Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
File: 4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json)
Hash identifier: 9urSUxRa98ckEqVSy6EyratQXnShl9A7VLRufp7UzhM=
Subject key identifier: D7:A8:79:74:34:31:49:70:DB:7B:64:6C:45:05:1E:7E:02:50:6D:AF
Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Certificate serial: 019D29298BCCC77BB5DA2501FF353C39DC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
Manifest number: 181D
Signing time: Thu 26 Mar 2026 08:01:21 +0000
Manifest this update: Thu 26 Mar 2026 08:01:21 +0000
Manifest next update: Fri 27 Mar 2026 08:01:21 +0000
Files and hashes: 1: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: xqIv3YXEKLFlOpfvjV/NoPpIZ4id7llzlq9nKyA/TbU=)
2: w9M7qFYAM8Bc_3Ry_zHFbT7tXaQ.roa (hash: S9cgU4aODgbYFlt1oo6eD08eYcxMr87FOJ/xbk/bpB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:8b:cc:c7:7b:b5:da:25:01:ff:35:3c:39:dc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Validity
Not Before: Mar 26 08:01:21 2026 GMT
Not After : Mar 27 08:01:21 2026 GMT
Subject: CN=d7a8797434314970db7b646c45051e7e02506daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:a6:c8:b0:01:9d:7f:fe:db:f7:ee:e7:65:
3f:4a:77:85:e0:22:3a:e8:7b:c5:13:6a:67:e0:06:
df:1c:17:31:a8:59:55:cb:07:5c:06:6b:36:24:53:
51:b2:47:4a:ff:60:2c:69:5f:2e:6b:77:0a:e7:be:
b6:9c:6a:84:3f:d7:c8:96:23:13:40:fe:7b:70:33:
93:5e:ba:7d:76:71:ec:82:b8:51:59:28:d5:bb:b6:
de:ee:8a:40:f6:b8:c2:ce:d0:3b:b0:15:6e:c0:8d:
9c:5a:33:07:51:82:f7:31:f6:c0:35:45:06:a1:97:
23:e1:fa:50:c5:3c:2a:0f:09:d3:1e:42:ad:0a:5e:
a8:7b:da:6b:94:9b:52:eb:1a:e1:9c:43:16:d4:9b:
01:4f:ab:d8:db:77:59:97:cb:28:90:d5:a0:e6:58:
25:1b:b3:e6:4c:fb:fd:a4:50:a6:5c:8b:49:d6:34:
eb:39:a4:81:19:e2:80:10:7a:ab:d4:67:d4:05:b1:
1d:8a:c6:12:73:04:b6:88:cf:19:5d:e4:33:2d:f4:
e3:cf:d0:a6:85:d7:e6:25:27:9b:21:6f:2d:08:56:
3d:94:8d:d2:c3:89:a6:ba:40:33:8e:32:c5:2e:60:
85:30:9a:47:76:b9:42:f6:6c:08:9d:bd:10:84:05:
7c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A8:79:74:34:31:49:70:DB:7B:64:6C:45:05:1E:7E:02:50:6D:AF
X509v3 Authority Key Identifier:
keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:28:b3:e4:2c:6f:39:65:4e:9f:5b:68:d9:af:f4:3c:6a:d7:
37:f3:5a:71:c0:29:01:10:88:23:59:ea:c4:ce:f6:a7:0d:ee:
7c:e9:3c:cc:29:2a:7f:7c:66:02:41:74:3b:e8:a4:dc:d8:38:
ed:c2:d4:87:92:cb:1c:0e:1f:56:80:63:db:56:cf:b8:71:e2:
22:34:1d:25:d0:df:cf:74:02:54:86:5f:d6:97:e3:21:e9:c9:
57:2d:fe:2c:44:e4:b9:b1:4a:ce:ea:51:52:36:f5:21:a6:0a:
e5:4d:30:03:06:9b:e3:ab:b0:12:61:3d:ad:9f:3d:44:90:5f:
50:83:1c:9e:ee:5c:54:bc:6a:86:70:c4:79:98:a4:c0:34:24:
22:7f:a1:05:86:ea:90:03:be:d2:7b:97:d5:e8:0c:ae:7d:d1:
d4:ee:22:29:f6:e4:2b:94:7b:d4:68:2d:8d:ac:92:3a:82:63:
d5:f7:99:45:50:b2:1a:a9:8a:57:a9:f0:62:23:39:7d:0c:6c:
c0:0d:3e:76:a8:32:aa:9c:a5:97:7e:ea:e7:7e:56:90:0b:03:
34:de:6f:c6:5e:2c:ca:cc:b8:e6:94:36:17:71:9b:88:2c:6d:
ea:b1:1d:cf:0f:02:b1:49:b6:6b:df:27:89:bc:ff:1a:bc:5f:
0d:e4:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:39 2026 by rpki-client