Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
File: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json)
Hash identifier: N56L5D2ykzcJjzW22VFCR5C0HtCmMEtsQLh3lWi9RWM=
Subject key identifier: 32:69:00:39:3D:95:69:7F:30:97:81:29:AD:51:F9:41:7F:27:C7:12
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial: 019D2C2A78C8B59B1E675726FF3DDF5FE469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
Manifest number: 0F58
Signing time: Thu 26 Mar 2026 22:01:14 +0000
Manifest this update: Thu 26 Mar 2026 22:01:14 +0000
Manifest next update: Fri 27 Mar 2026 22:01:14 +0000
Files and hashes: 1: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: iekljgfk607luBhJjFY1T2/tUKoJ9lsu1OrNVveIk08=)
2: JrMdq8W_Js69e7PdI-Ct-5yCpDo.roa (hash: g0z8GxHhTedzHVjLXB39V9yW7Ab4PjyuLrPENMUU7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:2a:78:c8:b5:9b:1e:67:57:26:ff:3d:df:5f:e4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Validity
Not Before: Mar 26 22:01:14 2026 GMT
Not After : Mar 27 22:01:14 2026 GMT
Subject: CN=326900393d95697f30978129ad51f9417f27c712
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:bf:fd:85:03:55:6f:d1:5e:2c:a9:73:3d:95:
56:e6:93:32:1b:92:15:02:9f:18:a0:53:46:69:43:
e0:0f:6a:56:b2:7b:c0:ae:a6:68:a4:db:71:f7:7c:
77:f5:34:c1:94:b5:d2:76:cd:dc:64:66:cd:61:25:
8c:88:c6:14:5a:ac:5a:27:da:af:b4:9b:66:d7:bd:
47:2c:dc:5a:9b:a7:c1:23:b0:1d:ea:f4:69:37:f3:
60:0b:bf:dc:8a:bb:e1:6c:94:3b:c4:5b:ca:2e:ea:
b8:c3:93:c2:11:80:a2:84:53:53:d3:d5:a2:0a:6d:
fb:2c:9b:33:f4:7a:7a:fa:63:26:12:a8:9e:a0:93:
ca:46:dc:5a:c3:9a:07:ed:cd:e8:76:04:b8:d5:e2:
b9:89:5a:e3:cc:21:a9:37:02:ee:7e:fb:c2:9d:a3:
35:f0:9b:58:43:44:87:bb:cb:67:f1:f2:5e:f7:bb:
7a:b8:94:f5:86:01:de:32:a0:5e:5a:b5:e8:9c:73:
c2:ec:e5:a4:85:f9:fa:0d:81:2c:24:61:53:7c:41:
2e:84:4b:ef:8c:e2:56:31:3e:7f:36:01:1c:e7:c4:
71:10:26:4a:3b:a5:c6:2a:c7:94:6b:c0:d5:88:d1:
ae:85:72:bd:fc:15:e2:98:d8:76:55:f2:aa:41:cb:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:69:00:39:3D:95:69:7F:30:97:81:29:AD:51:F9:41:7F:27:C7:12
X509v3 Authority Key Identifier:
keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:19:0c:9a:71:2a:02:aa:da:fe:9b:47:19:3b:bb:fe:aa:45:
0b:9c:3f:a4:6e:c6:ac:40:a1:03:87:c5:c2:ac:0b:1e:a3:13:
f3:5d:fc:9e:b2:ec:1b:84:37:79:fc:b5:d4:e6:b4:58:ab:a7:
29:d2:bd:2a:71:a0:24:40:6b:3d:70:15:bf:48:14:41:2f:80:
c3:2c:1d:ff:85:52:59:64:a7:fc:4f:be:22:fd:ef:87:83:73:
51:4c:24:41:57:d9:7e:73:ad:d0:47:80:98:c9:7c:b1:b8:93:
f3:d4:17:2a:10:19:91:b4:8a:7c:87:a0:a9:bc:9d:58:57:69:
a2:7c:16:fe:5d:ca:49:74:86:6c:24:df:6f:ee:f5:fb:d4:88:
bf:1d:43:7b:a2:4c:fa:1e:86:cd:d7:dd:1b:7d:ac:c2:d0:24:
81:5a:7c:34:c7:b4:96:2f:26:16:cf:23:08:3a:54:df:c5:c5:
4b:19:ac:ea:9d:bd:50:8f:16:38:01:87:22:f5:7d:47:69:6e:
61:37:e7:4b:21:25:9a:24:61:a3:b8:7e:1e:4e:c2:05:92:e5:
e3:5a:e7:99:a6:83:f4:54:53:e3:25:d2:a0:82:e0:13:16:08:
c1:dc:8d:f4:ae:8f:b7:f9:c3:8f:f4:56:98:18:ea:80:3f:6c:
41:c8:bb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:36:33 2026 by rpki-client