Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json)
Hash identifier: 1AZ3iS+WsKokbujg3KvuQGoKZX20u2wYI6ePLg1+ccw=
Subject key identifier: 6F:AE:A5:C4:41:66:48:B7:03:07:BF:D1:AD:EF:F3:45:C6:42:88:2B
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial: 019D284D29C102153CDD5E03D8F871CFFC82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
Manifest number: 1540
Signing time: Thu 26 Mar 2026 04:00:38 +0000
Manifest this update: Thu 26 Mar 2026 04:00:38 +0000
Manifest next update: Fri 27 Mar 2026 04:00:38 +0000
Files and hashes: 1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: PGG7YTTfRQvzcjvBlGSojiWRjoRGPvbpzcmtEx1fHLw=)
2: fJgYZ4ej2JhPoX-SwafXWVTllE4.roa (hash: oBfl5sq0NvI5C3NZdb3K0ESRoAncOv9TLGKLm+7rmlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:29:c1:02:15:3c:dd:5e:03:d8:f8:71:cf:fc:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Validity
Not Before: Mar 26 04:00:38 2026 GMT
Not After : Mar 27 04:00:38 2026 GMT
Subject: CN=6faea5c4416648b70307bfd1adeff345c642882b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:47:51:99:5b:c6:a4:2f:93:86:a0:fb:2c:6b:
24:63:0a:fd:22:3d:a0:0d:c1:d3:1e:40:7c:f7:f9:
94:3b:37:97:55:c9:14:bd:5a:71:b2:5f:e5:a1:e0:
87:a5:5e:5f:55:d9:83:f4:f1:ab:28:9a:27:ae:19:
33:0a:df:60:ee:24:11:60:23:44:23:66:a4:8a:9d:
5f:55:de:66:0f:c4:ad:be:17:7f:5c:b2:5d:4a:60:
02:6a:d0:fb:43:3e:72:e8:00:81:24:c9:45:59:2a:
67:dd:3a:ae:9c:a6:73:8e:16:e5:87:85:73:fa:26:
39:d3:c1:80:c2:f6:b9:03:92:d6:e1:70:a3:ed:7a:
67:a7:a0:f9:73:b5:7f:cb:57:c7:18:b6:97:f3:52:
e3:46:2e:78:b5:1b:3d:72:f9:9a:ad:07:49:3c:a6:
65:06:83:21:57:84:0f:7c:39:ed:1c:b5:d9:a2:f4:
8a:3d:e9:41:90:2d:df:c5:e1:c9:e6:a6:7a:7a:75:
19:33:0b:ff:3a:7a:b7:99:40:7d:c4:66:b6:06:a6:
47:9e:d7:65:2d:82:92:1d:a0:65:de:20:07:45:2f:
50:8d:fa:37:8a:aa:4d:51:8a:17:c9:cf:b8:56:c8:
ba:df:7a:2b:0b:d3:6c:fd:a0:fa:ff:3a:05:43:d6:
d0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AE:A5:C4:41:66:48:B7:03:07:BF:D1:AD:EF:F3:45:C6:42:88:2B
X509v3 Authority Key Identifier:
keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:f4:f3:92:73:2f:ae:87:fd:a0:ba:1d:af:b5:de:c4:d0:9a:
e7:12:a9:e3:94:2f:9b:ac:0d:3e:f8:a0:5f:15:05:40:8b:22:
34:0e:ab:c1:89:0d:f9:11:8e:12:6d:88:37:4a:19:22:a3:34:
e2:7a:1e:61:85:e1:50:5d:f1:a2:4c:3e:09:15:4e:4c:6a:b5:
5b:43:79:27:f1:0a:b9:0e:30:14:78:72:77:66:10:f5:7e:d0:
a9:22:4b:a1:8b:0f:7d:ae:06:08:01:ef:26:bc:31:43:ec:03:
7b:42:ac:b1:bf:91:e0:54:b5:93:ca:06:1c:9b:86:16:c3:d6:
58:cf:3a:9c:39:c9:a7:0a:14:a5:b9:c3:b7:1a:92:93:9f:df:
36:80:a7:46:6f:69:89:9e:7f:94:81:1e:b3:e0:73:97:ea:61:
72:c6:c6:12:05:33:3e:d4:8a:01:9e:ed:2a:cd:5a:f5:33:15:
fa:dc:90:75:a8:d0:9b:c6:dd:c2:e0:f5:4a:66:0f:7f:eb:5b:
c4:ce:92:41:ae:eb:ea:2a:04:32:c2:f8:a5:39:54:22:e3:56:
de:af:c2:03:3f:93:60:12:34:4f:af:ff:be:1f:75:ff:ba:98:
12:35:a4:99:03:aa:1a:46:73:3e:a8:b0:38:ca:02:51:92:e1:
f7:32:1e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:33:57 2026 by rpki-client