Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: RacZumTEpJ5w4wTjwpPd8eJBfNuGAaC+iLTcgcK4px4=
Subject key identifier: 00:32:6F:81:88:E1:17:79:30:89:41:F7:FD:0C:D9:4D:3A:6D:A8:8D
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 019D26961C09E637200D91E9568CBF5FCBEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:01:04 +0000
Manifest this update: Wed 25 Mar 2026 20:01:04 +0000
Manifest next update: Thu 26 Mar 2026 20:01:04 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: 2+hyuPFmBubbahutnTdeSFQ9Lz3Jupy41JdkvfSUUKM=)
2: QGU4wxB9l82WtX2GlBPNcSFE_oI.roa (hash: lXWG4OK0FlcLIlRlfiL6ejBSOQfloGthHWkReJ7gUs4=)
3: oAirDjtYSawIz9t2W1uTMzbfgmg.roa (hash: hcXXhAATQAv1P0WpVCcSM3rmQFyzufHtTmG7E5Wcw3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:1c:09:e6:37:20:0d:91:e9:56:8c:bf:5f:cb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: Mar 25 20:01:04 2026 GMT
Not After : Mar 26 20:01:04 2026 GMT
Subject: CN=00326f8188e11779308941f7fd0cd94d3a6da88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5d:28:7d:c0:ac:5a:12:da:b4:ad:9a:77:04:
b5:f8:19:96:a1:1f:1b:12:b8:32:08:1e:fe:31:b9:
12:11:ad:78:ff:45:e1:f9:e8:e5:76:4b:75:86:2c:
42:42:48:27:13:01:c0:e3:fd:10:db:15:19:92:03:
89:c9:8b:2c:f7:2e:bd:32:31:66:ae:e6:1c:a6:f7:
67:4e:a7:63:4b:bd:64:64:64:f8:32:72:80:82:27:
ac:3f:16:13:36:ac:ac:1d:6e:f3:42:6a:70:3f:1b:
60:d6:87:f6:98:38:f1:8c:03:67:ea:39:2c:e1:ee:
8f:71:dd:46:96:4d:00:0b:1f:dc:02:60:86:0a:d1:
a2:02:45:eb:c9:87:06:45:99:48:03:23:b6:3e:85:
4a:9a:13:c6:81:80:a9:e0:7d:13:4e:c3:18:b8:48:
dc:e3:82:71:5c:b1:7b:53:18:27:d2:e6:5b:fb:f3:
c9:a7:0c:05:11:ae:4b:3b:aa:69:fd:de:66:af:47:
31:22:9d:9f:bd:fb:85:23:8a:d3:c5:d0:55:98:03:
67:2c:82:6e:f4:33:7c:8d:34:61:ac:bc:0e:1d:6b:
25:b9:ab:43:88:48:7f:6a:aa:19:1b:29:4f:fc:90:
eb:67:90:34:12:46:1a:8c:ab:01:11:aa:b8:0c:83:
12:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:32:6F:81:88:E1:17:79:30:89:41:F7:FD:0C:D9:4D:3A:6D:A8:8D
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ed:df:c4:a6:36:3e:76:69:19:2b:d9:34:db:d0:97:f3:6e:
af:ee:63:42:40:ab:70:ce:a0:f7:dc:9e:89:e7:8c:55:79:71:
40:ff:17:da:f6:87:6e:5d:92:d8:13:00:69:da:3b:82:3b:a4:
bd:75:07:9a:30:98:22:21:fc:0a:59:e0:13:38:e3:32:ee:42:
cd:64:45:ff:b3:95:05:5d:ed:7f:90:fc:d4:06:7d:58:19:d9:
11:d3:7e:0a:29:34:b1:2e:4d:da:f8:96:fc:d0:6b:f8:00:d0:
25:26:61:0f:a7:94:0d:55:f3:9b:b1:8d:30:b6:6d:4f:b5:7c:
7f:85:41:79:a1:c3:d9:8c:9d:26:dc:03:d9:fa:06:a0:a9:10:
63:6c:da:bd:2f:51:af:0c:d8:6e:f8:a7:d3:e2:c8:ee:a4:74:
9c:c6:98:21:eb:2c:22:e9:5d:a3:b0:84:85:e7:ac:e7:1d:e4:
b1:5a:2d:91:09:7d:65:b2:09:0c:72:bf:71:c8:62:ec:12:b7:
ef:2e:d5:5f:75:e5:10:16:4b:02:9c:1a:6e:a2:21:ca:f7:25:
1a:74:85:7b:85:9b:4a:ef:63:03:6d:33:19:4c:4b:3a:a7:39:
61:90:f2:bf:6a:12:4f:80:dd:1c:01:19:f1:54:26:00:52:e2:
ee:b9:ea:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:59:59 2026 by rpki-client