Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
File: 4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft (raw, json)
Hash identifier: tuWCQb/KreHyXRtKKLC68DDTe449TPHx7Guguen+kzQ=
Subject key identifier: A4:6C:57:D6:7D:85:05:D6:61:F1:73:01:20:16:A8:9C:B2:2F:02:C2
Authority key identifier: E0:15:FF:00:5A:A2:66:91:C7:E3:30:EB:F9:C1:C4:C1:AE:54:94:D4
Certificate issuer: /CN=e015ff005aa26691c7e330ebf9c1c4c1ae5494d4
Certificate serial: 019D28844013CC4E17779AA3A89EDCCBC96A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
Manifest number: 023A
Signing time: Thu 26 Mar 2026 05:00:48 +0000
Manifest this update: Thu 26 Mar 2026 05:00:48 +0000
Manifest next update: Fri 27 Mar 2026 05:00:48 +0000
Files and hashes: 1: 4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl (hash: Bc7Ezbi43GLzy5FWZGm+7v6L7A4AQhde8JDjY7+I17I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:40:13:cc:4e:17:77:9a:a3:a8:9e:dc:cb:c9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e015ff005aa26691c7e330ebf9c1c4c1ae5494d4
Validity
Not Before: Mar 26 05:00:48 2026 GMT
Not After : Mar 27 05:00:48 2026 GMT
Subject: CN=a46c57d67d8505d661f173012016a89cb22f02c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bd:e7:2a:57:f2:ad:32:23:b7:af:63:e7:fd:
e2:e1:c2:1b:d4:04:04:3c:61:89:b1:41:08:12:0e:
b1:87:89:42:7c:4f:41:96:f5:25:d8:51:cb:34:a0:
c2:c2:a5:7f:f3:60:1c:78:9b:49:df:33:4e:24:a2:
9e:76:57:9a:34:be:b4:3e:2c:82:89:d6:23:09:19:
6a:ef:28:6e:8a:ce:9e:4b:60:f7:c7:28:41:4c:ee:
0e:dd:0f:1c:89:b2:4e:fa:7a:5f:18:32:e5:63:56:
2a:8c:3b:99:43:a8:e6:28:d6:87:5d:78:1c:ee:91:
da:22:dd:e5:cd:62:ea:c5:a8:51:5d:d7:ac:16:b4:
63:dd:18:eb:16:4d:82:ec:b5:f0:f9:56:64:a9:c3:
85:ec:3d:94:6d:07:fe:ea:d8:32:3f:65:29:de:06:
35:93:12:c4:2f:0a:c6:cd:b9:01:f1:c1:6d:61:e0:
79:7b:d2:b0:cd:3a:26:36:e9:57:b7:8c:0f:0a:1c:
c1:89:31:46:76:05:29:e3:7f:d7:4e:67:58:63:6f:
ef:3d:c6:80:57:30:e5:b4:b0:31:8a:4c:2e:00:d2:
b7:92:c4:5d:a8:81:f4:b8:5a:0b:54:7b:dd:02:a7:
92:a8:01:23:6a:1f:47:60:ee:01:82:6c:b8:c5:a7:
7b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6C:57:D6:7D:85:05:D6:61:F1:73:01:20:16:A8:9C:B2:2F:02:C2
X509v3 Authority Key Identifier:
keyid:E0:15:FF:00:5A:A2:66:91:C7:E3:30:EB:F9:C1:C4:C1:AE:54:94:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:2c:0a:72:4d:08:44:93:52:12:3f:6f:67:2d:47:5e:9f:
c4:97:80:2b:c7:bd:9c:55:53:56:81:99:c1:d3:db:84:61:6e:
71:11:a7:af:f5:cb:13:f6:85:11:87:f7:35:df:e2:d6:c0:be:
e2:19:3c:fe:5d:93:61:23:8f:52:82:4c:8b:71:ed:8b:09:2c:
d7:95:54:86:14:24:d9:03:ba:d5:fa:9a:80:1d:89:b9:1f:fb:
b2:5d:38:31:85:db:33:f8:7a:da:c1:5c:a7:21:29:13:d4:5a:
46:aa:47:ba:36:c7:c5:4f:18:0f:67:b3:9d:51:e2:a7:4d:73:
84:b5:e9:fa:dd:87:d2:33:4e:6a:cd:a1:84:12:85:b5:a5:b1:
78:32:07:1e:76:02:62:cb:c2:d8:e1:8b:65:25:20:f7:85:d4:
e3:82:b0:16:fd:de:47:c5:e5:eb:94:ac:e2:e8:12:4c:46:e3:
e5:d1:03:3a:66:35:c6:a9:90:53:c9:83:d5:6e:d7:a3:b9:91:
53:39:46:6b:a8:47:a0:a6:5a:62:43:04:9a:76:59:36:36:84:
9f:ec:c3:ec:5c:89:e2:f1:7c:3c:ea:bc:42:47:1b:5b:a5:50:
90:db:d8:f8:50:51:b7:74:0b:68:59:ba:75:33:4d:28:6c:1d:
22:e0:64:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:47 2026 by rpki-client