Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
File: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft (raw, json)
Hash identifier: r0kY1jxYhJEmxo6Y3LY8ic5dWH4II+PAnzRvb0Gpv9s=
Subject key identifier: 62:2F:03:F5:63:59:E5:43:C2:51:BF:DD:60:AE:19:90:01:7E:50:83
Authority key identifier: E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
Certificate issuer: /CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Certificate serial: 019D25BACF08141E2DE1597C885C6B9A4F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
Manifest number: 56
Signing time: Wed 25 Mar 2026 16:01:32 +0000
Manifest this update: Wed 25 Mar 2026 16:01:32 +0000
Manifest next update: Thu 26 Mar 2026 16:01:32 +0000
Files and hashes: 1: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl (hash: LdvTeci0YVkyZI9Y5AxRQhgQpAckG65jNCs+H2CzXog=)
2: AFLK_8dbQHSlYChoAA91MADo2dU.asa (hash: 7cAv3e9gnI3dZUR9MQwkNpXKUI1PglLX9wimy3aeHe8=)
3: Piv3x5GjdFWYogfJry-sQL2JX-U.roa (hash: 2ZYAqvuqxNoPqFzul2MyF+P3n7KAI2Js6FxsXshtYjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:cf:08:14:1e:2d:e1:59:7c:88:5c:6b:9a:4f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Validity
Not Before: Mar 25 16:01:32 2026 GMT
Not After : Mar 26 16:01:32 2026 GMT
Subject: CN=622f03f56359e543c251bfdd60ae1990017e5083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ee:0a:81:48:5e:e1:02:19:43:2a:d7:27:5e:
ff:c4:8c:ff:1d:ce:ab:97:c4:30:eb:3c:8f:d6:48:
ab:12:cc:13:49:f7:3e:fa:10:b2:8c:0f:53:34:27:
be:0d:20:f0:8c:2a:2d:60:27:03:b1:2d:2c:ea:9a:
0a:61:73:e9:31:8e:7a:8b:67:f8:c8:42:4f:de:27:
a0:d7:53:34:25:48:dc:ac:d6:12:d6:5d:c2:c7:4a:
9d:f5:0c:1d:ff:6b:d5:ef:8f:5d:8d:d4:3b:a2:bb:
47:6c:ea:ae:21:db:11:46:3a:59:cd:b3:f8:cc:99:
00:35:d1:e6:c7:32:c7:cf:f8:1f:70:56:88:22:6e:
4d:3f:b5:9d:08:8c:f7:f9:f6:ab:dc:3d:aa:3b:71:
97:19:8e:1e:24:8a:90:0b:8b:28:d0:a7:07:60:ea:
5d:03:dc:22:53:37:c7:96:48:ed:5d:1c:46:a5:3f:
ad:b8:9e:bc:23:ce:07:3e:ab:1f:4c:de:47:54:34:
9d:b2:13:fc:f6:98:3f:03:14:19:fc:d9:7b:dc:9e:
5b:b8:cf:2c:03:a2:5a:36:b5:9d:6e:4e:e8:bb:3f:
22:43:b0:a2:76:94:ae:c3:c8:9f:98:82:31:9b:02:
38:99:a9:11:2b:a4:a5:4c:6a:74:55:30:65:73:a9:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2F:03:F5:63:59:E5:43:C2:51:BF:DD:60:AE:19:90:01:7E:50:83
X509v3 Authority Key Identifier:
keyid:E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b8:e2:26:03:41:b7:6a:c7:c8:60:c1:37:5c:3b:2e:e0:8c:
85:da:aa:39:f2:3d:a0:74:36:04:4c:ac:76:c0:35:6b:90:12:
4c:a1:d1:03:88:a4:85:a1:b0:52:13:da:1f:1a:d7:55:ad:68:
15:ba:93:ee:c5:dc:7d:ec:42:cb:34:b1:38:ed:be:84:77:4a:
77:ee:88:0b:cd:32:6b:c3:bd:69:6d:40:3e:36:8b:6a:01:d5:
df:7b:52:b6:73:d5:fc:4e:34:84:3e:91:39:14:a2:21:52:7c:
90:36:da:39:48:19:49:d9:2c:99:b2:ea:97:74:d7:6a:b7:53:
5b:05:21:21:69:05:3f:93:8b:df:ef:db:ee:83:ac:83:a9:72:
4b:49:ad:94:40:e6:0a:f4:3b:23:49:9e:15:3a:16:18:74:67:
16:ff:78:aa:59:8b:14:4d:3a:a8:4a:f6:65:0a:6c:78:a4:7b:
ca:c1:62:5d:47:bf:9e:e7:b6:85:5e:d2:1b:ed:d0:86:7d:18:
f7:69:6b:44:c7:b2:00:60:f9:3d:24:4c:c3:84:63:e2:30:7e:
93:af:f3:1f:88:97:fc:03:01:9d:b7:cd:73:40:a8:5a:40:19:
7d:27:ff:9b:3a:84:b9:90:66:d2:f7:0a:4a:68:24:a8:ce:4c:
38:01:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:22:11 2026 by rpki-client