Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier: bLNnPC2ZFgbU7PhFxKMcqaW78xUV9877ckQGCvc2c1U=
Subject key identifier: 4A:30:68:95:34:E4:96:84:04:97:2B:39:08:30:2C:B6:A2:CF:08:19
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial: 019D2929AF4171F1A950A0DC2C148DF1FFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number: 0843
Signing time: Thu 26 Mar 2026 08:01:30 +0000
Manifest this update: Thu 26 Mar 2026 08:01:30 +0000
Manifest next update: Fri 27 Mar 2026 08:01:30 +0000
Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: 13YgWVZ5mzJBD0BQfyluFaogi6VFbf7tkRoAGX/hji0=)
2: 5sTdJeQvv6vdlppaT-0bRjKtxg8.roa (hash: b/QRqgkGgU7MnJZfBiHqIddmWZWJFgjkkxrAF3+M/Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:af:41:71:f1:a9:50:a0:dc:2c:14:8d:f1:ff:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Validity
Not Before: Mar 26 08:01:30 2026 GMT
Not After : Mar 27 08:01:30 2026 GMT
Subject: CN=4a30689534e4968404972b3908302cb6a2cf0819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d5:9a:8e:2a:72:5d:1b:ca:28:69:8c:f2:c4:
c5:58:4d:fa:9e:89:f1:2e:93:b7:a3:27:8c:f2:d3:
e9:ea:b9:0f:5a:c3:bd:ce:42:46:e8:cf:71:3d:69:
e5:af:0e:4c:fa:f3:6e:05:14:22:bc:eb:bb:e8:95:
0a:7b:63:3d:c7:a7:c7:19:50:b0:b6:3c:15:a3:34:
31:2f:b2:0b:5d:95:b1:70:24:21:f1:b8:b7:11:9d:
88:d3:39:5e:26:0e:a4:da:9e:59:c0:f1:16:ad:69:
b3:7f:a6:c6:9b:14:ee:78:cd:34:9c:66:81:c5:3d:
51:42:66:b2:9a:1b:c7:52:69:29:ef:b7:8c:34:d7:
8c:20:c6:c6:87:80:57:ab:c4:8c:3b:7e:a0:15:bb:
eb:34:0a:e5:d9:3d:eb:0b:00:82:ec:0b:39:66:a1:
d1:fa:d7:c5:2f:78:d0:a1:ae:4b:53:15:a7:a1:b6:
96:db:0b:ba:ff:4f:99:95:36:33:a8:5c:01:42:b6:
57:6a:d3:ee:82:f7:4f:c0:00:2c:ae:a3:68:94:3f:
f1:79:32:f7:ab:ef:8e:76:21:ce:62:d8:f0:9e:f9:
38:ec:15:15:bb:e1:e3:43:d6:77:00:2a:43:08:e5:
a6:80:db:12:e3:87:57:3d:c1:5a:55:18:bf:45:07:
5d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:30:68:95:34:E4:96:84:04:97:2B:39:08:30:2C:B6:A2:CF:08:19
X509v3 Authority Key Identifier:
keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:83:13:25:c3:1e:2a:d6:f9:38:7e:cb:9a:35:64:8c:b3:e3:
49:c6:b3:1e:db:c8:32:0b:12:2c:44:85:cc:d6:da:21:4c:ca:
3f:1f:60:4e:2e:da:07:56:ed:6d:d9:b7:ad:dd:fb:0b:6e:14:
8e:c4:27:80:c4:f1:1f:4f:f7:fb:03:80:d0:29:48:06:32:ef:
62:ac:b8:a0:6b:33:34:4c:66:7e:6d:b1:c1:49:53:7b:3f:6f:
9c:ac:2a:7d:72:42:f3:da:64:11:52:2c:c3:d6:69:3e:5a:4c:
63:31:af:05:92:d7:35:bd:79:aa:50:82:01:98:f6:9c:cc:c1:
f1:6f:69:3d:e7:e1:fc:bc:b2:b2:1d:3f:46:02:52:f9:a1:df:
5a:56:77:75:f8:46:9b:99:55:c7:f8:8a:ed:29:00:8f:15:c2:
72:55:52:8b:0b:11:de:77:0e:ae:3b:6c:bd:02:a3:4a:14:91:
04:6c:37:77:9a:e1:46:41:37:08:56:2e:5f:46:88:3d:07:2c:
35:e2:92:a7:2a:86:6e:eb:f0:c5:5d:62:20:72:9f:a7:95:94:
17:1b:43:40:7d:9f:00:de:40:a2:be:8e:0c:9c:49:64:f7:e2:
9d:4b:10:f3:76:4e:56:32:f4:cd:f7:ea:41:c2:94:de:fc:90:
b2:d9:7b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:11:07 2026 by rpki-client