Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
File: 4T3UuB8fx53U2mQo-cKgJzRX_wY.mft (raw, json)
Hash identifier: +8+CIMnlxp7KQbYzqVqCjudYyPhqooB3qKdKe0bTQy0=
Subject key identifier: 96:18:7E:FD:43:FD:F5:2F:17:38:23:FE:0C:81:32:34:3A:94:24:17
Authority key identifier: E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
Certificate issuer: /CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Certificate serial: 019D284DA09812F5D26C8F53D9960F9A28B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
Manifest number: 0700
Signing time: Thu 26 Mar 2026 04:01:09 +0000
Manifest this update: Thu 26 Mar 2026 04:01:09 +0000
Manifest next update: Fri 27 Mar 2026 04:01:09 +0000
Files and hashes: 1: 4T3UuB8fx53U2mQo-cKgJzRX_wY.crl (hash: 8+sD6+yoOTGMUM6dIkSB9dVKhybFjfjoKCpCowryy2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a0:98:12:f5:d2:6c:8f:53:d9:96:0f:9a:28:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13dd4b81f1fc79dd4da6428f9c2a0273457ff06
Validity
Not Before: Mar 26 04:01:09 2026 GMT
Not After : Mar 27 04:01:09 2026 GMT
Subject: CN=96187efd43fdf52f173823fe0c8132343a942417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a4:a1:aa:20:d0:c3:e2:0d:e4:61:a1:d8:8a:
5b:d1:ed:be:94:bc:14:6b:b4:6e:d3:f9:c9:82:cd:
8b:0e:77:f0:21:03:12:16:8a:d2:77:e6:76:0c:74:
f4:6c:ac:2b:42:5c:87:3a:f3:c1:2c:84:ae:04:ee:
8c:f8:01:19:d8:5d:b3:d3:cf:f6:79:3d:0f:c0:60:
ed:3d:b9:7e:1d:db:d3:27:96:6a:e0:da:86:b1:5d:
c3:35:38:32:94:59:de:a0:84:ee:c2:b5:c8:57:03:
da:c1:84:7c:c3:96:04:97:79:a0:2d:28:5e:38:14:
44:9b:72:26:40:a9:79:ab:4a:00:1f:6a:f8:b5:32:
97:60:e9:54:7e:af:47:0f:80:86:31:43:ad:07:09:
cc:85:18:8c:af:6e:ee:b8:74:40:2d:f9:07:30:c8:
13:be:1f:95:88:d6:d6:23:77:25:be:44:4f:3c:a2:
0c:cb:a3:9a:85:08:af:2e:9c:e8:a4:61:06:b7:db:
d1:78:d8:bd:0e:16:50:bd:46:a3:7b:ed:dd:91:11:
2f:48:3f:3c:f3:35:a2:4a:d0:7e:39:04:22:f4:01:
f9:c3:2b:c4:80:5a:d8:2e:7a:4a:e5:b1:8a:bf:fc:
bb:01:f9:f1:db:58:37:d7:73:31:15:51:97:83:17:
19:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:18:7E:FD:43:FD:F5:2F:17:38:23:FE:0C:81:32:34:3A:94:24:17
X509v3 Authority Key Identifier:
keyid:E1:3D:D4:B8:1F:1F:C7:9D:D4:DA:64:28:F9:C2:A0:27:34:57:FF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T3UuB8fx53U2mQo-cKgJzRX_wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/0b5bd7-603b-4a5c-8a98-d563959d277d/1/4T3UuB8fx53U2mQo-cKgJzRX_wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:65:a9:dd:3e:1e:41:4c:8f:43:ad:2e:cb:75:c7:be:05:77:
64:e5:2f:72:b6:8c:d0:6b:4d:f3:7f:74:e2:d3:cf:b1:88:46:
ae:a7:1b:82:ca:33:2e:c8:08:0e:b7:8d:a0:09:8f:8e:dc:f9:
8c:5c:16:07:b5:16:a5:81:1f:ea:47:d9:15:b0:33:a2:39:3e:
5c:d9:9b:46:a9:f9:89:f2:d2:fb:88:ee:ad:6b:86:1a:8f:50:
bc:97:04:10:86:22:44:e8:5e:df:26:c5:b7:7f:f4:98:79:e2:
e2:9b:f4:da:58:27:0b:2d:89:28:7e:8b:7f:22:a9:77:dc:d6:
b9:74:d2:91:af:1e:41:95:6a:cc:7c:50:fe:80:b7:c3:fa:22:
68:39:17:f9:a1:1e:30:94:35:bc:4d:a4:f3:e3:39:41:a6:ad:
7c:a6:fd:de:f4:44:97:00:50:41:e1:db:f8:ac:fc:4a:92:41:
a9:2e:5a:1a:86:61:e8:2e:04:49:b3:93:11:6a:a5:65:17:52:
2f:0a:90:4f:0c:5c:92:a6:60:e5:1d:41:d1:f8:05:2c:82:9c:
e2:c5:dc:72:ec:9b:c2:1e:a8:38:2e:1d:9d:db:d5:a0:7f:73:
42:a4:30:ab:38:25:99:c5:22:8f:88:84:46:05:2e:ec:52:6e:
20:39:b4:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTaCYEvXSbI9T2ZYPmiizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxM2RkNGI4MWYxZmM3OWRkNGRhNjQyOGY5YzJhMDI3MzQ1
N2ZmMDYwHhcNMjYwMzI2MDQwMTA5WhcNMjYwMzI3MDQwMTA5WjAzMTEwLwYDVQQD
Eyg5NjE4N2VmZDQzZmRmNTJmMTczODIzZmUwYzgxMzIzNDNhOTQyNDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KShqiDQw+IN5GGh2Ipb0e2+lLwU
a7Ru0/nJgs2LDnfwIQMSForSd+Z2DHT0bKwrQlyHOvPBLISuBO6M+AEZ2F2z08/2
eT0PwGDtPbl+HdvTJ5Zq4NqGsV3DNTgylFneoITuwrXIVwPawYR8w5YEl3mgLShe
OBREm3ImQKl5q0oAH2r4tTKXYOlUfq9HD4CGMUOtBwnMhRiMr27uuHRALfkHMMgT
vh+ViNbWI3clvkRPPKIMy6OahQivLpzopGEGt9vReNi9DhZQvUaje+3dkREvSD88
8zWiStB+OQQi9AH5wyvEgFrYLnpK5bGKv/y7Afnx21g313MxFVGXgxcZNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYYfv1D/fUvFzgj/gyBMjQ6lCQXMB8GA1UdIwQY
MBaAFOE91LgfH8ed1NpkKPnCoCc0V/8GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFQzVXVCOGZ4NTNVMm1Rby1jS2dKelJYX3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wYjViZDctNjAzYi00YTVjLThhOTgt
ZDU2Mzk1OWQyNzdkLzEvNFQzVXVCOGZ4NTNVMm1Rby1jS2dKelJYX3dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8wYjViZDctNjAzYi00YTVjLThhOTgtZDU2Mzk1OWQyNzdk
LzEvNFQzVXVCOGZ4NTNVMm1Rby1jS2dKelJYX3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2Wp3T4e
QUyPQ60uy3XHvgV3ZOUvcraM0GtN83904tPPsYhGrqcbgsozLsgIDreNoAmPjtz5
jFwWB7UWpYEf6kfZFbAzojk+XNmbRqn5ifLS+4jurWuGGo9QvJcEEIYiROhe3ybF
t3/0mHni4pv02lgnCy2JKH6LfyKpd9zWuXTSka8eQZVqzHxQ/oC3w/oiaDkX+aEe
MJQ1vE2k8+M5QaatfKb93vRElwBQQeHb+Kz8SpJBqS5aGoZh6C4ESbOTEWqlZRdS
LwqQTwxckqZg5R1B0fgFLIKc4sXccuybwh6oOC4dndvVoH9zQqQwqzglmcUij4iE
RgUu7FJuIDm0bw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:29:07 2026 by rpki-client