Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: wginS9A4RSK5nEvXTs+029RQ/PQIKcqJiS0xChZG5eU=
Subject key identifier: B3:05:F0:EA:33:C5:5B:81:46:76:12:4A:2E:65:6B:E6:7F:C1:3E:B6
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 019D28BB8801BABD40FDCF4839801CE15ACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 06:01:11 +0000
Manifest this update: Thu 26 Mar 2026 06:01:11 +0000
Manifest next update: Fri 27 Mar 2026 06:01:11 +0000
Files and hashes: 1: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (hash: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU=)
2: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: W0vcTtfr1NkXiU5uZ1raImhKzshQEXe111BhP8L9yYk=)
3: drikzNt5D9jwedYli_IhOY-bx94.roa (hash: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:88:01:ba:bd:40:fd:cf:48:39:80:1c:e1:5a:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Mar 26 06:01:11 2026 GMT
Not After : Mar 27 06:01:11 2026 GMT
Subject: CN=b305f0ea33c55b814676124a2e656be67fc13eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:e9:de:54:f3:8c:7f:96:ae:45:e9:4e:ee:
44:c3:cf:42:e1:e9:fa:9e:a3:49:d5:89:9e:75:17:
ed:4d:4b:00:6d:2f:42:de:09:9c:06:bf:ed:31:86:
3a:1b:d2:bc:53:44:a9:85:df:90:e2:97:b1:11:fa:
7f:07:bd:f9:9a:43:73:da:b2:29:cc:ee:de:e4:39:
e8:7c:1c:77:d3:f5:32:e0:c4:a5:d5:a3:b3:15:63:
82:ce:f1:7b:f4:74:c0:86:19:0c:58:2c:70:43:aa:
7d:64:90:01:89:ca:e1:a6:be:e4:d0:d3:9f:f1:a2:
0f:47:4f:c2:30:1e:34:4d:5c:75:57:9a:ce:3e:84:
56:c0:e2:3d:63:38:7a:d5:52:40:0a:ed:9e:16:ee:
1b:19:7b:b0:9d:f5:f8:b4:b1:76:fd:c5:5d:97:65:
36:e4:d9:14:90:a3:70:ef:71:ca:d2:a3:9e:33:05:
74:ac:55:9a:29:04:a8:15:aa:b1:e9:8f:b2:f5:84:
db:f0:f7:1e:84:33:0b:42:a7:c4:8f:c0:20:d1:a3:
fe:66:96:d4:0c:6b:d6:73:1d:43:56:61:99:71:f7:
04:ad:8e:d2:1a:63:aa:3d:df:a5:0c:c3:d5:00:31:
29:55:a4:64:8f:a4:01:98:0b:1a:8b:4a:3b:c1:3a:
78:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:05:F0:EA:33:C5:5B:81:46:76:12:4A:2E:65:6B:E6:7F:C1:3E:B6
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:85:3c:8e:1f:99:d8:22:bf:7a:be:53:d5:17:bb:9d:3c:5d:
28:19:99:3d:3e:c3:a0:bf:43:64:c5:8d:e2:e6:28:3e:46:48:
43:f9:0c:a3:64:81:23:70:f3:f1:01:af:ca:f4:33:1c:11:08:
6f:4c:a6:f0:c9:06:2a:8f:3b:7b:9d:9f:a4:c9:49:67:e5:09:
e5:91:98:04:b5:ef:0c:bb:d3:b3:a5:58:04:b9:93:12:10:29:
45:54:d6:10:42:96:81:f0:d7:91:42:90:8f:29:45:32:41:6e:
3d:5f:2e:24:c6:07:72:d5:21:15:7f:57:bc:fb:66:5a:fb:75:
db:a6:85:5e:82:c0:86:5b:cd:b2:50:e2:61:f0:64:13:24:96:
72:5f:37:5a:69:b0:4e:b5:61:69:a4:71:c8:62:68:29:06:a0:
4f:be:6f:db:b7:1a:d6:c2:a0:09:7a:89:6d:92:ca:7c:3c:8c:
cf:47:89:be:fc:df:2c:18:63:da:e2:d9:32:b4:d1:9c:f6:9c:
64:de:f8:61:d4:f1:cb:4b:c3:d0:07:28:9d:95:a5:a9:40:17:
fa:1e:e1:47:10:55:ae:07:25:1c:86:6e:49:96:03:cf:a0:bd:
fa:82:20:79:b9:36:6c:74:5a:40:82:58:a7:5e:42:92:13:72:
0b:95:47:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:54:13 2026 by rpki-client