Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: j7LYHKW0Nd+UfJyWxu26NcIMtHeHp3jlfjME+wZabgw=
Subject key identifier: DF:87:69:32:FD:D4:50:1A:02:DC:14:B8:08:EB:FC:31:2F:01:A5:65
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 019D28BB26D8E03D39FE25F9618C81BD18DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 06:00:46 +0000
Manifest this update: Thu 26 Mar 2026 06:00:46 +0000
Manifest next update: Fri 27 Mar 2026 06:00:46 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: tnUigTKkmW28EHqWWE/LQGnLnoG3rXNxoNasnOWcqsc=)
2: aD4aJMmaQg_1w8VUSr55ba35-_4.roa (hash: 3Ez4Ad6m2JnI3XnTs61pJ+5b17Kb2kmyt6ZM1f7rwSI=)
3: g2k94sbrfkriJ_TYzjO-TqZlMBM.roa (hash: 1ZkSwSDFlimbj/n4XoixvGsfM3nfxp389BDAwVqw2BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:26:d8:e0:3d:39:fe:25:f9:61:8c:81:bd:18:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Mar 26 06:00:46 2026 GMT
Not After : Mar 27 06:00:46 2026 GMT
Subject: CN=df876932fdd4501a02dc14b808ebfc312f01a565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:61:d5:ca:10:01:4b:2f:da:0c:fd:9c:ca:
93:b1:ad:0a:0e:29:a0:54:18:b8:03:ba:79:24:75:
0d:87:95:37:5c:67:df:2f:d5:8f:83:70:29:de:40:
3a:7d:2d:d0:39:ea:23:65:85:ca:91:30:b2:f9:13:
48:7d:d1:d1:26:8f:a4:d6:52:54:0f:7f:89:99:3b:
de:dc:26:27:73:3f:5e:4e:9b:00:4c:d5:03:04:20:
fd:e5:67:94:fe:fe:69:22:46:40:10:ff:9b:b8:ce:
c2:b8:12:f6:73:41:f1:8f:4a:bc:aa:b5:8f:ce:7f:
f3:97:68:3b:83:93:bc:ae:58:02:57:d5:62:73:14:
6c:4b:06:b2:ae:7f:43:9c:66:f6:d0:83:ed:98:f1:
fb:7d:b6:a1:bf:48:a9:48:56:a5:c4:c8:41:46:1f:
3b:63:27:3e:65:aa:01:63:ed:68:2c:67:0c:aa:b5:
46:05:22:e7:89:67:01:8f:af:3d:3a:d6:f1:31:99:
4c:98:66:18:18:a5:87:1f:4f:6e:29:39:81:ff:6d:
3a:92:c4:db:d1:48:fb:f2:fc:b5:c0:7a:86:20:d7:
c7:0e:68:8c:d9:a2:78:87:98:bc:b4:dd:d4:3c:c2:
23:19:38:bd:f9:b5:47:e8:a9:72:e1:b3:26:f3:82:
6b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:87:69:32:FD:D4:50:1A:02:DC:14:B8:08:EB:FC:31:2F:01:A5:65
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:31:17:fc:dc:a8:e0:bf:e4:5e:7a:ee:e2:51:88:3b:b7:94:
cb:57:52:e9:d7:d1:89:b6:fe:32:4d:f8:e2:01:40:9a:8c:8b:
c4:9f:cf:ae:c3:8c:66:86:32:f9:b7:03:0b:1b:6e:c5:53:54:
e8:29:f2:fe:56:0a:2e:2f:9d:04:38:7c:b6:a3:e5:4b:58:ea:
81:02:a1:ab:8b:ba:37:08:91:68:eb:45:b8:c6:6d:ed:8e:e2:
b4:3b:38:9f:df:dc:b5:2d:8a:04:48:f8:02:33:0f:8c:48:ff:
6a:48:02:33:62:ca:c2:ca:df:0d:f0:ca:68:c4:3f:d9:fc:46:
ab:0e:48:a6:cb:6f:8d:99:4e:45:25:b1:36:7a:72:d8:de:f9:
d7:72:aa:5b:dd:3c:a3:25:50:69:5e:cc:15:63:29:34:2c:23:
75:7b:e1:77:c7:43:b1:48:8f:46:4f:d0:ff:83:38:72:da:a6:
03:ea:9a:c5:05:f1:68:d2:e7:0d:aa:e6:91:d3:f3:d2:8a:17:
25:13:74:1c:89:68:f3:f7:60:4f:ec:c4:5c:f7:b4:47:64:d7:
4c:e0:aa:13:e4:ed:93:1b:b7:13:aa:64:92:eb:8c:7c:87:df:
cb:d1:84:1c:7f:24:af:f9:49:5a:69:90:5a:d6:d0:eb:5d:51:
c6:01:da:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:04:53 2026 by rpki-client