Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File: 4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier: wgLtAdhIF3w8OI4jOxH4CNO9yIprs6FbSM6hAyU6iz8=
Subject key identifier: AD:6A:BF:B7:C6:3A:A8:60:14:F0:43:13:DD:C8:B4:1E:B9:97:DA:05
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 019D2A047C8212B8FE9BAA415C4B60122D97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number: 07AE
Signing time: Thu 26 Mar 2026 12:00:30 +0000
Manifest this update: Thu 26 Mar 2026 12:00:30 +0000
Manifest next update: Fri 27 Mar 2026 12:00:30 +0000
Files and hashes: 1: 22Qs5ZZUH-o_UxeMTTaGlozw9ck.roa (hash: dzmFhhN9JFvpfi1wur97KqUtYf7OFbub2fPBQrwEANI=)
2: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: Zehq/NjABhY+c5rrddLrNAujIKJv1CGDzKvc5G4BjHg=)
3: OOmJ-RkbduxK-k7822kHHTnwfho.roa (hash: Zhhmx3+Bddmr+hDQFTAMK3LPfl5DC3igpcEZIPBCFZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:7c:82:12:b8:fe:9b:aa:41:5c:4b:60:12:2d:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Mar 26 12:00:30 2026 GMT
Not After : Mar 27 12:00:30 2026 GMT
Subject: CN=ad6abfb7c63aa86014f04313ddc8b41eb997da05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f5:9f:b3:43:f9:15:b2:60:1c:87:7b:49:46:
fc:d0:89:b8:9b:84:14:16:78:a7:66:98:8f:f5:9d:
fc:cf:10:59:3e:76:95:ea:7b:ca:04:00:cd:a9:03:
c1:53:ea:ce:0e:24:a9:f6:a1:a0:28:0a:70:3d:f7:
ea:6b:b8:01:9b:72:d2:d0:e8:55:06:4c:ac:44:c7:
8a:47:04:f1:cf:d5:a2:64:a8:54:c7:84:75:a7:24:
77:8e:cc:5f:c8:9e:52:5a:c4:10:3e:c8:6d:c0:c0:
95:a4:f5:c1:02:9a:62:ec:96:51:5b:e5:66:de:72:
55:83:66:f8:dd:8a:06:60:6e:49:e0:cf:99:b4:83:
01:62:c8:be:8e:09:60:ef:bf:bf:8d:bb:7b:33:81:
f0:b6:39:be:de:62:e5:c1:d0:11:83:bf:90:04:41:
4a:c3:d5:94:78:6f:83:8e:c5:8b:81:11:99:f2:2c:
0f:9e:38:fa:53:66:8b:79:d9:c4:48:76:3f:39:71:
ac:31:cf:d8:dd:c5:9a:f0:ea:2f:07:5f:fa:60:d5:
d7:00:19:4c:70:0d:4d:e8:ac:fa:bd:6c:5a:95:3c:
f0:43:1c:61:c4:f7:1f:91:7d:b3:4b:99:d8:34:ad:
e9:09:3d:92:60:1a:1d:41:74:38:43:49:0d:2e:d8:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6A:BF:B7:C6:3A:A8:60:14:F0:43:13:DD:C8:B4:1E:B9:97:DA:05
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:01:58:11:f4:8f:bf:2b:f8:09:36:41:30:99:20:3f:c3:cc:
f3:0e:6d:a6:bd:18:e1:5e:5c:ca:85:56:9f:44:11:97:d5:37:
16:fa:1d:05:78:b2:af:00:ed:6e:b2:5f:94:a5:37:99:f3:40:
09:2b:b4:2a:d6:bc:26:c2:bb:ea:ea:64:78:f0:ee:3b:4b:ca:
f0:12:d8:dd:01:72:25:39:b7:6b:11:eb:21:fc:18:e4:9d:99:
39:c8:45:90:b4:35:e9:cf:ca:c7:f0:bb:dd:08:fe:1f:a3:1d:
b4:bb:52:0e:48:cb:2e:15:a6:11:c5:68:e5:72:7a:b5:78:00:
74:a5:d5:8b:0f:51:d0:c9:f4:49:a9:42:87:0d:63:1c:50:55:
13:dc:05:48:a4:67:11:47:ae:19:2f:ec:d1:75:b6:5c:12:76:
b8:cf:3e:69:b7:59:ce:e7:6b:e0:ef:63:61:96:71:d7:3e:6f:
21:2c:ce:a6:e9:29:b7:1f:43:0a:3e:d3:da:f5:d9:00:0c:a8:
47:93:22:4a:0e:1e:62:0c:1f:1e:ef:2b:c6:02:f3:a9:2d:3d:
cd:c2:f4:4e:43:58:64:54:ae:48:9a:43:56:f7:f7:a2:88:09:
bc:53:ad:58:59:47:21:24:5f:a7:4b:26:fc:38:37:b0:5b:0a:
fd:d3:55:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:10:16 2026 by rpki-client