Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
File: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft (raw, json)
Hash identifier: yTaWhhPLG/IWulsQDTh9zbnz+5hRJPRC/1tAD+3NjHs=
Subject key identifier: 95:C8:39:A5:C5:E1:DD:C1:BC:BD:6D:78:1D:92:7A:7A:BF:22:02:9D
Authority key identifier: E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
Certificate issuer: /CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Certificate serial: 019D29CE6BFF6125F895F69AC79AE29920F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
Manifest number: 0507
Signing time: Thu 26 Mar 2026 11:01:26 +0000
Manifest this update: Thu 26 Mar 2026 11:01:26 +0000
Manifest next update: Fri 27 Mar 2026 11:01:26 +0000
Files and hashes: 1: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl (hash: CVjzDDVKMlGDmlRVKk/8T5ZBP1WmbNEFJ4F1rns6cOw=)
2: BBnqz5PLnc70z9FSlT2QAxBx39w.roa (hash: JhXejmhrfNsZN3gNHBNgoJlEzQDItwOGR9bEap0U8kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:6b:ff:61:25:f8:95:f6:9a:c7:9a:e2:99:20:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Validity
Not Before: Mar 26 11:01:26 2026 GMT
Not After : Mar 27 11:01:26 2026 GMT
Subject: CN=95c839a5c5e1ddc1bcbd6d781d927a7abf22029d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:22:73:86:4f:0c:01:af:35:6f:dd:4b:ed:
76:92:57:ca:72:b1:86:e1:e8:67:eb:81:14:ba:0d:
5a:e3:24:55:b0:13:2b:b0:6d:da:c5:0f:d2:d8:5f:
8f:1d:18:a8:ae:f1:ac:20:65:92:b7:3d:8e:e3:1e:
83:c3:20:47:a1:ef:d7:7b:c8:a1:46:58:fa:f1:40:
95:e2:a6:63:c7:38:52:49:54:d2:85:bb:e3:d3:2a:
1f:c0:e6:b7:f6:eb:da:07:aa:f1:04:ff:5a:f2:8c:
cd:72:b0:80:a6:4a:1c:3a:11:d0:35:86:09:bb:7d:
3b:8c:9b:f4:d8:b6:ea:7c:c7:8e:1e:81:19:93:64:
99:f9:87:5d:a3:a6:91:7b:d4:97:cb:8a:78:ab:d6:
97:67:5c:0a:5b:32:73:02:d1:ff:c5:0c:1c:84:5b:
d4:c8:f5:50:11:55:59:7c:34:88:50:e9:b8:57:73:
81:40:6e:9b:b2:be:18:48:95:68:03:2c:06:45:07:
ca:7a:02:50:7f:0c:94:24:76:c2:55:1a:26:e7:a5:
ba:94:06:27:73:3f:78:ff:e9:74:cc:f4:fd:31:bf:
05:e5:e3:e2:ac:10:db:0c:61:dc:24:5b:6e:16:c0:
82:2f:9c:dc:7f:b8:86:67:8f:b8:63:fd:9d:70:74:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C8:39:A5:C5:E1:DD:C1:BC:BD:6D:78:1D:92:7A:7A:BF:22:02:9D
X509v3 Authority Key Identifier:
keyid:E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:57:98:8a:62:19:32:a3:3a:2f:a7:05:b6:bd:f9:8a:c5:98:
94:86:42:34:ad:13:d0:ea:d9:a8:3d:63:1b:fa:03:9b:ea:13:
4f:8a:8e:0d:4a:be:ca:ae:5b:4a:96:08:20:a2:8e:d3:7d:cb:
13:ff:3e:78:3e:bc:2f:58:88:3f:bc:53:7f:71:f5:5d:7d:f9:
46:48:f5:a5:09:a7:60:52:07:6e:41:e3:78:0b:28:0f:12:95:
58:f6:97:b5:d8:c8:83:ff:36:78:7d:04:3d:87:d7:f2:e5:e0:
3f:84:5c:ee:0e:9b:ef:5e:a3:19:d1:6c:a2:1c:ed:5e:26:28:
b5:8c:36:c4:bf:fb:f5:46:d3:f5:04:0c:5b:3d:a8:f1:8a:88:
1c:7b:9c:fc:1f:a0:51:68:12:35:56:a1:95:98:cd:7f:af:78:
70:a1:24:f1:76:1f:3b:cb:d1:e0:3f:34:31:e8:da:be:74:11:
c6:b8:34:cf:7b:f8:b6:33:78:17:45:c1:2e:38:69:b8:99:eb:
38:4e:f4:9e:18:de:9e:b9:38:d6:d7:3a:9b:12:fc:7c:54:e2:
5f:60:d3:dd:97:f5:40:24:85:88:4a:55:39:7f:6d:8d:e9:d5:
65:47:63:41:bc:b7:7e:52:59:44:f3:bd:70:a5:20:a9:09:29:
34:2b:7a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:49:45 2026 by rpki-client