Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
File: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft (raw, json)
Hash identifier: OKi5LYcsb65vz+np6vdefNcFXTrLEkY60mZBH+9/r6U=
Subject key identifier: CA:9D:E1:C0:18:AA:75:F9:C9:D9:38:E9:F6:B5:A7:F2:59:0C:49:17
Authority key identifier: E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
Certificate issuer: /CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Certificate serial: 019D2816C59EF26EA52C5BA6941B47701662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
Manifest number: 0C88
Signing time: Thu 26 Mar 2026 03:01:14 +0000
Manifest this update: Thu 26 Mar 2026 03:01:14 +0000
Manifest next update: Fri 27 Mar 2026 03:01:14 +0000
Files and hashes: 1: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl (hash: uhOmM/o+yKEUxD91vJQ/eP6zqF8/YTAz0F5oaIdmx1w=)
2: xdfHz51H2U_drRVl99FgU2CFlPQ.roa (hash: BLDc4xOeEFuPu6EvzSRPfHwGo2Y4vTDZuLs9dGjD79Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:c5:9e:f2:6e:a5:2c:5b:a6:94:1b:47:70:16:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Validity
Not Before: Mar 26 03:01:14 2026 GMT
Not After : Mar 27 03:01:14 2026 GMT
Subject: CN=ca9de1c018aa75f9c9d938e9f6b5a7f2590c4917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:28:c1:a4:72:a7:36:4c:59:e9:b5:53:90:a3:
63:e6:9b:ab:74:6f:f6:98:0a:ad:0a:29:a6:0d:04:
09:c0:a7:e0:dd:ae:79:d3:44:f9:9b:40:9b:d7:e3:
81:fd:a4:c0:ce:a2:25:c0:2d:6e:69:6a:5b:62:4f:
57:5f:43:00:98:ee:17:5e:99:b4:4e:1b:13:ff:9e:
bf:a7:da:7d:b2:c9:91:fd:14:23:8c:84:f0:22:c6:
bd:9a:55:10:d5:0a:ef:57:d5:21:6d:71:6d:b4:77:
5d:ec:d2:30:87:02:c8:54:49:b6:01:6e:fc:60:8f:
9a:85:9d:7b:11:5c:58:aa:7b:3e:57:0e:9a:54:72:
37:21:4f:0b:47:8f:ba:12:52:40:07:0a:df:63:41:
a3:df:e7:76:f2:fb:96:c0:eb:97:ce:b1:f6:6d:fc:
4b:3d:82:7b:65:76:48:51:af:72:ef:2d:39:b7:92:
74:d7:e2:1b:bd:f1:1d:2e:f1:de:33:6b:df:8e:d5:
23:a8:58:a9:56:60:75:1a:c7:80:e6:eb:ed:d3:b4:
c0:c2:5a:19:bf:f2:ac:45:b1:cd:70:fc:56:ee:16:
51:9b:58:50:fe:16:44:4d:de:1b:2a:78:c1:1b:95:
00:1e:66:64:83:af:f3:97:f5:1f:10:33:db:ed:ec:
40:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9D:E1:C0:18:AA:75:F9:C9:D9:38:E9:F6:B5:A7:F2:59:0C:49:17
X509v3 Authority Key Identifier:
keyid:E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:eb:11:9a:0e:77:23:cc:b0:17:6c:ef:f4:ba:77:55:6e:e3:
77:1d:2f:bb:81:48:18:c2:b8:24:d2:2e:7b:2f:16:bc:2c:95:
97:cf:4f:79:a0:ff:bf:29:60:a6:fe:80:9d:08:62:8f:13:2b:
4a:09:f9:d1:6b:56:00:1d:25:a6:39:9e:33:09:f3:63:20:b4:
d0:b1:dc:1c:97:11:a0:3c:13:02:1e:be:1f:7b:bf:8e:a7:5a:
9d:8c:18:33:4f:dc:ac:93:e6:56:44:28:86:ae:51:b6:df:68:
6e:01:af:cf:08:7c:31:89:d1:fc:32:37:6d:7e:40:26:ab:60:
6a:df:95:69:b4:5a:e2:8f:b2:56:65:c2:5e:c7:76:40:2c:b9:
2f:f4:ce:d8:9f:43:67:e0:95:d4:bc:2a:cf:9c:82:39:4b:d3:
8c:ba:33:5a:45:f8:af:df:4a:fc:50:f5:d2:bd:7f:fc:61:09:
ef:9a:26:5e:ba:a6:c8:e6:8b:f2:8b:6e:ec:59:07:ae:00:6a:
7b:1d:81:cd:76:8d:48:40:c6:0a:4a:b5:a5:98:53:99:df:60:
5b:ca:69:7a:77:6b:f5:80:c3:b8:50:86:ac:22:44:bc:67:f2:
27:b0:bd:02:24:60:c3:4b:ec:eb:38:5b:95:7a:14:dd:b5:90:
e5:5a:c7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:36 2026 by rpki-client