Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
File: 4Fx81akbRFhmDQcOBHf75pXBKws.mft (raw, json)
Hash identifier: tF59GZwY1X7NxNzQ0CBYO5CkHetPQ1qN4xzXn6DCWZo=
Subject key identifier: 30:9B:A4:C9:8D:46:EC:A5:8E:29:CD:7A:00:87:0E:3A:76:7C:0D:CD
Authority key identifier: E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
Certificate issuer: /CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Certificate serial: 019D33757E0D6445F8B243B8BC805FBE9A7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
Manifest number: 0F0B
Signing time: Sat 28 Mar 2026 08:00:31 +0000
Manifest this update: Sat 28 Mar 2026 08:00:31 +0000
Manifest next update: Sun 29 Mar 2026 08:00:31 +0000
Files and hashes: 1: 4Fx81akbRFhmDQcOBHf75pXBKws.crl (hash: V1wmTagk9YXJ+dIFvFByJ5J6XShFCpUppF0Hyimq6So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:75:7e:0d:64:45:f8:b2:43:b8:bc:80:5f:be:9a:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Validity
Not Before: Mar 28 08:00:31 2026 GMT
Not After : Mar 29 08:00:31 2026 GMT
Subject: CN=309ba4c98d46eca58e29cd7a00870e3a767c0dcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7a:ef:b6:23:d1:e3:18:bb:c5:2a:61:c4:b2:
b7:65:b5:e0:cd:4f:db:32:cc:9b:ce:51:6a:e5:fc:
09:0d:7d:1b:3a:7f:f3:2d:97:25:cf:39:6a:20:27:
56:9a:a0:54:bb:1b:96:4f:38:3a:40:8e:cc:a2:79:
ff:e7:06:78:54:84:0d:59:0f:54:5e:3c:68:44:1e:
57:9c:bb:30:d5:a3:ff:85:1a:00:3c:d1:aa:e3:ec:
c1:14:f5:dd:10:09:f1:a2:d7:b3:03:2d:ae:9c:1d:
d5:c5:c4:9e:20:a3:8e:48:ea:12:af:c4:c5:7f:65:
92:00:23:4d:3b:26:82:16:44:cb:fb:27:0d:8d:3d:
9d:a9:d2:fb:24:2e:cf:0f:be:ed:04:fc:c5:98:5e:
c7:a9:3b:1a:ff:35:d0:c6:38:08:01:26:9e:9f:23:
ce:aa:fc:4a:fd:ff:96:3e:eb:55:65:f9:96:62:3f:
1d:b0:ad:42:a8:dd:8f:df:f5:9e:e7:36:28:95:df:
0e:03:53:52:85:4b:6b:3e:10:06:77:f2:25:39:52:
ed:cd:7a:22:0c:18:a0:74:9f:95:f2:4f:0a:53:2f:
88:c1:30:eb:e7:d1:e2:43:49:dd:00:ef:87:67:4e:
fa:4f:e7:03:9d:41:00:f8:ed:f7:35:7d:7f:4d:71:
58:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9B:A4:C9:8D:46:EC:A5:8E:29:CD:7A:00:87:0E:3A:76:7C:0D:CD
X509v3 Authority Key Identifier:
keyid:E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:08:f4:ae:c8:09:03:75:d6:a9:3c:b0:ef:6d:07:5b:39:ca:
58:0d:cf:e3:4b:90:cb:09:b5:e5:5f:f2:3a:54:4c:ec:e2:f7:
50:ad:bf:0a:e7:17:16:a1:ab:83:9c:75:e1:4c:77:bf:e0:3a:
0f:38:3b:f3:18:14:cc:c4:34:93:7c:57:c3:89:72:43:51:ef:
84:3d:cb:d2:95:14:80:7a:ab:44:3b:84:c5:09:6a:b3:43:b3:
0f:39:0e:85:69:2e:ef:cf:2f:c5:59:a6:65:14:6f:0f:ae:54:
8c:73:28:90:36:ad:e6:01:89:3f:6a:f0:93:48:7d:e8:10:4c:
17:73:ca:45:5c:bf:1e:fd:5f:19:d4:0b:c8:ce:4c:1c:89:1a:
0d:0a:27:4f:90:ce:8f:e7:2f:b5:02:f0:e7:8a:46:f7:4c:db:
c6:6a:2c:2d:f2:dd:5d:9a:82:a5:db:49:a4:ce:3e:3f:de:47:
d3:25:f1:ff:09:7b:ed:45:dd:4d:e6:0c:67:f8:e5:6b:32:a3:
fa:a5:e8:72:ce:6e:29:ac:61:74:e3:50:75:22:43:d2:af:5f:
6e:d9:86:f4:ff:16:8a:e1:1a:d3:8f:7f:8f:42:a1:33:31:c5:
82:f3:ae:ff:40:f7:ea:e5:41:23:bc:5d:44:35:e2:a5:35:9f:
a3:99:10:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:16 2026 by rpki-client