd:ce:a9:54:f1:ae:74:c0:f3:4b:c6:f7:bb:49:a7:
c2:83:08:01:24:ce:5d:a2:66:b9:4b:c9:a8:e9:d8:4d:e7:0d:
fa:18:d9:3e:57:03:d3:8e:c9:c3:c2:41:a7:a5:8c:05:c4:0a:
9c:e4:06:de:5f:d1:ec:2b:1a:26:4b:d5:2f:34:a8:8c:c5:ef:
5a:be:c2:52:74:9c:c7:34:0d:ba:46:d9:3e:62:b9:ff:7e:10:
5b:8f:6d:8c:66:b8:dc:38:4b:07:fe:5f:cf:00:b9:0c:28:df:
5d:49:a4:e9:ac:b6:ce:d2:b7:1b:71:fe:24:e8:4f:fd:a1:99:
56:ab:6d:ac:d5:c9:b8:6e:7b:96:43:ac:56:58:fb:6a:3d:b2:
9e:9c:06:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:44 2026 by rpki-client