Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
File: 4M3iwfzj1v4hhTR92J3P0T67sVE.mft (raw, json)
Hash identifier: FVZNDG4uqZBeoxzhHGu86pm4xiNZebUkSogcWLqj8HM=
Subject key identifier: 34:4E:C9:BC:26:1C:10:4D:EF:0F:91:50:75:E9:95:4C:5F:E0:77:DA
Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
Certificate issuer: /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Certificate serial: 019D2771C8C5A7F3DD5378E3DFA905BB9A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 00:01:01 +0000
Manifest this update: Thu 26 Mar 2026 00:01:01 +0000
Manifest next update: Fri 27 Mar 2026 00:01:01 +0000
Files and hashes: 1: 0Ie8zJ3vobcDR9ujGlZqgjvHUAY.roa (hash: FJlCbonLD9dF4g0EKnBAz84rCEY7Zmpte8ZXE9ooZuo=)
2: 4M3iwfzj1v4hhTR92J3P0T67sVE.crl (hash: 3J54SZMNByYZlQEnqjzHq91WnzHuNg4d3p+bX/U024Y=)
3: CwpxvpCjkjiVHLiVbQuAWgtQ54o.roa (hash: A9xtP47/NQPXNxopvGJvQs5ptoCe1VvA5rj1UqAT7fA=)
4: jl2G_Du7vY1XFmIxGhvnvFEWvcE.roa (hash: RFk3rcVrZLSmQvBNuxyGLTQ7ZkOHCUZDzMm3yZpbe5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c8:c5:a7:f3:dd:53:78:e3:df:a9:05:bb:9a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Validity
Not Before: Mar 26 00:01:01 2026 GMT
Not After : Mar 27 00:01:01 2026 GMT
Subject: CN=344ec9bc261c104def0f915075e9954c5fe077da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:39:e0:b5:86:5f:07:32:99:89:06:66:0c:01:
62:73:97:8a:f3:42:0c:8f:30:31:76:6c:88:8a:8d:
fe:c9:a2:cd:20:14:91:3d:c1:3c:57:dd:47:3b:d2:
59:f2:60:d2:0d:22:5a:9b:94:e6:cc:4a:b7:65:bf:
91:05:69:65:87:9b:49:0c:41:45:03:23:a8:53:3d:
0b:00:a2:5f:e6:1f:39:c7:86:7c:52:c7:cf:7c:91:
0c:c2:a0:9d:52:68:d1:bf:fb:4f:b1:ed:5e:48:35:
ae:1a:40:6c:fd:00:68:a3:b1:ee:1c:e6:0a:d0:05:
3c:fa:96:ea:93:44:5e:39:60:3d:71:ff:0a:ba:99:
be:8a:54:a5:fa:29:6d:7a:d1:23:6c:e4:ac:f1:dd:
68:97:6a:e1:c9:c5:1d:d9:d0:04:79:c9:f2:11:df:
18:7b:9d:43:7b:af:fe:06:86:45:51:b9:e8:49:b5:
7d:27:82:21:3f:46:fd:5a:fd:32:f5:e5:4e:13:d0:
87:2f:5a:b2:1d:2e:92:5d:1d:fb:e1:8f:cd:f0:00:
fa:5b:0f:1d:fa:be:3c:4f:52:98:83:ce:48:7f:59:
6b:82:09:69:71:65:b3:65:89:ad:bd:83:15:10:85:
a9:11:df:1b:ef:91:88:e5:23:42:b1:19:fb:ee:4c:
d2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:4E:C9:BC:26:1C:10:4D:EF:0F:91:50:75:E9:95:4C:5F:E0:77:DA
X509v3 Authority Key Identifier:
keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ff:01:3c:cf:d7:fe:9e:f1:83:6b:37:77:26:ab:4c:9c:52:
62:2b:85:6b:27:b0:fd:14:58:d6:86:37:80:e5:69:a9:92:5b:
f3:91:9b:5c:53:00:13:b9:3c:eb:0c:7b:8a:7b:72:44:eb:cf:
98:c9:00:9e:b4:13:17:e2:1e:7c:1d:5d:f8:39:8c:ea:ef:e5:
72:0c:aa:b3:3d:b4:2b:32:c8:3c:57:df:80:b0:f1:ab:55:6f:
c9:3a:46:23:a5:6d:63:86:ec:95:f1:4c:fa:e1:ba:ae:d3:0b:
c1:19:af:bc:7a:64:cd:95:8d:80:44:90:aa:b4:f9:32:48:39:
00:37:99:8a:5f:d0:b4:f9:30:0b:5b:7d:f3:25:77:86:eb:ff:
98:77:5c:4e:c0:94:81:68:d3:eb:de:f1:1f:51:03:f6:f4:91:
42:99:3b:5f:23:aa:4c:52:77:ac:ec:6c:90:71:9d:9a:df:29:
f5:8e:aa:16:d1:65:87:29:c5:b4:7d:49:80:e4:6d:0c:19:9b:
5a:b2:c2:1a:ca:cc:dd:00:dd:a0:f4:16:f2:d7:31:78:f4:5a:
ae:b2:9e:cf:28:77:e1:4f:9d:1f:f3:22:03:af:bd:ea:83:95:
8b:6b:06:2b:a3:05:f6:62:57:38:69:d3:e9:b4:9f:b6:4b:10:
6a:c8:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:11:52 2026 by rpki-client