Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: b/Dj67BofstG4/5ijfHlFjR+nyu6jKJl6cfp7waCMxk=
Subject key identifier: 52:A2:36:2E:16:4C:46:A4:36:67:6A:99:91:AF:F7:56:57:3F:5A:46
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 019D265F74A68C31295EF0DB4CFB9A946D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 171A
Signing time: Wed 25 Mar 2026 19:01:23 +0000
Manifest this update: Wed 25 Mar 2026 19:01:23 +0000
Manifest next update: Thu 26 Mar 2026 19:01:23 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: HptPpwDfhwoDFj0hIrJWHnYe1loPJcUiCo4dqkOHhvc=)
2: r2j9KB_d9qlo6DM4VIzlnk-FGnA.roa (hash: EzpW7vs8EG39ibzlPvK/9rhPpBxeklGzxbYhWxFufes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:74:a6:8c:31:29:5e:f0:db:4c:fb:9a:94:6d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Mar 25 19:01:23 2026 GMT
Not After : Mar 26 19:01:23 2026 GMT
Subject: CN=52a2362e164c46a436676a9991aff756573f5a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d7:b4:c7:74:cc:c1:24:af:e9:34:52:7f:04:
aa:7a:b5:c5:78:bd:60:27:b5:32:84:05:c2:ff:97:
b2:31:f1:6b:b6:72:65:bc:4e:16:6f:81:00:96:e8:
ac:fb:90:0a:8f:c5:f2:68:91:5e:3e:c5:36:4c:4d:
83:da:3a:9c:7a:07:66:a1:95:6a:67:8f:88:9b:51:
8b:1b:1c:54:fc:18:77:25:f6:9d:4b:71:e8:82:ea:
49:d0:6d:48:01:23:0d:42:fc:ad:54:c8:38:89:ba:
2c:97:f5:7d:d2:db:48:ce:31:5c:d6:a7:26:a3:e8:
7c:e6:08:01:9f:91:02:71:61:b7:40:86:ed:d1:8d:
f1:9f:f5:06:be:86:24:21:cd:71:79:bf:7d:1b:c9:
e4:f7:33:b9:c9:6d:2f:41:be:d8:30:1f:77:42:65:
16:cc:8d:ef:80:1e:6d:7b:14:a6:bd:eb:6a:75:99:
e1:d9:0a:93:b7:10:47:c2:e3:80:4a:24:c5:6e:5b:
29:45:e6:da:19:f9:9b:51:ad:b0:1c:00:e3:e6:1d:
ed:63:ec:10:6e:56:ef:e8:48:de:e4:b0:d2:3e:49:
f7:68:f8:22:94:8f:d2:16:77:43:c0:3c:3c:fc:f0:
ea:d7:cd:2f:bd:de:32:9e:41:ec:92:af:49:0c:69:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A2:36:2E:16:4C:46:A4:36:67:6A:99:91:AF:F7:56:57:3F:5A:46
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:22:e6:c8:ee:0e:bd:18:bc:7d:c5:38:c9:9c:aa:3d:51:dc:
a2:8e:39:c4:35:7a:8b:9a:8d:43:77:b4:14:ed:20:ad:c0:af:
38:2e:39:6c:3e:e6:c5:2d:fe:58:d7:c1:61:08:bc:34:43:b7:
90:34:62:b9:68:b4:78:8d:d2:bc:44:c7:88:76:73:57:ab:ff:
1a:9b:85:e0:ea:44:97:19:85:0d:5f:de:52:d1:ab:44:a9:fb:
ac:8a:bc:fc:d7:2a:cb:ee:da:8c:a5:2f:94:4c:07:a3:f7:8e:
73:52:4b:f0:dc:d6:e8:1f:66:62:93:d8:80:99:2b:f9:d4:e8:
f5:f0:f2:e1:b6:05:88:ad:0f:4a:53:9b:78:70:92:53:81:72:
4b:3b:cc:09:39:7e:f4:a4:d7:11:98:50:a5:43:89:ab:98:c2:
34:81:95:68:e3:44:74:50:45:55:f9:b6:94:27:85:35:bd:5d:
46:d3:b1:9b:4c:94:dd:db:3c:78:3f:bb:55:b7:44:65:91:21:
ba:cb:c8:6d:94:74:a6:09:be:83:ce:9b:20:e5:dd:df:ed:d2:
91:05:70:46:29:ef:09:af:55:fb:49:23:63:89:0f:4e:39:ce:
fa:ca:2e:64:db:2f:45:a7:4b:7e:de:33:cc:6b:8f:96:2d:fd:
43:2e:3e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:38 2026 by rpki-client