Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
File: 4qEN5v-uWQQnJEoDND22asVkJ1o.mft (raw, json)
Hash identifier: EgfARzTOU+bp65yxIEvrYbk0ugwyXKKWBiE1rhOL2GU=
Subject key identifier: EC:1E:80:39:0E:06:82:68:FD:96:74:D8:A7:F7:97:A4:5D:06:D8:17
Authority key identifier: E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
Certificate issuer: /CN=e2a10de6ffae590427244a03343db66ac564275a
Certificate serial: 019D3262C5F07D500BBC0F52BE7F2AE0445F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
Manifest number: 15D4
Signing time: Sat 28 Mar 2026 03:00:27 +0000
Manifest this update: Sat 28 Mar 2026 03:00:27 +0000
Manifest next update: Sun 29 Mar 2026 03:00:27 +0000
Files and hashes: 1: 0gIiALe6pz1IQicIRlap9JpEjvk.roa (hash: a8WIdauJpV7mniv+m0G3DWtScZS35ac1cb7lSAK0pD4=)
2: 4qEN5v-uWQQnJEoDND22asVkJ1o.crl (hash: mGm1NjSLBwnojA9Dbq5FBkIJVuAx1/m/mqT4WQ9wRBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:62:c5:f0:7d:50:0b:bc:0f:52:be:7f:2a:e0:44:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a10de6ffae590427244a03343db66ac564275a
Validity
Not Before: Mar 28 03:00:27 2026 GMT
Not After : Mar 29 03:00:27 2026 GMT
Subject: CN=ec1e80390e068268fd9674d8a7f797a45d06d817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dd:61:0b:64:cf:0e:93:98:e2:d7:60:6b:be:
0e:9a:75:2a:88:e6:3d:2a:d1:e2:1f:77:d8:cd:d7:
97:4b:23:42:ed:b3:0f:37:b8:19:a3:94:82:ae:66:
c6:a8:bb:75:56:8c:20:5e:eb:26:35:bf:7c:5c:89:
a3:e4:0b:b3:1f:61:30:21:68:43:fb:ca:78:46:7c:
09:9a:c1:e1:97:a7:ae:da:7f:05:92:e0:cf:fb:64:
0f:b7:b6:b0:1e:79:8f:8d:2f:15:28:78:2c:61:73:
2e:a6:07:f7:50:cc:7c:ec:a3:e0:3a:73:6c:17:f5:
d4:24:64:06:6a:9f:e4:df:92:4e:11:e6:a7:7a:e7:
99:5a:bf:74:75:63:d9:e1:f5:cd:6f:7f:70:c9:c3:
6c:93:59:bb:06:7a:69:21:ce:3d:6f:49:48:29:4f:
99:c0:bb:c2:9d:25:30:1e:57:b4:9c:c8:8b:c2:13:
77:c4:23:b8:bc:c7:f4:ab:ce:a3:8e:dd:53:9e:ab:
24:7e:5f:c6:b9:2e:95:1d:e3:39:e6:e7:56:d3:e8:
9e:09:4c:3e:ab:76:9e:35:a6:7b:53:8f:be:62:d1:
00:ec:6b:94:88:f2:69:33:a9:89:7c:aa:4d:dc:de:
a0:37:9b:b8:a0:10:80:3f:e0:1d:b2:a5:49:00:99:
a0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1E:80:39:0E:06:82:68:FD:96:74:D8:A7:F7:97:A4:5D:06:D8:17
X509v3 Authority Key Identifier:
keyid:E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e0:ef:51:ce:e3:6b:69:6f:a4:f6:95:66:76:92:6b:f8:94:
9c:bf:ce:13:aa:f6:1d:d8:82:e7:3c:34:9b:3f:da:5d:51:b8:
96:8b:6c:83:aa:e6:78:0c:a8:e9:73:5a:bf:bc:f9:36:73:90:
84:68:f1:43:6c:a7:0d:8f:56:19:57:d3:ad:ca:d2:c1:12:9a:
1b:e0:63:47:31:46:c3:3b:f9:29:23:7d:b7:c1:a8:a2:13:4f:
3d:4e:a6:29:0d:b7:31:5d:5e:f6:61:b3:a3:d5:c3:cb:ca:d3:
c9:23:f9:1a:15:d4:98:0e:f3:58:10:50:cc:29:16:31:29:f9:
f6:70:23:66:9c:55:8d:5c:2e:14:4c:17:00:5b:1e:e4:a1:54:
df:bd:ff:73:cd:e9:32:56:2c:d4:12:32:8d:b4:5d:5d:96:a8:
b3:c6:3f:4a:05:d4:7d:77:f4:02:38:f9:b4:0d:83:92:d1:9c:
dc:a1:43:fc:81:96:b3:d4:b7:28:9d:29:53:6d:61:ec:58:69:
a6:c4:50:fa:de:9c:26:86:49:39:8f:4b:8a:2e:7f:80:37:a4:
cb:df:bb:af:de:31:7a:3d:17:8b:0b:67:40:85:90:4c:1f:3a:
d3:fa:20:55:f2:fa:dc:4d:a1:3c:e9:09:7a:a9:a1:c1:b6:09:
4f:ef:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:02 2026 by rpki-client