Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
File: cn4hijGD9RKCflrG2eVCXivw7gM.mft (raw, json)
Hash identifier: JM7KvPAFSi6rgvudo2q1emubeLoOkcWzUGt/wx8Ce2M=
Subject key identifier: E3:40:2D:AE:2A:BF:23:49:04:41:66:C2:C4:9A:CC:1A:54:9A:D7:50
Authority key identifier: 72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03
Certificate issuer: /CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03
Certificate serial: 019D2704CA8BAC4CEBE87E3AD40B0384D2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
Manifest number: 0344
Signing time: Wed 25 Mar 2026 22:01:58 +0000
Manifest this update: Wed 25 Mar 2026 22:01:58 +0000
Manifest next update: Thu 26 Mar 2026 22:01:58 +0000
Files and hashes: 1: cn4hijGD9RKCflrG2eVCXivw7gM.crl (hash: Zx7emzpS0PYrg6lL54p23vUseR+TRmh+ctz5CZfSIGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ca:8b:ac:4c:eb:e8:7e:3a:d4:0b:03:84:d2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727e218a3183f512827e5ac6d9e5425e2bf0ee03
Validity
Not Before: Mar 25 22:01:58 2026 GMT
Not After : Mar 26 22:01:58 2026 GMT
Subject: CN=e3402dae2abf2349044166c2c49acc1a549ad750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:bd:f9:c2:b9:0a:a3:d0:1f:fe:f8:ad:e7:e0:
33:75:e8:ab:27:aa:a4:e8:54:c5:be:78:ad:2f:66:
d3:3c:06:36:89:9c:5a:9f:4b:b1:92:07:48:78:08:
34:12:0f:4c:aa:79:f3:23:c6:47:58:e6:b9:5a:cf:
db:fd:97:31:da:ff:ce:5c:02:16:b0:9e:60:8b:4d:
cc:dd:0a:59:9e:ee:2b:ac:91:9c:2e:59:49:a8:e4:
2c:4f:e5:0f:82:72:41:af:47:3d:4c:11:52:dc:c0:
68:da:28:ff:f4:df:88:ca:81:fb:72:fb:42:56:9e:
97:6d:57:9c:72:01:6f:11:6a:9e:11:3e:46:d2:db:
f5:eb:e5:61:e2:66:55:92:69:72:25:fc:03:5a:75:
56:5d:8f:d1:8a:e4:ab:cf:a3:64:bd:b0:f0:2b:c6:
c5:2d:91:a2:45:8c:31:54:82:48:aa:27:25:aa:e4:
e0:ef:c6:b2:fb:6e:69:78:14:0a:b9:c4:46:c9:60:
b4:18:0c:68:3c:2a:be:d8:d4:d8:de:e7:b7:06:44:
cd:92:0f:52:f6:7c:7e:d8:cf:b1:40:ec:53:8f:ba:
56:f4:64:6d:3d:dd:1b:3d:a9:e9:ef:23:f9:02:bd:
e3:f1:de:66:da:e8:c6:50:c7:42:0d:65:f8:14:4a:
fb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:40:2D:AE:2A:BF:23:49:04:41:66:C2:C4:9A:CC:1A:54:9A:D7:50
X509v3 Authority Key Identifier:
keyid:72:7E:21:8A:31:83:F5:12:82:7E:5A:C6:D9:E5:42:5E:2B:F0:EE:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cn4hijGD9RKCflrG2eVCXivw7gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3e513f-b9aa-4744-a570-efcb58200e8a/1/cn4hijGD9RKCflrG2eVCXivw7gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e9:df:1f:9b:58:3b:00:be:f4:93:98:17:67:a1:1b:f5:7f:
ba:28:5f:51:5e:41:40:03:e2:69:f7:6e:45:1b:f8:a5:d1:99:
d9:f7:38:cd:6c:2a:07:8d:2f:d5:a2:17:84:76:1b:72:44:08:
d1:7d:55:14:a7:69:f0:fc:21:50:53:71:9b:3c:38:9d:e8:db:
f9:ae:98:f3:18:b1:27:10:b6:60:91:02:09:ce:c5:99:29:5f:
5b:5c:44:5a:4b:ee:1a:c2:2d:77:ad:23:99:99:10:ee:a8:21:
ea:41:40:04:cf:11:42:64:6a:63:eb:9e:71:93:8f:9e:d6:b3:
2f:0d:d0:a2:dc:6d:d0:d7:81:a5:98:b0:e1:73:4a:d6:7c:48:
4e:4c:04:e1:70:a0:6f:25:05:81:a7:40:3c:4a:42:5c:00:4d:
aa:c5:26:04:57:ff:d2:18:c2:a5:0b:01:7b:41:cc:32:95:b9:
44:0d:30:a7:b6:2e:6c:be:13:01:3e:d2:09:31:e3:86:0c:5d:
fe:00:0e:b7:bd:13:61:83:59:ee:9f:b7:26:38:a5:29:cf:d8:
65:67:72:63:2a:fa:b1:18:94:8a:c5:6e:ce:a4:76:1e:f2:eb:
a0:4a:19:2b:65:3c:94:94:72:ee:e3:67:ca:94:6d:2a:d0:e1:
01:e6:5d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:44 2026 by rpki-client