Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: /1EUQEZRAiGqaT/lwmQIaHrMpu6kJpMn3b0aIZDH1vY=
Subject key identifier: 27:C1:10:7E:6A:87:A1:0D:FE:1C:D6:78:34:72:CF:03:28:C1:80:06
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 019D2B17692B350C9F6225DB84D26B8A50DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 159A
Signing time: Thu 26 Mar 2026 17:00:47 +0000
Manifest this update: Thu 26 Mar 2026 17:00:47 +0000
Manifest next update: Fri 27 Mar 2026 17:00:47 +0000
Files and hashes: 1: 1eykC-2BnVsWo7Ye-BCUzkQkUoQ.roa (hash: XORzzia+v0TQle6S3eSeTmbfXijHFXJwl9VwUUmAcRw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: q9OLfKdJgub2hdS2r53iYBWWzyUb88sITp5FonsQWks=)
3: NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa (hash: 3elpIcyAaRbsEU++I8EIRcmrePMiDX7Ycf8Xs+7sNy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:69:2b:35:0c:9f:62:25:db:84:d2:6b:8a:50:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Mar 26 17:00:47 2026 GMT
Not After : Mar 27 17:00:47 2026 GMT
Subject: CN=27c1107e6a87a10dfe1cd6783472cf0328c18006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:f1:f4:1c:1d:21:8c:09:f8:27:46:37:7a:
9a:b6:4a:c7:10:06:39:99:ab:db:23:b8:1f:6c:c6:
27:2c:52:b6:10:8b:9b:1d:af:1f:2d:e3:f7:58:25:
ef:ab:53:3c:a9:8e:6e:35:ae:1c:f8:dd:7c:4b:48:
a3:f2:11:99:ba:a1:9e:85:80:38:13:14:8e:20:56:
1e:21:a5:27:c1:93:93:f5:45:67:6e:ac:e4:91:ed:
87:3a:2c:14:98:53:e3:81:94:b4:6a:d3:60:f6:e0:
52:da:25:c3:10:56:e9:69:21:04:fe:6e:5b:85:be:
82:18:f6:95:5a:c7:85:cb:cb:5b:9f:ca:8d:fe:c0:
a3:d9:9f:07:e0:59:e3:8b:8b:3c:44:83:38:bb:db:
50:04:64:af:98:2f:3f:6a:97:0b:5d:a4:64:6f:1d:
2e:9f:af:4e:f6:39:e2:6d:ed:df:03:72:09:a3:29:
42:7d:3c:2f:b3:c2:fc:3d:61:56:50:84:f8:66:1d:
3c:f4:d5:10:1a:22:c7:9e:65:d7:7e:bc:fb:90:19:
24:99:83:3d:02:e8:d1:83:2e:16:35:72:97:9e:90:
23:9b:a7:36:4d:f4:df:0b:d1:68:c1:06:dc:15:e4:
bd:b9:6c:aa:05:d7:28:0b:b4:8c:66:2a:6c:79:85:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C1:10:7E:6A:87:A1:0D:FE:1C:D6:78:34:72:CF:03:28:C1:80:06
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f0:a7:30:19:8e:30:35:94:de:08:95:b8:85:ee:11:87:bf:
c7:86:13:14:35:18:e3:18:bc:12:66:10:78:4e:1b:9b:03:8f:
ea:f3:b5:5e:e6:dc:01:83:e8:37:54:c3:2c:c6:45:18:cf:df:
3f:7b:61:f0:ab:47:ec:d8:86:d5:a5:6d:8f:f2:e9:78:30:7b:
5c:46:42:d1:43:c9:f2:c8:ab:e8:5c:ea:f8:44:de:0a:f7:6b:
ff:07:39:d4:67:98:c8:a4:7b:1d:31:17:fb:dc:6a:f8:4a:ef:
c2:a2:7d:6c:02:7a:f2:1e:ea:7c:8c:5b:1d:2e:4a:41:a1:77:
c3:d0:8a:e8:24:e9:09:ce:2d:c8:8f:52:2c:ca:b0:0d:56:83:
bb:e6:53:2f:8f:dd:eb:80:99:b3:1a:9f:76:66:4b:e3:e0:70:
10:3f:6d:39:5e:06:50:de:c6:e5:64:35:4b:9c:20:20:0f:83:
3d:95:ac:12:d4:05:3a:b4:67:69:66:85:d4:22:33:fc:9d:72:
46:aa:e4:55:25:04:f4:1c:f9:47:7d:74:41:8f:2c:e4:3b:32:
60:36:f6:49:56:da:5a:d0:4f:f9:d7:68:61:6f:9b:7d:18:22:
f3:60:72:87:e0:45:31:83:8d:a1:98:6e:79:4a:0b:f2:db:9d:
0b:68:2c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:06:09 2026 by rpki-client