Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: w9nYuwDkpYldb1wVFsCnO+MYua017bX/OFi7b/MwMIE=
Subject key identifier: 8E:0E:D4:C6:B8:F0:2C:6A:21:68:FC:76:86:49:FB:34:3A:87:81:A3
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 019D26286B1C403119C49D1B4DDE7150863B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 13E2
Signing time: Wed 25 Mar 2026 18:01:16 +0000
Manifest this update: Wed 25 Mar 2026 18:01:16 +0000
Manifest next update: Thu 26 Mar 2026 18:01:16 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: v0jJ0HKix0njgSqyXoRqrEDtDn4hJAWANzPtLAx6ypU=)
2: _2TjfVrCZo9B9qI9aJsIIj8RhAk.asa (hash: M/M1jD58xwzQOF/SAmLUskPi5EjlgSXMDxr/H80Jdlc=)
3: i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa (hash: w8gWgmF42nIarY6Emvf1fz/wNEfrJpHlyRzan9puCwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:6b:1c:40:31:19:c4:9d:1b:4d:de:71:50:86:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Mar 25 18:01:16 2026 GMT
Not After : Mar 26 18:01:16 2026 GMT
Subject: CN=8e0ed4c6b8f02c6a2168fc768649fb343a8781a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3c:bc:67:57:7c:3b:b9:a1:2a:53:de:6a:94:
3c:44:5e:08:e4:2c:14:a1:07:27:a2:25:fa:30:38:
d4:15:a8:b1:74:7c:f7:92:51:b3:2d:12:97:71:3a:
e8:c7:e7:82:c3:c8:90:98:d7:64:7f:53:f3:c8:e8:
c3:67:08:58:1c:55:40:08:e1:0f:0b:a9:87:a8:09:
27:87:33:ba:40:c4:90:0e:03:68:93:bc:28:ee:0d:
cb:8e:e3:79:88:cb:6d:a2:d9:8e:1d:ef:67:0a:51:
04:2c:c8:5b:42:44:e4:5b:b6:19:73:ee:92:50:49:
06:99:e2:30:02:cf:a3:70:52:62:cf:55:0a:b7:8a:
10:bf:d7:87:fc:1e:f3:d5:f7:6a:e9:16:34:eb:ce:
ba:4c:cd:5c:f6:b2:50:0a:23:5f:24:3e:63:33:a2:
b3:22:1b:8b:b5:9a:9a:cb:be:c9:f3:f4:71:0e:8d:
57:8d:f5:5c:f3:e5:04:69:54:7c:f3:37:e2:34:a1:
de:27:75:19:19:54:c2:7c:f0:00:89:42:d3:08:c0:
33:8d:ec:a7:a6:a7:85:5b:df:1d:0a:67:81:86:26:
2f:46:e8:b2:ed:95:1d:94:80:df:af:2b:f6:64:01:
ab:a0:af:a7:74:1d:b0:d9:50:56:8a:0d:95:c9:96:
94:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0E:D4:C6:B8:F0:2C:6A:21:68:FC:76:86:49:FB:34:3A:87:81:A3
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:82:d6:72:b9:e6:a2:2f:0e:88:dc:00:b3:df:6e:1f:cd:bf:
8d:6c:99:f3:ca:b7:c8:0d:42:8f:a1:ac:d2:96:0f:c7:4b:25:
93:80:30:fd:16:1e:fb:85:28:be:36:9b:65:5d:3c:04:be:64:
42:a8:09:48:ab:f1:f5:cb:03:41:e2:db:04:4d:48:8b:4b:ba:
d4:43:50:a9:2d:cb:06:14:ce:3d:9f:61:24:44:76:a8:2e:36:
ee:2c:70:87:f7:46:fd:b5:14:de:70:9a:17:f7:fe:da:92:de:
d4:9b:0e:bc:06:7f:e1:df:fe:1a:cc:0b:29:f0:b9:2a:f7:6f:
88:c0:23:b9:e6:69:c4:22:4c:8b:fb:e7:e2:28:b1:c5:3b:9a:
f0:7d:57:fd:87:f2:86:4e:b0:e7:42:9e:f0:c9:97:03:6c:82:
ef:e6:5b:98:69:9e:b9:f9:21:ea:44:67:f4:f5:69:61:74:a2:
52:01:f3:bb:9c:03:bb:0a:9a:f0:89:a0:a0:ba:ae:bd:46:6e:
fc:d5:cc:57:27:c1:cd:84:ba:0e:c9:a9:01:bb:13:b7:39:bf:
f4:0f:37:b0:37:b5:b8:08:28:0b:74:99:fc:63:ff:5b:af:e1:
28:d9:cc:fe:a6:69:b0:97:b7:4b:ee:ab:bd:fe:ea:46:f2:cd:
59:15:35:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:38 2026 by rpki-client