Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier: xWTO0uaM8niEjCiHDPWAa2sz14tgnJp/bv51zGPg3Ps=
Subject key identifier: 0D:9B:E8:1B:2E:F5:2B:CC:98:A4:EA:2D:B9:B0:A2:06:0D:A4:3A:E8
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 019D27A875240B09DE73CC71E66B84788BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number: 0985
Signing time: Thu 26 Mar 2026 01:00:44 +0000
Manifest this update: Thu 26 Mar 2026 01:00:44 +0000
Manifest next update: Fri 27 Mar 2026 01:00:44 +0000
Files and hashes: 1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: y39xkton8bt7V4s1STlRW7m1dM1d0kMZTx7LaOO58ew=)
2: iJ2dkGge62Vh8toLziz4BBDFsIU.roa (hash: FGUiRuQcTHwY2x/0lhI9Cq7axh0DNfE+YZZ6Pi8PjoE=)
3: sCOccEobS0CKX2jbYbLooprkkiE.roa (hash: Nm3XOh4/JChri89+OWUhzN86V5dk49MnIMuXjoKwQEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:75:24:0b:09:de:73:cc:71:e6:6b:84:78:8b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Mar 26 01:00:44 2026 GMT
Not After : Mar 27 01:00:44 2026 GMT
Subject: CN=0d9be81b2ef52bcc98a4ea2db9b0a2060da43ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:75:5f:d5:a3:de:a8:81:41:39:ea:56:cc:bf:
32:3a:f1:81:cd:47:0e:fb:6e:50:07:f5:e2:23:3a:
72:dd:11:bd:87:42:14:00:7b:a5:fe:69:71:01:73:
bc:59:31:96:1e:b9:15:1c:c5:13:88:bd:63:35:eb:
24:e4:e9:6b:ec:e8:4d:b6:68:d0:b5:85:6d:bb:84:
63:a0:19:61:07:7e:a0:a7:54:2b:28:09:0e:e5:23:
72:df:06:f9:c2:c2:40:1f:7b:d6:7d:16:72:2d:ba:
8e:f5:3c:76:98:32:f1:a7:79:b2:bd:22:f5:e0:12:
c7:2f:2f:b3:93:20:30:81:b8:53:67:d5:9b:7c:b2:
19:45:2b:01:0f:92:bd:f0:ca:2a:e6:61:e0:d2:20:
3f:2e:be:4a:fc:41:98:75:a2:f5:fc:56:47:1e:aa:
a5:05:3a:3f:47:47:3c:49:c4:e8:4b:26:83:01:74:
d3:7f:44:63:9a:4a:87:f4:03:10:64:86:85:3b:0c:
23:3a:e8:b7:c3:4d:3b:df:38:28:09:47:6e:5a:5b:
96:ef:f2:87:c1:86:89:19:56:18:84:49:a3:54:f0:
2b:14:62:e7:88:0b:db:57:5a:af:60:85:bf:ab:48:
97:0b:9b:e1:9f:cf:08:92:e6:72:8e:1a:00:26:a8:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:9B:E8:1B:2E:F5:2B:CC:98:A4:EA:2D:B9:B0:A2:06:0D:A4:3A:E8
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:e7:fc:63:63:88:a7:c9:04:10:81:e1:bc:21:5e:ed:a3:c1:
a9:72:ae:15:20:61:00:e4:73:af:d5:31:3e:60:3d:63:d6:43:
a6:b2:97:e5:44:1b:2a:5e:87:bd:4b:aa:95:6d:0a:19:99:ec:
db:73:8f:af:c7:23:92:d4:5e:2a:de:a1:d2:a7:71:15:b7:48:
18:ed:2c:34:17:a0:4c:f0:a2:b3:02:fd:a6:e0:79:a1:2e:f0:
a6:ca:92:8e:f2:a7:cc:19:f3:0b:8e:3d:26:04:2c:77:ba:31:
8d:9d:94:10:69:ef:58:57:d0:61:fd:e3:e2:eb:df:fc:d2:9b:
88:84:d8:ee:99:c1:c1:64:85:4f:85:2a:d8:46:34:f9:46:4d:
b0:8d:08:e3:3c:52:f5:8c:83:04:d7:f4:59:98:ae:0d:73:7f:
ed:a7:b9:7f:4f:c0:38:b0:1b:cd:a3:fa:6e:ac:1e:01:c1:6b:
a1:74:9b:b8:be:26:52:27:0b:f8:6d:7f:23:37:cc:d7:fb:a2:
c2:78:2b:b8:3b:4f:a6:4e:06:91:89:61:a9:2d:e8:90:d7:76:
7d:98:a7:0c:a7:7a:2f:c5:fb:5d:ef:14:ba:a2:7c:5f:2a:ae:
84:e6:11:ca:06:f2:36:a5:1c:cf:97:19:c1:15:6b:7a:73:9f:
1c:6c:6a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:21:11 2026 by rpki-client