Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File: 4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier: O4LNgjS1vRNcQd4Kgf9IC35Y8sMPtseombUwME+0Xto=
Subject key identifier: 82:8D:66:9D:37:CC:73:84:1B:9C:B7:D5:19:82:7F:77:E8:64:3E:34
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer: /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial: 019D269669E8F79D427F2B745676C2FDF95D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number: 0BC9
Signing time: Wed 25 Mar 2026 20:01:24 +0000
Manifest this update: Wed 25 Mar 2026 20:01:24 +0000
Manifest next update: Thu 26 Mar 2026 20:01:24 +0000
Files and hashes: 1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: gtKHzYo91DO9/QEyBUOzE4Xl+hVFCyb8SuUZD5/f89c=)
2: NCPy2V4MTJIxw6Eeglyn4k9-c8k.roa (hash: e6t60cVHGwxB0yMWg7tXzy3uxaUsUhD5hfxLuTTJHN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:69:e8:f7:9d:42:7f:2b:74:56:76:c2:fd:f9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Validity
Not Before: Mar 25 20:01:24 2026 GMT
Not After : Mar 26 20:01:24 2026 GMT
Subject: CN=828d669d37cc73841b9cb7d519827f77e8643e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:e3:a4:52:05:1d:19:c0:d5:bb:92:ee:02:
d0:e5:f2:62:6f:71:31:07:3c:e5:7a:e2:47:7c:d4:
f4:c7:a8:d7:53:c3:59:4e:ae:cc:ea:36:19:1a:ce:
e4:ec:e2:e2:df:ec:1e:b1:6c:f9:9f:a8:cc:d0:82:
5e:77:52:13:f9:f5:11:e4:ba:c7:98:a6:04:d3:2a:
d9:9d:b1:0e:8d:15:a5:9c:95:fd:e9:98:a6:75:d1:
14:1a:29:66:b9:4f:c6:a0:1c:47:01:60:b8:cf:70:
8d:15:88:21:3b:70:d4:ea:02:12:e4:e5:c5:f1:d2:
49:37:95:c9:f1:2b:15:f3:d1:7c:c9:d5:c2:6b:e5:
60:e6:36:3f:e9:fc:5c:e6:dc:ac:a1:8d:0c:c3:77:
c8:b2:13:42:23:52:7a:b5:8c:3b:71:5c:30:dd:e8:
dd:ac:83:0a:a7:97:5a:c8:1c:59:88:5d:ba:36:17:
01:6f:7e:ca:37:de:a5:38:3d:e5:d2:21:e0:ec:60:
41:80:b2:bb:81:44:3d:f5:13:f8:2d:98:99:b4:c8:
a3:de:16:07:52:78:d7:2f:23:b2:1a:84:f9:a8:a7:
b7:10:38:5e:43:a3:eb:e7:91:2d:f7:94:4b:8c:a5:
1b:57:a5:f0:2e:8d:fe:a9:e3:99:e6:0a:ce:2b:05:
e7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:8D:66:9D:37:CC:73:84:1B:9C:B7:D5:19:82:7F:77:E8:64:3E:34
X509v3 Authority Key Identifier:
keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:e2:0f:4c:d0:8b:bb:d0:fa:64:86:17:73:50:ea:a3:d9:c8:
9a:19:c4:8a:fb:9b:cd:47:5d:33:3a:f0:3c:5c:6b:a0:98:04:
56:17:f2:55:9c:27:e5:8a:ba:60:72:ff:b8:68:fa:60:23:6d:
dc:9e:86:3e:9e:19:2c:0a:1e:1e:64:e2:84:c2:ea:4f:3e:8e:
1e:9d:d9:7f:6e:c1:70:ce:7d:71:79:7d:9a:37:ac:24:10:a6:
0f:4b:d8:35:a5:55:cc:30:5f:22:98:e4:9e:58:ab:b1:d4:0e:
04:c8:81:57:17:a6:f2:3b:4e:50:ee:5d:d8:45:d1:a7:52:cd:
44:3e:13:33:09:ca:61:c0:04:13:9f:d6:90:2a:56:b7:18:79:
e2:5c:f7:b8:76:44:4b:5b:35:ac:0a:9f:cc:0c:4e:ab:a4:91:
4d:99:6c:34:cd:61:12:8c:c7:2c:04:52:f4:fe:06:bc:6d:54:
8c:37:ed:43:ad:15:ab:4d:76:24:55:31:aa:36:c5:16:ff:7b:
b7:c8:0b:6a:d6:20:bb:9b:4f:80:ea:e4:3b:3c:51:16:2b:68:
e3:94:74:19:73:ff:09:d9:ba:c5:10:2b:ad:aa:4b:29:95:ab:
93:72:85:75:51:6b:d6:c9:93:f6:5b:07:06:e9:1e:17:4f:09:
59:7d:13:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:19 2026 by rpki-client