Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier: 8JIdz/Z2o4AkxbStgKeS8i01yUOfZfaxO2q2/Wm0orU=
Subject key identifier: 51:81:66:BB:7A:29:0F:99:2C:1F:6C:51:7A:2F:8C:07:B2:B9:A4:B9
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial: 019D27E020E2A268E5EE726470EB15BE0D91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number: 04B5
Signing time: Thu 26 Mar 2026 02:01:33 +0000
Manifest this update: Thu 26 Mar 2026 02:01:33 +0000
Manifest next update: Fri 27 Mar 2026 02:01:33 +0000
Files and hashes: 1: Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa (hash: vf8tQnW7oqoTXI/ZHAP1eVwRqXSdr72IdtoqliIf4Ys=)
2: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: MLhbgazVrBUyWr15FJFH9xSB+blaS+a8E7lDqqobbko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:20:e2:a2:68:e5:ee:72:64:70:eb:15:be:0d:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Validity
Not Before: Mar 26 02:01:33 2026 GMT
Not After : Mar 27 02:01:33 2026 GMT
Subject: CN=518166bb7a290f992c1f6c517a2f8c07b2b9a4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:68:e3:26:a8:49:d4:37:71:d2:43:e8:86:
57:94:13:68:25:c5:6f:5c:1f:8c:aa:79:eb:b5:a8:
1e:4a:bd:d5:ec:7c:b4:9e:3b:f5:7d:32:6a:f7:1b:
45:c2:45:23:c5:63:41:4d:7f:fd:c1:9d:56:32:0c:
ff:ca:23:4c:48:f3:38:6b:f9:47:b8:9c:ef:63:63:
02:80:da:d4:73:aa:4a:23:cd:84:99:12:21:8c:b4:
83:e6:bc:48:ac:28:07:7e:65:51:67:ce:a4:db:ec:
99:ec:10:08:82:72:7c:91:ca:06:99:3c:74:aa:79:
dc:63:69:8f:ca:49:aa:2f:89:7d:e0:1b:1c:e8:2c:
15:42:e8:3d:af:23:48:0d:21:41:1d:66:22:ff:9d:
c2:22:9e:73:9d:92:fd:61:be:d2:c2:c8:59:8c:27:
f6:1c:d3:2f:43:53:e2:ff:d2:b8:84:88:a7:ed:eb:
a9:a2:bf:60:3a:61:4b:18:3a:04:17:f1:22:d5:e7:
37:a5:52:22:45:76:69:7b:99:58:df:a1:b2:6e:0d:
dd:98:84:cb:12:33:30:f0:20:39:3d:fc:6c:bb:13:
90:b1:4c:af:13:ac:c0:f5:7c:c3:cd:da:8b:56:39:
99:02:61:d5:03:d0:d3:b1:56:79:8e:db:a1:28:46:
5e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:81:66:BB:7A:29:0F:99:2C:1F:6C:51:7A:2F:8C:07:B2:B9:A4:B9
X509v3 Authority Key Identifier:
keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:35:3b:c2:36:d0:6c:07:dd:d3:c7:dc:23:45:31:89:c9:19:
fa:23:4d:15:81:17:43:5e:50:01:40:f6:ef:9c:ac:11:d1:51:
da:64:e6:73:77:83:9a:43:89:3e:5d:8d:be:1e:32:3c:8c:a3:
9c:fd:fd:43:b6:d5:8f:6a:ca:0d:64:f1:07:4d:31:71:f5:5c:
55:ef:a1:19:d3:f1:c9:8f:69:f3:12:20:f3:66:aa:3c:3f:f5:
f9:2c:8b:f8:29:38:a7:75:e2:1a:96:92:33:39:b4:74:91:4d:
27:e4:14:8f:99:b8:b4:61:81:d3:63:14:8e:bb:c5:48:d0:45:
b7:c6:f2:72:66:6d:15:37:5a:04:ce:54:77:bc:94:3e:30:07:
f8:cb:e3:ec:73:f7:e2:04:10:43:dc:ec:e5:dc:1b:28:03:00:
9b:8d:26:77:15:56:b3:47:84:cd:a3:f8:9c:0c:0c:3a:10:ac:
ca:17:31:05:25:d8:cf:38:e4:16:7f:87:67:1f:3d:5f:73:e7:
81:ec:be:e0:24:9e:86:0b:9f:64:f3:58:ed:4c:ee:3f:b4:01:
4b:46:ef:80:44:bf:59:b9:8a:25:68:2a:60:2d:44:ad:3f:d2:
b6:17:cf:e0:7e:95:b1:83:40:b9:84:4d:50:f9:cd:f7:9d:a1:
c6:6f:3a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:24 2026 by rpki-client