Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier: 7E7+oj+8f2Y3SNIf8VfQHnxFfemzQsVlxAUO6fycNbk=
Subject key identifier: CB:8A:7B:AC:86:A0:43:19:07:D8:7B:D3:38:F9:62:B2:85:59:01:DE
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer: /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial: 019D28BB7F9C85AA164C0577B2F70A3775E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number: 0BA2
Signing time: Thu 26 Mar 2026 06:01:09 +0000
Manifest this update: Thu 26 Mar 2026 06:01:09 +0000
Manifest next update: Fri 27 Mar 2026 06:01:09 +0000
Files and hashes: 1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: oF9sslUTF88/DKujVHaELESy/Xd5CvBaAHwZsX2mPZM=)
2: G_3AbkBvxlIP88eiGt3CS6nBjms.roa (hash: HxmAkTnKX1MXFmf40b0A8DoHMlH+AhQxL52OcvMUs9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:7f:9c:85:aa:16:4c:05:77:b2:f7:0a:37:75:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
Validity
Not Before: Mar 26 06:01:09 2026 GMT
Not After : Mar 27 06:01:09 2026 GMT
Subject: CN=cb8a7bac86a0431907d87bd338f962b2855901de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:26:b2:1d:08:e9:d5:9a:3d:2c:30:ba:ce:bb:
73:b9:d4:9a:fe:a0:48:3a:87:86:30:83:5c:70:6a:
dd:ad:0f:08:cc:95:da:08:1f:f9:24:32:05:23:fb:
0e:21:9f:63:23:ed:0d:85:b0:82:62:bd:2c:90:c7:
14:56:a5:05:a4:de:f9:36:b4:0c:ac:a9:25:26:45:
50:e4:50:cc:7a:94:a3:92:b6:0f:37:3f:bb:38:c8:
2f:74:10:b2:55:51:1c:05:23:0c:18:79:1e:e2:99:
cc:8f:18:dc:5c:13:07:bd:47:32:a8:68:3e:b7:da:
d8:9a:b1:45:d2:c2:32:d2:d7:d7:3a:b2:45:61:14:
bb:e0:3b:f2:bc:77:e6:27:76:c5:9a:83:ed:4b:26:
2a:6b:cd:bc:eb:32:1c:23:fc:14:45:93:93:a6:cb:
35:db:ad:48:5d:0a:5b:4c:92:01:95:60:7d:e7:4f:
ba:a1:8e:68:57:01:ae:aa:db:5f:6f:fe:9b:05:65:
40:cf:d8:1f:60:79:d1:45:2f:ac:ce:5c:6e:5f:52:
db:c5:5d:95:74:f1:34:0c:fa:99:8e:90:83:02:63:
50:c4:ad:5e:07:f3:fa:4e:84:9d:67:c2:81:1f:7e:
49:d1:5f:80:64:5d:32:a9:f7:8b:22:c7:bc:df:08:
7b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8A:7B:AC:86:A0:43:19:07:D8:7B:D3:38:F9:62:B2:85:59:01:DE
X509v3 Authority Key Identifier:
keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:83:09:aa:7d:cd:24:27:15:0f:c0:2b:6a:cf:fd:25:09:77:
f5:3a:2d:64:92:79:37:31:c1:57:9e:7c:be:48:de:0b:f2:c3:
a3:8a:f0:7c:a7:76:6b:5e:98:eb:3c:8d:6d:9b:62:3e:ba:cd:
cf:1d:e7:8f:f3:b5:54:35:61:1f:70:28:54:eb:c2:ac:8f:0b:
f6:32:6b:28:14:86:b8:e9:f1:e5:91:1d:46:d6:28:c5:5f:e9:
ec:7d:0a:e0:88:55:94:a6:ca:9d:25:f2:00:b7:3b:1b:7e:8d:
ba:bb:b2:4e:5b:e4:b1:d2:5e:ec:6b:f3:0e:cf:b9:cd:fb:19:
02:bc:ec:36:af:26:c4:b6:65:5d:71:17:c5:17:cc:9d:1d:0a:
af:36:b2:19:b2:b3:72:01:ee:ab:02:78:17:80:f6:dc:f7:67:
3c:09:d1:05:59:53:60:4e:e4:97:85:70:c8:11:d3:73:03:8d:
51:c3:45:86:dd:de:2a:50:10:ad:80:bc:e5:69:35:6a:c8:02:
73:8f:f5:a2:d5:c4:e7:2a:f9:b1:a9:99:86:ab:e6:b9:09:93:
41:54:94:ca:3e:e4:0c:35:cd:25:f4:3e:62:49:47:d3:6e:f8:
d9:38:40:6d:cf:06:f3:3b:59:17:1c:45:c4:c9:4f:19:d9:ee:
1a:0e:be:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:51 2026 by rpki-client