Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File: 4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier: uI+HSL7M/1uFsVy4bSNE9cVnOOI5v3xgEfYUSx1P3bY=
Subject key identifier: 1A:81:6F:2E:1C:99:AD:D3:B6:AF:AB:AB:D8:A9:46:4A:96:75:32:6C
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer: /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial: 019D2A047BC4DCC113DA6ED82CAD853538C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number: 0AEF
Signing time: Thu 26 Mar 2026 12:00:30 +0000
Manifest this update: Thu 26 Mar 2026 12:00:30 +0000
Manifest next update: Fri 27 Mar 2026 12:00:30 +0000
Files and hashes: 1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: nMLQJJ/I+2Bj91qZIefGdecva6KzPkmw5bLxkx3IJMw=)
2: JHxvjWc19A1tU7KyYGlgqUyLkL8.roa (hash: 9C5Ys0C3mf/K+bjsErUIoK6hkq5Fu1f77/hUUvfMpdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:7b:c4:dc:c1:13:da:6e:d8:2c:ad:85:35:38:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Validity
Not Before: Mar 26 12:00:30 2026 GMT
Not After : Mar 27 12:00:30 2026 GMT
Subject: CN=1a816f2e1c99add3b6afababd8a9464a9675326c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:1e:8f:b9:38:0b:74:4f:e2:c6:b3:a9:00:
99:3a:ac:90:6e:93:5e:30:5f:7b:55:f1:aa:bd:26:
90:82:7e:a8:c1:e3:e8:67:93:96:4f:ca:f4:f1:a7:
f0:38:79:d1:84:88:46:7a:cc:a0:3e:43:68:0f:01:
ca:f3:86:66:c0:83:07:34:c7:f9:cf:bc:23:1b:77:
16:04:68:22:e7:65:13:49:08:4a:31:c5:ce:b6:46:
53:4f:c9:47:3d:84:72:15:d3:c4:13:00:47:65:cc:
c8:57:02:81:1e:3b:75:98:46:bf:d4:5d:bf:8b:04:
71:73:7b:ec:31:f0:ee:fa:bf:bf:dd:f6:55:35:dc:
a0:e8:92:b1:3b:68:7a:5b:21:c8:da:c0:2e:2d:47:
2a:7c:b7:e4:fa:cb:8c:ff:50:c8:a6:ba:76:ba:f7:
51:28:a1:3f:9b:93:7f:ce:a3:72:db:86:c1:bf:a3:
96:dd:93:f9:af:6c:46:13:3f:fd:eb:21:e7:41:98:
0c:ec:69:56:5d:d8:6f:37:e3:94:1f:13:e3:6e:a9:
75:11:0a:20:db:da:b1:71:6e:e4:9a:19:17:2d:64:
24:07:46:a2:6a:50:dc:07:03:c8:0e:25:14:54:26:
eb:5a:30:50:a8:af:57:10:17:00:c9:f7:9b:29:0b:
0a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:81:6F:2E:1C:99:AD:D3:B6:AF:AB:AB:D8:A9:46:4A:96:75:32:6C
X509v3 Authority Key Identifier:
keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:a5:37:e1:4e:bd:ff:30:95:67:fa:03:af:16:10:ba:dc:72:
31:4e:dc:cb:fb:50:6f:9a:19:7f:d9:bd:e2:49:7c:35:89:84:
d2:5b:b7:75:dd:85:02:7d:50:b6:2b:28:7d:df:eb:01:dd:dd:
53:7c:69:ea:02:28:43:d5:ad:4d:9f:a1:2c:f2:35:5a:97:89:
3d:89:07:ba:a1:1b:1c:6b:78:62:b6:f7:55:6f:1b:65:3c:d9:
91:04:e4:65:78:1e:8e:31:c5:18:f1:f5:e1:3b:b6:ed:0b:66:
0c:6a:cd:30:c6:31:85:d1:84:d1:91:88:ea:0e:05:47:c1:f7:
87:be:76:0d:fc:ac:45:2a:96:3a:30:f3:2c:f9:5b:a4:13:fb:
69:41:ef:37:98:93:e8:47:6b:fc:6f:61:5a:8a:cd:43:4f:ee:
3d:94:70:72:fd:07:bf:92:9d:9d:c2:62:ce:59:3d:6b:b3:80:
25:9f:6a:2b:77:76:69:ef:fe:a7:5b:f5:4e:f3:d4:2e:5a:ab:
ed:4b:22:93:17:68:c1:c8:78:9f:4c:72:75:24:67:ac:c6:ff:
2b:03:84:d2:50:08:a7:f4:78:87:12:ac:ed:78:48:56:e3:43:
17:e5:a4:86:ea:f8:38:e9:22:7b:86:c0:b6:4c:e6:c8:01:59:
14:52:08:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:10 2026 by rpki-client