Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
File: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft (raw, json)
Hash identifier: 4NjZEwkvedgqgz63pebwH8EyDxMo/MUn6znauzLUOow=
Subject key identifier: 3A:4E:53:26:8A:B2:FD:81:5B:6E:53:D9:22:73:F3:13:D1:F3:6E:61
Authority key identifier: F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
Certificate issuer: /CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Certificate serial: 019D292934027A14F191E39F0A149BA4ED8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
Manifest number: 1247
Signing time: Thu 26 Mar 2026 08:00:59 +0000
Manifest this update: Thu 26 Mar 2026 08:00:59 +0000
Manifest next update: Fri 27 Mar 2026 08:00:59 +0000
Files and hashes: 1: 1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl (hash: JaEzPoGuV7RWW2EtbCVIFDjGyVR0b5ImbPRnfFB1ghg=)
2: VG_cPEe7kTG03PcAiKPKPDDX2Aw.roa (hash: NnQzM+622E7wmxItwJFMLMXDDYpziIokkpr04kWQKgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:34:02:7a:14:f1:91:e3:9f:0a:14:9b:a4:ed:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9103893fc31e9d94d265aba90cc7dd57bc23767
Validity
Not Before: Mar 26 08:00:59 2026 GMT
Not After : Mar 27 08:00:59 2026 GMT
Subject: CN=3a4e53268ab2fd815b6e53d92273f313d1f36e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5d:cf:6a:bf:95:a3:af:4f:14:df:66:c7:c9:
10:63:10:a3:de:be:61:d4:88:42:6e:77:c2:47:66:
14:5d:e2:a5:16:ea:bc:f4:ef:09:e2:4a:33:57:3b:
fa:c8:43:0b:4d:4d:3d:64:d7:b2:6f:aa:fa:9a:7c:
be:04:94:a4:c6:a0:09:f0:76:77:6e:c0:dc:9a:ef:
70:74:6d:a7:a6:46:cb:ff:6f:11:46:d7:92:2a:6e:
99:e1:d2:21:32:70:a8:64:20:22:4b:06:08:bc:11:
f6:12:9c:05:fb:bc:24:34:59:67:6c:2d:78:82:ec:
f7:e3:3b:7b:13:df:9c:24:72:ff:aa:02:e0:e0:dc:
95:0a:ef:10:f8:26:6a:a4:91:3c:68:7b:94:e9:c9:
47:71:65:ef:68:ec:7d:ca:60:84:81:eb:61:29:cb:
f2:b4:e4:87:41:87:fb:ca:23:2d:7a:1f:ad:52:2e:
09:a5:0f:88:7a:3a:4d:84:d0:a6:cc:ab:67:4a:bf:
45:13:d8:d3:24:45:65:ed:3a:e4:50:0f:f6:d6:99:
ff:b5:ad:f8:33:64:84:66:bd:80:d3:9e:d6:6c:ae:
81:08:84:13:c2:2e:08:17:7b:d8:5d:a9:75:af:15:
24:6a:a5:16:b3:4b:73:0a:19:c6:64:60:a5:9d:84:
5e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:4E:53:26:8A:B2:FD:81:5B:6E:53:D9:22:73:F3:13:D1:F3:6E:61
X509v3 Authority Key Identifier:
keyid:F9:10:38:93:FC:31:E9:D9:4D:26:5A:BA:90:CC:7D:D5:7B:C2:37:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RA4k_wx6dlNJlq6kMx91XvCN2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/cdc995-9a91-4ec1-aede-f6e0f7d17440/1/1-RA4k_wx6dlNJlq6kMx91XvCN2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8b:8d:7a:72:e9:63:59:30:a6:43:05:37:e6:31:e2:96:07:
3c:77:40:f6:28:d1:69:78:1b:b7:22:b0:c5:86:07:4f:b0:5e:
1c:1c:22:dd:ca:4a:f2:07:fe:82:c1:0a:78:45:98:6b:f2:c7:
0b:d5:a5:9f:d7:e9:39:54:7d:c6:05:16:b2:e2:1b:ab:e1:bf:
66:a7:d8:ca:38:20:14:77:ef:cf:fe:be:22:2f:d9:aa:86:06:
41:1c:25:00:af:50:20:f9:76:df:b3:90:a4:c6:05:e1:55:41:
2f:55:64:17:15:fa:39:78:b8:03:e0:f3:30:60:d5:2d:88:e3:
8a:fb:41:4c:4c:31:01:45:9e:2e:60:e0:48:fc:c6:83:73:a0:
0c:e5:cb:fc:46:9d:ed:fa:cd:68:bb:c9:f0:20:b4:2a:00:7a:
e7:c2:e4:d1:9f:13:22:2b:04:09:dd:db:35:07:87:e3:f7:ef:
47:4a:6d:03:e8:8d:84:a8:7e:68:00:89:72:0a:37:97:b7:aa:
ac:66:7c:55:48:ce:c6:57:3d:1a:51:e4:96:9c:ce:c4:cf:7b:
12:4a:fc:75:61:2d:a5:22:57:7c:0d:b9:73:26:a9:cd:ee:a4:
36:29:18:a0:c0:34:94:54:0e:f5:9a:af:84:08:72:7a:98:74:
21:48:db:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:44:23 2026 by rpki-client