Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
File: 4MijkN3l4VGaS9PadUqT6YhJLWc.mft (raw, json)
Hash identifier: PGOxcEISnEMDZ0faMxQHNYNi59Lk56seCvZao6t9Q3w=
Subject key identifier: 0B:D1:18:F2:09:D2:17:39:2F:4C:58:E4:A1:41:3B:89:EC:ED:32:84
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 019D2929324515ADA6BD788F5F47C730D25F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
Manifest number: 1894
Signing time: Thu 26 Mar 2026 08:00:58 +0000
Manifest this update: Thu 26 Mar 2026 08:00:58 +0000
Manifest next update: Fri 27 Mar 2026 08:00:58 +0000
Files and hashes: 1: 4MijkN3l4VGaS9PadUqT6YhJLWc.crl (hash: tjMJyPT4fyAo5u0JU4nd3ItF++j3QBprglYoBuG5fVs=)
2: jJBnBZB9j6ZSy8oi7va1DliuM5I.roa (hash: PXgKRNLOfY6nAlq8b+44/oNeFFKEJ75+kqlPxgLOYf0=)
3: qClDJ0Jy7HN0fPcXo4qqqH1-BLs.roa (hash: h+D6tShMbWTyfb1gq7yBy2EVVvJoE1RLinCtALPVDMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:32:45:15:ad:a6:bd:78:8f:5f:47:c7:30:d2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Mar 26 08:00:58 2026 GMT
Not After : Mar 27 08:00:58 2026 GMT
Subject: CN=0bd118f209d217392f4c58e4a1413b89eced3284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:76:d8:3f:1b:69:b4:46:e7:8c:1f:c3:5b:7d:
ed:61:53:ad:6a:d2:6f:7f:cf:df:0f:7a:13:e1:4e:
ad:57:fb:85:23:a5:e2:1d:00:83:68:93:e6:2b:45:
cc:a9:bb:e5:99:e5:ce:55:31:73:a6:ce:ea:c0:57:
1a:00:5e:27:e9:36:90:5b:bc:57:53:c2:44:16:33:
00:02:5d:f0:20:f1:bd:d7:6d:bb:8d:cb:21:c7:af:
fc:d4:9b:40:94:a9:4a:51:0d:e1:03:eb:58:f9:0a:
b4:12:fb:e8:b6:07:81:0d:a5:ad:e3:b2:3a:82:92:
7e:93:30:16:ff:7c:7d:a9:63:61:30:4b:8e:bb:6c:
10:b4:73:11:8b:30:71:35:bb:a6:e9:48:87:5e:6a:
d9:d4:2b:86:ba:30:f9:68:09:30:d6:7f:ee:5d:33:
59:b9:f9:19:5b:46:bf:ae:81:98:f3:8a:94:24:58:
92:21:24:31:a1:4f:20:2c:27:7b:24:af:79:2d:e0:
a4:e8:da:63:0f:41:14:8d:0f:e7:4c:a5:44:cc:cc:
7e:97:39:48:56:08:0c:b6:ba:09:1b:fd:f1:86:89:
93:af:8d:08:41:a5:b8:1e:c1:ae:1e:e1:3f:6b:84:
b4:74:1f:ff:74:63:6b:25:97:37:c7:1c:e0:86:e7:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D1:18:F2:09:D2:17:39:2F:4C:58:E4:A1:41:3B:89:EC:ED:32:84
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:fb:c0:04:bb:91:62:02:0d:5c:71:90:70:f7:64:91:1d:59:
6f:42:e9:f9:f9:51:de:25:5f:a8:e8:03:29:bd:ef:6e:7c:29:
24:75:64:4e:09:a3:4f:fa:7c:1c:da:38:eb:98:8f:f3:94:a7:
4f:d7:c7:a0:ac:79:fd:24:e2:b5:c5:eb:bf:d0:a9:f6:e6:21:
7d:66:47:0b:d4:d4:89:27:02:f3:a2:a7:4f:59:b9:57:ee:f6:
4d:23:29:d9:35:ec:4c:2d:06:8f:62:8a:87:b4:41:26:2d:5a:
53:d1:52:5b:23:1f:37:bf:cd:5d:2b:33:d5:af:e7:58:6f:8c:
ac:c6:60:b4:3e:3d:c7:96:88:4a:06:ba:df:7b:3e:32:f2:56:
1b:df:f7:b5:83:7f:a9:34:2b:05:1f:ef:af:e5:d1:f1:f0:73:
76:96:5a:bd:2c:17:d2:31:ca:b5:93:8f:88:4d:f0:30:e8:16:
a7:b5:d7:0d:1b:6d:60:2d:ad:05:55:b2:a5:d6:97:1a:2f:ba:
96:8b:94:d1:df:99:a6:9e:f3:51:17:72:5b:3d:5c:75:ff:53:
12:88:24:78:4d:7e:47:e2:b1:e0:26:cf:7a:da:a3:12:7a:bb:
4c:a7:25:85:b2:c3:4c:b4:60:0c:ef:40:1d:ad:b0:f3:b0:c4:
e7:4f:a2:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:41:06 2026 by rpki-client