Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: 7ng/vMNlr7TnR+HBhMRsVQEclmVzoViHa9BdkkX+omY=
Subject key identifier: AF:11:F4:6F:8E:A9:50:A9:33:87:62:D2:9E:16:37:2B:8A:63:52:9E
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 019D2960B8CF3FBA0F87D089C918C401D623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 1246
Signing time: Thu 26 Mar 2026 09:01:37 +0000
Manifest this update: Thu 26 Mar 2026 09:01:37 +0000
Manifest next update: Fri 27 Mar 2026 09:01:37 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: 2R9+GGoEzesPIF/qXMhteWrK3+IYepR2Q8wWaB5mbqA=)
2: nqVRQY9OL-QYsG10ABRxkJgdhMg.roa (hash: wMAwtClt2rNSLlbeGnfkTll5PRaR6LFumc9JToEyja8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b8:cf:3f:ba:0f:87:d0:89:c9:18:c4:01:d6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Mar 26 09:01:37 2026 GMT
Not After : Mar 27 09:01:37 2026 GMT
Subject: CN=af11f46f8ea950a9338762d29e16372b8a63529e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:de:43:18:c8:f8:bd:4d:9f:a6:f6:9c:f2:34:
b9:b9:a8:af:14:5a:61:f6:4b:97:f5:36:4d:d1:87:
e6:20:8a:8c:82:aa:28:32:b6:7a:19:84:d4:8c:e9:
64:85:e1:09:c4:63:15:d5:b4:3d:a9:63:5d:4b:20:
4a:a8:be:81:0d:96:9b:c8:3d:5a:72:d7:dd:ad:1d:
b9:ab:84:62:26:c2:ac:04:b9:4f:7c:fa:81:a1:f4:
96:73:1b:08:33:96:1c:9a:3b:33:70:60:cb:70:be:
43:9c:54:5b:88:5f:11:56:33:f2:c4:8b:86:1b:1e:
59:77:37:3e:3d:78:53:c3:9b:77:ea:4e:f6:2c:b6:
55:ba:1c:02:1f:e2:1b:07:10:51:14:29:54:4b:3b:
f4:4e:98:a1:e5:c6:46:d2:a4:dc:61:6a:c3:3e:5c:
30:96:63:c3:8c:f5:b1:ea:79:2f:69:28:f2:70:33:
3c:ff:7d:ed:45:0e:30:5c:4a:be:83:f9:62:80:72:
e5:5e:65:aa:7f:b3:c2:d1:16:32:f7:15:cb:ad:5d:
87:47:e2:f0:08:96:9b:e1:d7:ad:01:44:da:89:08:
79:3b:d4:27:26:9f:f1:6b:23:4e:d7:42:90:1d:7d:
15:ae:6a:ac:a6:38:b6:6c:fc:9a:84:4c:5d:8c:43:
f8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:F4:6F:8E:A9:50:A9:33:87:62:D2:9E:16:37:2B:8A:63:52:9E
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3d:32:ce:63:e7:de:9c:15:b5:9d:50:2b:34:20:20:ac:bb:
6d:93:bd:6c:ca:1c:2c:b2:62:8b:96:61:9b:29:7b:62:f8:09:
ff:da:e8:06:9d:3c:1f:1c:33:20:c3:d4:6a:bf:d3:9b:17:5c:
69:af:11:7d:ce:a8:e4:27:a6:79:4b:0e:26:89:06:05:5e:7f:
30:ea:b4:2a:01:95:ad:8f:53:21:de:63:64:6e:d5:c9:db:bf:
e0:f0:9c:26:9f:e6:fc:dd:1f:0b:ad:ea:08:c6:5a:5e:ac:dd:
60:a3:92:68:79:f8:d5:2b:6b:8c:b3:b8:9e:3a:5b:c8:87:02:
5d:5e:59:f7:31:86:96:37:11:93:ad:93:1d:c1:d9:76:d0:a1:
7a:35:b7:0e:2b:46:b1:3b:1f:10:00:77:71:9f:d6:7a:bc:9f:
8f:d0:2e:56:1e:a6:35:70:e3:bc:d6:d7:8b:31:69:2c:23:7b:
cf:ed:46:84:54:f5:49:5e:f0:ed:03:2b:a7:38:4d:aa:d9:f1:
dc:5b:e4:48:7d:6b:6b:2e:e3:d2:8b:a0:62:4a:5b:af:e3:9e:
ab:3b:95:2b:77:17:f1:86:bb:9d:5e:cb:72:cc:dc:89:0a:db:
e1:07:8e:c6:3c:38:99:f3:be:6a:b7:91:f4:8b:79:83:02:ae:
c6:41:53:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:05 2026 by rpki-client