Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
File: Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft (raw, json)
Hash identifier: YH1sumcNmGzvI7s0MZOwVQB3xk+NpKBI7qUHDruUSdc=
Subject key identifier: 4E:B7:47:BA:69:41:AE:94:91:50:35:A9:54:67:65:5F:0C:D7:79:67
Authority key identifier: 0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
Certificate issuer: /CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Certificate serial: 019D29CE5FBF9A375074650E041069C99E56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
Manifest number: 181F
Signing time: Thu 26 Mar 2026 11:01:23 +0000
Manifest this update: Thu 26 Mar 2026 11:01:23 +0000
Manifest next update: Fri 27 Mar 2026 11:01:23 +0000
Files and hashes: 1: Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl (hash: UYxgYSS48ZfMGAkEzZtur314shMw3W1s3I9DM1D669A=)
2: Zc7RAD61b3xRcuabvmN1GFsZbp0.roa (hash: RGQxjIX7DwiOFHJJRcT6xixymhoBKc/5U/SMHLcBocE=)
3: tInv3pdN12lO0HutSPRlUsoAZFs.roa (hash: KzYnf/5cndcX07CYcYQPy6531MI9wF8VxnC9Gs3B49U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:5f:bf:9a:37:50:74:65:0e:04:10:69:c9:9e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ede17b8caf02461bf54c0964ed38a2590062f94
Validity
Not Before: Mar 26 11:01:23 2026 GMT
Not After : Mar 27 11:01:23 2026 GMT
Subject: CN=4eb747ba6941ae94915035a95467655f0cd77967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:0c:b6:28:39:ee:6f:3b:a5:bb:5c:4b:7a:
ee:2e:03:71:a3:fa:9e:3d:01:2c:c0:b2:46:a4:f2:
7f:c6:9b:17:b9:11:a9:6f:51:9c:52:fa:fb:a0:19:
81:5a:76:f7:e6:b5:51:9f:f0:80:32:d3:9d:7e:34:
92:b4:f5:26:dd:21:54:29:ed:51:f1:32:11:c5:03:
58:c1:cc:36:25:1f:7b:07:c3:e1:6f:27:0b:96:01:
9d:f9:83:14:53:b6:80:be:26:81:cb:d3:29:31:b0:
fb:b6:43:6b:32:9a:f7:bc:46:4a:7c:d0:b5:ae:7f:
4d:0c:e1:16:5c:48:29:d1:13:30:1b:86:9d:19:70:
ba:32:88:fc:a4:84:5d:bf:fc:c1:34:19:ae:dd:3f:
de:31:22:b9:31:e6:5a:2d:ec:fd:78:42:5c:ea:e6:
46:ff:8d:7f:2b:42:ee:d6:7f:7e:a5:de:4d:a7:bc:
86:58:80:2d:3e:1e:90:6d:42:f4:01:9d:6b:e0:1f:
12:f8:96:5a:c0:ea:75:50:44:e5:ba:ea:93:f6:a5:
d6:a4:52:cb:6a:44:95:9c:14:d0:58:58:b6:ab:aa:
dc:bd:ee:2f:18:d6:64:98:e4:65:f2:fb:bd:ba:32:
a8:3b:2b:d4:b8:d6:b5:d1:88:5a:81:dc:b6:e1:89:
08:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B7:47:BA:69:41:AE:94:91:50:35:A9:54:67:65:5F:0C:D7:79:67
X509v3 Authority Key Identifier:
keyid:0E:DE:17:B8:CA:F0:24:61:BF:54:C0:96:4E:D3:8A:25:90:06:2F:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e4bb51-b963-4b46-aa27-26bf8ccd7b74/1/Dt4XuMrwJGG_VMCWTtOKJZAGL5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5d:6d:35:48:5f:0e:db:bd:35:a0:ed:87:1a:71:e8:3a:3a:
c2:8a:35:6d:8f:94:7e:db:31:6a:fa:d7:11:42:65:a5:30:6a:
38:5f:df:b1:c7:88:df:cf:26:73:85:90:54:85:9a:b9:03:b0:
61:46:70:4a:2c:89:a1:f2:d6:93:be:9c:2a:34:01:f4:a5:7a:
76:0f:5f:ab:12:10:34:1c:9a:ce:90:ff:61:a5:cc:d5:a8:09:
13:45:b7:9d:cf:a9:22:c7:38:3a:36:1c:5f:c7:c5:99:b0:68:
30:b9:8a:09:4d:23:86:59:d6:11:ea:7b:db:57:28:c1:5d:6e:
dc:d8:a4:7e:18:1e:67:40:7b:ba:6f:d5:5e:60:32:69:15:79:
a9:65:b2:1d:bd:c6:8e:83:ba:3e:26:24:12:70:83:99:27:39:
59:85:01:43:d4:1a:2e:df:cf:db:63:64:c4:4d:36:db:2d:a8:
0d:f7:13:ff:9f:1e:f9:e0:98:de:bb:e2:75:14:51:a3:95:e8:
bd:5b:49:2a:0a:78:72:2d:d9:85:e4:2d:14:a9:45:a4:10:dc:
31:fe:5e:80:9e:63:70:1d:34:e8:dc:9f:d0:6f:38:1f:ea:ca:
c8:fa:5e:6c:ed:3a:7b:5d:e8:77:2f:26:4c:e0:5b:8f:74:27:
84:61:05:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:37:04 2026 by rpki-client