Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: u2OQfH+sMRDgfjjFEc+DK8CoVFyr5sbGIW8zNxS3XmA=
Subject key identifier: 79:6B:2A:2F:C8:AD:DC:FE:88:BE:FF:66:D2:90:0D:82:44:47:FD:8F
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 019D25F1205621182099FCBA6820583FC70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 1275
Signing time: Wed 25 Mar 2026 17:00:52 +0000
Manifest this update: Wed 25 Mar 2026 17:00:52 +0000
Manifest next update: Thu 26 Mar 2026 17:00:52 +0000
Files and hashes: 1: nPVHMKh_KfMvRao_vET8GSNdB60.roa (hash: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY=)
2: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (hash: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: qrOLQMIJIniCOAmhzuEJO13YvC+qfSf+wNkn9Php/co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:20:56:21:18:20:99:fc:ba:68:20:58:3f:c7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Mar 25 17:00:52 2026 GMT
Not After : Mar 26 17:00:52 2026 GMT
Subject: CN=796b2a2fc8addcfe88beff66d2900d824447fd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:38:7a:a7:17:bb:72:99:35:92:70:2f:0f:
ec:12:74:63:da:e0:1a:d9:0d:77:30:f4:e9:a4:3c:
ab:a8:0e:a6:3b:5c:57:d3:e5:01:54:2e:0e:29:48:
90:c3:bf:58:39:c4:b1:4a:e8:9a:9b:30:cb:39:54:
c9:08:e2:b3:d2:a5:1a:14:33:0a:87:76:a8:58:85:
67:5e:3c:23:b7:7e:e4:6f:ca:47:34:ff:9e:8b:3b:
d4:29:02:3b:0f:57:52:cf:5c:91:f3:8e:f9:49:fa:
c8:9b:ff:0e:0d:8c:1e:8c:e3:eb:63:d9:6c:66:72:
a7:0b:0d:43:08:14:93:ac:39:6e:69:35:7e:c5:37:
40:1d:74:21:d3:22:f1:79:25:e7:af:94:2a:71:ba:
2a:18:da:2f:8e:f6:4d:f5:ee:a2:79:11:de:a7:22:
6c:85:31:a7:bb:f2:9f:23:c7:53:98:b2:16:e0:83:
7e:bc:d0:15:8b:02:28:95:b6:c2:c8:fd:d6:98:5c:
ee:f1:ab:b4:b1:55:95:2f:35:bb:3d:01:8c:d3:35:
fa:e6:99:a0:8f:9e:f9:59:b0:63:68:bc:e1:ea:bb:
8a:93:63:30:2c:c7:aa:ff:66:2e:ec:f2:f8:ad:1c:
37:cd:4a:fa:55:b9:66:a9:71:5f:78:5f:f3:33:d9:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6B:2A:2F:C8:AD:DC:FE:88:BE:FF:66:D2:90:0D:82:44:47:FD:8F
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:30:07:a0:32:81:ea:f5:49:2e:21:fa:1e:b5:f4:02:d5:90:
d3:71:a4:b8:6e:e6:59:2d:64:c7:bf:71:5d:7f:d6:5c:ad:84:
88:8e:f5:60:14:42:7e:d4:4d:64:63:a2:ec:ef:08:dc:f3:10:
b0:bf:3c:1b:0d:b8:88:50:b2:8a:bf:2a:eb:ce:30:19:2d:53:
3c:b3:0e:5c:e2:65:c2:5c:9a:0a:7c:95:90:af:36:47:4e:d6:
29:cc:41:78:e1:b9:5a:c9:f1:ed:3a:ae:98:5a:f9:80:47:13:
eb:1a:8f:4b:40:6e:64:7e:45:e2:d5:4f:c6:d6:af:dd:29:0f:
17:d5:ec:77:0f:91:b4:65:9a:fb:b1:89:e0:5a:ab:76:9b:c8:
0c:65:29:18:31:02:9a:44:a1:1a:32:8e:0d:24:2a:6d:fb:81:
e3:85:ad:00:77:0c:00:d6:77:1a:83:a3:b3:61:33:b5:11:58:
8e:8e:a2:e4:80:03:e2:08:6a:36:a2:9b:7a:ab:bb:6d:90:24:
16:b0:2c:1d:af:a9:5e:8d:29:d2:ac:2a:8f:11:56:2c:ad:be:
a9:d3:ff:8e:bc:51:f6:c0:e7:7a:80:59:17:b1:37:ab:cb:ab:
22:51:1d:ac:ad:04:f4:4b:5a:5d:05:be:ed:07:71:ee:ab:64:
04:3b:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:59 2026 by rpki-client