Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier: j6iND0X+EqJT/5BTSsFgSBodyxIAH4YSOkhLJhDbmzg=
Subject key identifier: 4B:0D:FD:52:B7:89:A5:D4:83:3F:DA:18:F3:B2:8A:25:75:F6:27:41
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 019D277201B90F9F18F28FB4AC911EF206E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:16 +0000
Manifest this update: Thu 26 Mar 2026 00:01:16 +0000
Manifest next update: Fri 27 Mar 2026 00:01:16 +0000
Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: XgTyt0Ys22O9Sl8CHCkzPDQHw6Vh51h3hdq/GdR20Q0=)
2: azb1_WO3_kwPuSAgYoVTIRPk0go.roa (hash: 1/nAUytly79O0AERwCaGs88tFerHBFBw3HoH4Qov+gM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:01:b9:0f:9f:18:f2:8f:b4:ac:91:1e:f2:06:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Mar 26 00:01:16 2026 GMT
Not After : Mar 27 00:01:16 2026 GMT
Subject: CN=4b0dfd52b789a5d4833fda18f3b28a2575f62741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bd:03:10:14:71:9e:0a:45:ae:be:92:02:9a:
78:2f:27:8f:db:f6:e6:d1:86:a2:30:0b:15:8c:55:
f0:7b:b8:91:bc:8c:38:40:8c:35:e2:21:67:f9:11:
ed:8c:43:51:07:70:97:aa:da:03:88:95:9e:88:53:
86:dd:01:1f:9d:d1:01:8f:c4:31:b8:f5:58:f9:9f:
8e:80:e8:00:fd:ff:33:db:07:d2:a0:d9:43:f6:bf:
b1:77:75:7b:ee:31:23:c6:fa:00:28:9d:c0:30:f4:
dd:37:ee:49:a9:b0:65:dc:6c:7e:f1:42:ec:4a:b6:
b6:72:1d:76:3d:f0:de:35:18:3c:ec:83:09:75:c4:
04:82:ec:9a:c1:0c:1d:57:68:9a:00:df:fe:19:a3:
55:fb:1f:b7:e4:8a:ae:80:24:57:0f:6f:57:5f:a9:
ba:81:4c:11:32:07:81:14:4f:84:1a:a5:a8:cc:7d:
52:1d:b2:c6:8b:6f:ba:cb:e2:a1:23:29:9a:86:c3:
4b:40:8a:c6:9a:65:fc:84:d2:e6:e6:4e:ed:08:5e:
a5:84:ae:3d:d7:3e:f5:17:90:65:a8:ed:1e:ae:03:
93:b5:54:99:d3:ca:29:f2:d1:d2:04:fa:2f:4c:a0:
c4:fb:28:2d:55:ce:c1:3a:d0:6c:cc:dc:8f:c8:45:
5a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0D:FD:52:B7:89:A5:D4:83:3F:DA:18:F3:B2:8A:25:75:F6:27:41
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:88:16:fb:eb:06:45:ee:93:86:27:da:4d:2a:58:a9:9e:97:
c3:64:0c:3a:5c:a7:e7:0a:52:2d:f7:58:d6:81:38:4e:f7:ed:
5f:68:d0:32:f6:86:ef:60:c6:b2:b2:61:9d:e2:20:20:9d:87:
44:01:a6:1c:3a:78:6f:fd:aa:41:7d:08:4d:fa:cb:b3:45:97:
c1:f5:57:53:d9:6c:a0:93:6d:d7:dc:de:9e:ae:25:3b:bc:34:
23:df:9e:c9:e3:f5:ec:2d:31:9c:94:19:74:e1:10:9b:d4:0c:
70:d8:6f:12:06:24:57:52:87:b9:08:f3:94:6b:a9:fb:19:07:
b6:b4:1b:95:3b:0e:82:06:c5:50:a0:27:77:03:5e:57:00:46:
a5:3e:f7:80:8c:b8:d0:ea:33:92:cd:a9:81:54:a1:74:bc:0d:
0f:eb:1f:4c:17:44:5e:c1:4e:93:9a:97:a8:ec:7e:0a:45:6d:
01:e5:4a:f0:55:37:46:18:32:14:06:81:cc:3b:82:23:07:7d:
d6:fc:4f:44:6a:80:bc:28:c4:ae:fa:d7:1e:ea:d2:6b:db:45:
1d:bb:c3:60:90:9e:37:43:f4:6e:80:41:e8:f8:dd:88:78:4a:
cc:d6:9a:60:35:ae:03:49:90:28:cf:2d:72:b6:e3:80:e7:de:
e9:7f:0e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:50 2026 by rpki-client