
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
File: _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json)
Hash identifier: lcBoFaqtskkdXOV9FYxQ0wb2uSy11pARWGLEZU4Chlk=
Subject key identifier: C1:81:C2:01:F7:60:EB:81:5C:39:58:3E:CA:4F:90:B2:8C:3E:FC:14
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial: 019D27DF6BE731A7EEB373578E4308ADF9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
Manifest number: 146E
Signing time: Thu 26 Mar 2026 02:00:46 +0000
Manifest this update: Thu 26 Mar 2026 02:00:46 +0000
Manifest next update: Fri 27 Mar 2026 02:00:46 +0000
Files and hashes: 1: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: NzdOjN0aV7l0nhfnHvycENJdtEkzon0nOTf2Zx8ZaZw=)
2: oXxloD6njLTbPU8cd4uQW4D9yL0.roa (hash: jZodZWVBC3KPHbgCzoujj4oDNgC3Pjsq3788f/bPMYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:6b:e7:31:a7:ee:b3:73:57:8e:43:08:ad:f9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Validity
Not Before: Mar 26 02:00:46 2026 GMT
Not After : Mar 27 02:00:46 2026 GMT
Subject: CN=c181c201f760eb815c39583eca4f90b28c3efc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:90:89:5e:15:92:16:e5:46:84:28:38:3f:b7:
f2:03:37:43:92:45:59:94:33:04:7f:c3:47:cf:08:
e8:79:04:d6:2d:c2:a5:df:a4:28:76:28:40:4d:4c:
b9:f3:f4:4f:85:e3:ce:8c:5a:09:b4:63:aa:f6:12:
ae:28:4a:31:5c:d2:ca:d8:dc:00:85:6c:93:90:ca:
6b:19:ce:b9:79:a6:58:d5:69:fc:7d:00:b4:1e:8e:
70:c8:5f:9e:00:79:42:2b:ff:d8:c6:e2:98:87:72:
fa:a9:1f:c5:24:71:0a:50:67:5e:c4:bb:8f:d8:f2:
47:7b:32:24:a2:a1:8a:cb:39:89:0e:b3:cf:43:b5:
9d:ee:ba:8d:e0:81:a1:50:41:e7:90:2b:e0:39:97:
4a:3e:29:86:af:75:bf:dc:7f:11:cb:6e:57:a7:71:
1e:31:6f:96:98:b1:d1:60:6a:65:16:0d:dd:26:a1:
e5:52:16:e6:da:7d:5d:74:88:3b:30:9f:de:4d:b9:
5f:49:b5:91:39:27:31:e1:01:81:56:bd:89:5a:00:
ba:2a:b7:f1:7a:95:06:78:90:14:b5:56:76:58:e4:
95:46:0f:a8:c3:af:86:f2:b4:48:f1:50:c4:b2:94:
ad:ef:bd:16:7b:bf:ba:f6:5d:24:76:9a:b7:98:5f:
48:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:81:C2:01:F7:60:EB:81:5C:39:58:3E:CA:4F:90:B2:8C:3E:FC:14
X509v3 Authority Key Identifier:
keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:39:71:7c:1c:2b:83:d1:b1:3b:e8:88:f5:bb:00:d9:d5:0d:
01:ec:d0:a7:51:30:e3:5f:de:f5:5c:8d:f4:58:1e:01:6d:62:
5a:36:04:f9:f1:ca:94:be:79:1d:90:51:36:c3:31:28:b2:d0:
80:d6:e4:74:c4:ab:69:4d:c3:61:d4:46:bc:a4:9b:00:94:47:
74:e2:fb:86:4b:7c:74:95:7c:9c:8a:39:96:c1:50:5a:41:df:
31:f4:e4:e5:4e:fb:6a:93:a5:b6:92:da:7d:36:6f:f2:e7:40:
a6:43:18:9d:65:38:5d:1d:8c:9d:cb:5b:a5:c2:ed:97:d4:59:
c8:86:07:6c:27:8d:0d:1c:d6:22:23:cd:3a:4d:65:57:ef:06:
2a:10:70:fb:a2:37:cd:2f:3c:25:d1:85:0c:fd:72:dc:13:60:
61:c2:26:01:7a:c9:55:34:bc:72:8e:74:89:b8:87:87:e0:70:
3a:15:6f:a4:a7:bd:82:a7:77:5a:30:c7:49:03:a6:66:62:4d:
f8:0b:14:28:31:c6:74:2c:88:a8:0b:4d:d6:c6:17:58:f5:73:
fb:d0:b8:8d:97:53:d7:ec:18:d8:11:a6:4e:3f:2b:22:d3:c6:
9e:7e:e2:9f:00:9e:50:6b:1c:1f:1f:ee:f1:2e:54:b9:69:03:
3d:0a:d5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:36 2026 by rpki-client