Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier: E9N62efSoNP00TOT2wzfaq0oO7sc+i843wXf6uK1FPQ=
Subject key identifier: D6:77:6E:1B:58:9B:B0:E3:A3:07:08:B9:7C:4D:A7:A8:FE:D5:E1:20
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial: 019D28171EE1E3F15CB5F53E1CF420F4044E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 03:01:37 +0000
Manifest this update: Thu 26 Mar 2026 03:01:37 +0000
Manifest next update: Fri 27 Mar 2026 03:01:37 +0000
Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: sheWWYRlISySqIJmPITXfEFUZcpuagbJOZfMPueL5YM=)
2: KrzOKl1qlDpYWxV-juWfSYeX7Gg.roa (hash: sm+bvfJZr3b8QZ7AAJ4wrF+UsO9vk0OydT19C79k6CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:17:1e:e1:e3:f1:5c:b5:f5:3e:1c:f4:20:f4:04:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Validity
Not Before: Mar 26 03:01:37 2026 GMT
Not After : Mar 27 03:01:37 2026 GMT
Subject: CN=d6776e1b589bb0e3a30708b97c4da7a8fed5e120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0b:7f:5c:d0:88:d1:55:e8:bc:53:4f:c5:73:
23:1f:f2:d4:40:b5:48:01:b4:1f:36:a6:e6:13:a4:
46:8d:13:ed:d4:66:a0:d0:8b:93:01:48:b0:3a:f3:
a7:72:49:db:6e:66:74:82:12:6b:9b:e2:cd:bf:08:
8d:27:c5:dd:cc:df:2e:e9:d7:62:0f:03:63:93:6f:
f8:81:ad:5e:0c:9f:02:ba:a3:15:9f:b0:9d:9b:3d:
50:10:d2:8e:8a:c8:1e:ed:30:68:08:ab:2f:f1:3e:
44:6b:46:41:16:1e:3a:53:92:d5:9b:6f:fc:c9:db:
d4:5f:52:4d:d2:af:53:27:7b:05:f3:59:97:ba:7a:
30:5a:4d:45:22:8f:35:d1:c5:1c:a4:df:b1:a1:16:
41:57:58:91:9a:4a:49:36:60:59:0b:15:0a:79:71:
82:02:05:a1:29:d8:56:ed:06:42:a0:3c:c4:0c:3f:
8c:b6:87:f4:64:7e:34:a8:a4:88:fb:50:f9:80:43:
ba:36:33:08:4a:86:7e:ab:71:ad:26:6f:af:6c:bd:
07:c1:aa:da:07:52:e4:5e:33:40:84:fe:40:74:ca:
a8:c1:fd:16:ff:70:d7:bb:01:48:25:da:37:6a:ea:
b7:59:ef:e2:ac:76:54:f1:5e:dc:2d:49:76:d3:93:
5a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:77:6E:1B:58:9B:B0:E3:A3:07:08:B9:7C:4D:A7:A8:FE:D5:E1:20
X509v3 Authority Key Identifier:
keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d6:18:5f:2d:33:a9:2b:10:22:01:10:1d:b7:f9:66:f6:78:
e7:70:8b:24:a1:f5:3d:12:a0:c1:6f:36:11:71:fa:cb:da:29:
90:b8:ec:5b:67:ef:c9:af:77:47:73:01:41:4d:bb:34:09:73:
e5:f4:91:aa:80:cf:56:76:6c:49:07:3e:71:79:0d:28:8b:29:
d5:6e:3a:3d:59:9a:e8:8b:f5:93:cd:07:d3:b1:6f:e8:fd:50:
63:c0:34:e1:c6:75:a7:f6:c4:14:5c:7b:8f:e4:31:c3:87:9e:
0b:aa:4c:2f:42:df:9c:6c:98:96:65:e3:e2:57:07:95:2b:d0:
37:a1:82:ee:9c:1d:60:33:48:3e:58:16:e4:e9:c7:43:86:18:
13:79:77:35:6f:52:f4:77:ab:4e:11:df:6b:03:6f:f3:13:5e:
40:a6:14:b9:16:bc:fe:7d:fc:f0:db:6f:d8:bc:38:17:bc:cd:
5c:e0:fc:80:0d:2e:30:ac:7c:5a:8b:ec:be:17:9a:fa:1d:7c:
27:7d:f2:b3:bf:42:85:90:fe:d7:60:88:19:a3:72:00:2e:da:
d3:8b:e1:16:5e:32:6c:d7:71:9f:90:58:10:49:5a:c6:4f:3b:
be:28:b5:fa:ac:c0:b4:94:5b:93:30:05:96:14:b7:1a:43:19:
b7:60:cd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:09 2026 by rpki-client