Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier: N++t5VM932zjemgTSDKAZUSzf6mW2ZZSjGzilrJWREc=
Subject key identifier: 65:C5:A4:BC:05:55:3B:90:11:4F:CA:08:88:17:CB:B1:2C:00:82:D4
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 019D2A3BCC9910E8B380D707A852ED41BA40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 13:00:55 +0000
Manifest this update: Thu 26 Mar 2026 13:00:55 +0000
Manifest next update: Fri 27 Mar 2026 13:00:55 +0000
Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: Q35Yal5TC106g0zuutxiZnmR/qqIx+qcizsJaHMrEwc=)
2: PpggW4Z2oygN7a5ac0zakE7Pnfo.roa (hash: 22hm4c5Osenfb32qhznGQLzeTvo39sm+f1ynIhOO3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:cc:99:10:e8:b3:80:d7:07:a8:52:ed:41:ba:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Mar 26 13:00:55 2026 GMT
Not After : Mar 27 13:00:55 2026 GMT
Subject: CN=65c5a4bc05553b90114fca088817cbb12c0082d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:36:0f:f9:c8:70:8f:2b:a2:17:2b:6d:31:eb:
f4:e7:30:fe:1d:6c:8e:cb:0e:ed:a7:87:bb:db:74:
d6:3e:6a:c0:d5:8e:87:b9:12:68:d7:80:5d:fc:85:
79:3b:eb:82:0a:04:02:03:50:3b:5d:a4:6f:a6:b6:
c7:17:b7:35:d7:e2:19:82:c1:5d:da:f4:84:03:84:
2c:9e:1d:ac:d0:f0:61:71:1d:fd:37:fd:ec:61:e3:
e3:2d:49:e8:0a:53:33:42:0e:4e:1e:2e:b3:44:38:
09:43:50:da:14:b1:22:f9:32:77:d5:a5:d7:d2:ca:
88:48:07:b7:fa:3a:fb:77:12:e8:bd:a9:3c:21:c3:
9e:8b:a1:44:39:e1:2e:b5:c4:80:55:13:d3:4c:0d:
e7:11:55:22:12:93:45:30:88:44:f6:b9:8e:08:cf:
63:fc:a7:87:26:67:19:aa:61:a1:01:a5:f3:81:9c:
47:b4:fa:b8:bd:5a:58:97:c7:b0:14:05:63:13:9f:
d4:47:f7:95:80:4e:b2:f2:fb:af:17:ac:eb:c1:a9:
55:2f:af:1e:fa:77:7c:1f:b3:4d:c9:87:33:0c:d8:
f0:7a:63:1b:b4:27:9b:ad:96:cf:61:17:84:c8:fb:
8b:ce:a2:6a:18:51:6a:c0:37:64:19:d2:de:7e:d0:
cd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C5:A4:BC:05:55:3B:90:11:4F:CA:08:88:17:CB:B1:2C:00:82:D4
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:e8:d4:b0:ea:1f:47:79:76:ff:5a:29:ba:78:f2:d5:1f:bf:
ad:95:39:29:91:1e:15:38:31:d2:c9:5e:f2:88:6a:bd:0b:05:
41:1b:a4:6b:fa:70:f7:b8:19:04:38:68:6a:2c:df:24:78:20:
30:04:ba:34:f0:e2:bf:c0:28:4d:9a:28:82:e4:55:ce:74:43:
ab:ab:3e:06:91:62:b2:39:93:46:66:09:1a:4e:24:00:c1:35:
30:3d:c2:c8:7e:19:6d:7f:15:aa:e4:1b:a5:eb:be:0b:f2:3b:
6f:0d:96:52:50:d9:cd:4c:96:8c:30:82:e6:e8:92:1d:60:ab:
d1:90:1d:0a:13:19:b8:df:0c:a1:01:43:b2:68:ab:63:89:d5:
e0:08:3b:07:b3:9c:fb:91:3a:50:1b:bb:2c:d0:97:7b:20:a4:
f1:40:d8:30:4e:75:bd:c4:df:bb:e9:f1:1c:c9:5a:02:33:3d:
89:b0:51:bd:89:c9:95:0f:44:8b:16:db:9a:e9:7e:2d:ac:93:
e6:01:7f:1f:9d:d4:4e:94:dc:cc:ad:12:98:6e:cf:f8:a5:af:
1f:ad:18:9a:e1:90:97:15:b0:bd:46:ce:d9:97:63:92:a5:9f:
90:11:5b:bb:e7:f6:72:41:dc:52:ee:94:82:e9:32:54:19:8b:
8e:84:ef:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:50 2026 by rpki-client