Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
File: 4q9q9tGZ8R7LpDVVEOmbficatUA.mft (raw, json)
Hash identifier: i1dzOHLzJU4g961y/F7B4IbWpfH1BW+RxD7uS8oPkUc=
Subject key identifier: 01:B2:E2:27:BA:CB:75:04:77:29:70:1F:3B:BA:66:9C:E8:15:8C:65
Authority key identifier: E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
Certificate issuer: /CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Certificate serial: 019D284D9641728035EF84132E23629E8E78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
Manifest number: 03BD
Signing time: Thu 26 Mar 2026 04:01:06 +0000
Manifest this update: Thu 26 Mar 2026 04:01:06 +0000
Manifest next update: Fri 27 Mar 2026 04:01:06 +0000
Files and hashes: 1: 4q9q9tGZ8R7LpDVVEOmbficatUA.crl (hash: K7StWOCVcflGpMBslxyCwQ8xD4VCCgskxSAS3+NwqB8=)
2: WsRPhT9Oh-9n_aMNy1_PxDNMYcI.roa (hash: /TTOGt1K8yp5w1qqEg6jDasBjpl22O3FqBsf/BAjXeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:96:41:72:80:35:ef:84:13:2e:23:62:9e:8e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Validity
Not Before: Mar 26 04:01:06 2026 GMT
Not After : Mar 27 04:01:06 2026 GMT
Subject: CN=01b2e227bacb75047729701f3bba669ce8158c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:51:bd:da:dc:1a:c3:12:6d:73:1b:56:f7:4b:
82:29:ef:62:c3:6c:6b:e0:a1:f0:10:26:fa:57:a6:
6c:58:55:db:0b:18:2a:37:a2:ee:14:6c:59:96:e6:
18:33:6f:e7:5d:8f:53:3a:f4:fa:f6:26:5e:e6:3b:
92:31:5b:59:b7:59:9f:52:de:63:e5:ba:1b:b8:ae:
0e:2b:01:c1:63:fd:24:b8:41:18:f0:af:5f:cd:8b:
89:a6:9b:82:ee:f9:aa:1d:d6:52:f3:16:06:83:10:
9b:29:0c:b9:ce:ac:ea:f8:09:ab:f7:62:de:03:e7:
81:17:81:d8:3c:7d:52:28:74:30:c9:0a:5f:77:e8:
e7:d5:62:7a:e2:8e:a4:61:a6:89:5a:6a:4b:4b:33:
84:16:8c:db:f9:70:21:1a:b5:50:cd:84:24:6a:2a:
4a:33:6a:08:26:a1:08:f4:92:c6:ee:6c:d0:e0:cf:
59:d4:7f:0b:55:a0:b1:c5:09:9c:0d:ea:2d:11:4f:
ca:25:c3:f7:47:d3:32:8d:c8:a9:2d:24:d1:4f:16:
64:5e:1b:99:35:b1:be:76:75:30:e0:cd:61:f2:47:
eb:a4:3f:7f:2f:0a:ba:10:99:30:73:54:ad:45:95:
84:60:89:6b:3c:24:b3:52:6f:e4:b4:ff:46:f4:92:
00:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B2:E2:27:BA:CB:75:04:77:29:70:1F:3B:BA:66:9C:E8:15:8C:65
X509v3 Authority Key Identifier:
keyid:E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:81:00:71:c5:e8:e7:e1:fa:9b:62:1a:ea:99:73:af:4e:10:
4e:12:36:c4:7e:db:a1:d0:42:d7:73:70:df:d0:28:f3:14:be:
df:96:2c:ac:0c:77:50:50:c2:cd:c6:c0:08:83:f1:b7:49:f4:
9e:29:7c:46:fd:b4:88:27:09:48:ec:f9:c6:3d:fc:a8:b4:3f:
5a:23:04:5e:33:96:4b:e6:dc:8f:e9:30:fb:84:88:e9:04:fb:
4f:02:2e:fe:44:8b:41:f9:91:69:43:79:ea:7b:97:96:b3:d3:
f1:87:77:0d:25:89:ef:2a:16:1c:84:ce:1a:11:e4:48:ed:b4:
7d:e5:07:e4:00:30:42:ed:80:60:ab:79:b8:7b:0c:75:03:af:
c3:19:96:cd:41:f4:68:c1:b0:50:b4:c2:f7:18:89:f9:01:d5:
fe:ad:ec:e4:87:b4:5d:b0:66:ae:74:7b:a4:dd:ca:eb:93:5b:
e0:6f:bd:93:df:67:18:c2:7b:a8:b4:a2:0b:8f:72:b6:fe:be:
7b:c6:5f:df:23:90:3c:16:75:bd:00:3b:f4:18:28:0b:ea:cb:
b3:9e:02:6b:1a:db:f4:38:40:b9:b7:cd:5b:ff:a6:ac:ba:8a:
37:59:27:99:37:20:61:35:a6:ac:4b:4a:e4:f8:93:eb:06:e7:
41:13:d5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:25:39 2026 by rpki-client