Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: /pLyszmJogknsmasLG4JsLvVxUs5kmtrYt4kqJBNCW8=
Subject key identifier: 60:41:F9:C4:69:38:C6:91:CE:22:6C:E3:38:CB:EA:F4:B5:65:44:E0
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 019D269645F4B5224BFB9036B83FEFE99908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 0BE1
Signing time: Wed 25 Mar 2026 20:01:15 +0000
Manifest this update: Wed 25 Mar 2026 20:01:15 +0000
Manifest next update: Thu 26 Mar 2026 20:01:15 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: BsX/RB0pcFQ6oGVFlb772GwDiXwb0IWfgHeEcfbuKNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:45:f4:b5:22:4b:fb:90:36:b8:3f:ef:e9:99:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Mar 25 20:01:15 2026 GMT
Not After : Mar 26 20:01:15 2026 GMT
Subject: CN=6041f9c46938c691ce226ce338cbeaf4b56544e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:99:1f:f7:94:be:f1:d7:98:64:42:9d:49:45:
8d:ad:98:f4:6c:ec:4f:a9:1a:01:b0:13:51:aa:4b:
7a:3b:ab:63:66:87:cb:39:2d:1f:ac:7a:58:65:5d:
9d:76:c1:65:08:0d:16:ab:2b:7e:eb:e1:ea:97:88:
8a:4d:9f:b9:59:ca:0b:5b:df:1f:40:fa:22:f7:aa:
45:96:5f:be:1a:3d:75:a9:d7:5a:98:ce:ef:d0:4b:
db:9f:8e:6e:4b:bb:c1:92:e4:60:31:0a:70:07:a1:
e2:cd:33:e7:1b:63:09:52:e2:0b:af:77:55:07:e0:
23:ec:00:3c:6d:24:52:f6:47:87:07:9e:d8:6f:7f:
fa:50:3f:02:03:2a:eb:fe:5a:27:82:9b:7d:ff:1f:
cd:9d:6d:1d:5c:aa:85:4b:d3:82:27:fa:24:c9:ce:
db:a8:8e:02:42:93:e9:6e:a3:86:4f:94:a8:47:59:
45:40:5e:a3:f5:2a:f0:30:c1:f6:22:b0:f6:2c:2e:
5d:c3:59:99:1d:57:2b:b1:b4:9f:90:f6:05:5c:aa:
7d:fa:b1:ed:21:64:64:9b:08:66:c6:71:04:e5:d1:
52:f0:e5:2c:03:c5:49:e1:2e:c0:11:9a:76:55:2f:
f6:14:64:80:a2:94:1f:cb:89:5c:de:e1:3e:a1:8d:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:41:F9:C4:69:38:C6:91:CE:22:6C:E3:38:CB:EA:F4:B5:65:44:E0
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5f:0e:23:6e:57:ad:75:ce:bc:ee:a1:c2:de:31:9a:8e:9c:
dc:ea:3f:ac:47:74:ea:02:47:de:d8:78:20:eb:af:48:94:12:
6d:5b:18:b6:a6:b0:56:38:2f:8a:86:7a:5e:fc:3c:fa:b1:d4:
66:cc:5e:af:a7:82:55:92:23:be:01:28:38:16:0f:26:f0:66:
43:03:8b:c4:70:6c:0c:9d:43:c6:0a:97:19:7f:f8:0f:95:6e:
f6:d9:61:8c:7f:69:46:dd:ab:6c:e8:16:18:e9:96:9e:35:2d:
38:e9:3e:13:05:c2:c8:17:4a:a1:cf:b6:6a:0a:9d:cb:22:08:
ef:41:6a:44:a4:50:e2:9c:42:c8:63:ba:34:5f:76:21:e2:e2:
6d:c5:99:14:7c:e0:c4:4f:8d:43:66:a6:7a:69:f3:78:85:f7:
a5:b0:76:67:27:d7:d1:d4:63:ed:50:a7:d1:3b:24:7f:c5:00:
d3:14:47:cc:18:04:24:d9:5d:29:b8:71:53:79:37:33:bf:05:
02:75:88:02:1b:17:8b:42:2e:ee:78:da:ce:f9:4f:3b:ca:bb:
6a:6a:87:c9:eb:38:01:a5:d7:b9:e2:69:d5:e1:00:1d:ae:b6:
ec:5e:41:da:dc:4f:32:69:c5:e7:5f:bd:42:c9:1f:65:0c:5c:
9a:d2:d9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:12 2026 by rpki-client