Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
File: a4T-xJBquJAgoRa2hEbM6vbMUA8.mft (raw, json)
Hash identifier: G0o8g2cbOF77T/TnB2HZIfQCY39FMq9T28n8DQOVSfA=
Subject key identifier: 0E:3A:2B:B6:48:71:96:AD:FF:D1:2C:8E:11:55:40:21:FF:DE:A1:90
Authority key identifier: 6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
Certificate issuer: /CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Certificate serial: 019D273B19A86D34F5A129EABF72AEE2BED7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
Manifest number: 0E0E
Signing time: Wed 25 Mar 2026 23:01:17 +0000
Manifest this update: Wed 25 Mar 2026 23:01:17 +0000
Manifest next update: Thu 26 Mar 2026 23:01:17 +0000
Files and hashes: 1: a4T-xJBquJAgoRa2hEbM6vbMUA8.crl (hash: 6OqU6Mg0w5jIQZfyOHEE9XNG3/Nqt7n79SXmgLSJNbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:19:a8:6d:34:f5:a1:29:ea:bf:72:ae:e2:be:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Validity
Not Before: Mar 25 23:01:17 2026 GMT
Not After : Mar 26 23:01:17 2026 GMT
Subject: CN=0e3a2bb6487196adffd12c8e11554021ffdea190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:60:f3:6f:7d:7d:6f:30:7c:ef:ce:8b:59:d0:
5b:fc:d1:f4:86:43:e0:fb:e4:6b:6c:fa:24:fe:92:
f9:77:b4:9e:02:c6:31:98:a9:9f:3f:e7:d8:e8:c3:
5d:0d:6d:30:11:12:5f:b0:60:24:cb:bc:a4:5e:8c:
23:88:6c:31:96:1a:89:00:bc:55:99:ad:2a:a5:da:
ef:ce:67:9b:c0:61:9b:4e:2d:91:48:ec:a4:ad:77:
25:4e:15:1f:54:63:04:9c:9d:c2:20:a8:95:3c:c7:
fb:d6:c4:45:7b:50:5e:35:56:96:79:8b:0c:63:08:
73:ad:dd:a5:f3:16:67:7f:30:d9:e0:76:62:d6:7d:
b7:76:21:43:aa:1d:a4:90:ab:6b:b7:f1:7b:09:05:
47:b2:c4:8c:68:c2:0d:bc:d2:8c:8b:ff:4f:6e:28:
4b:2e:49:ad:ca:f5:11:00:98:40:11:79:aa:ab:cb:
56:df:50:08:13:aa:06:b4:3b:d6:4b:52:9f:19:0d:
a8:e9:a8:7f:b1:31:77:9d:a5:fa:88:d6:92:e3:48:
15:0a:57:05:8f:9c:11:28:b2:40:6c:9d:af:78:b2:
d7:3e:ce:f0:d7:af:b6:f9:47:9a:ca:90:d7:68:1b:
61:8e:7a:37:7b:9c:e9:ce:36:df:5e:c6:9f:d3:71:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3A:2B:B6:48:71:96:AD:FF:D1:2C:8E:11:55:40:21:FF:DE:A1:90
X509v3 Authority Key Identifier:
keyid:6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:85:de:25:57:0f:f9:bd:d0:20:a7:29:0a:2c:8d:cf:34:c3:
23:b3:37:65:25:c2:72:2b:30:5a:26:0d:c5:1b:74:b0:47:26:
bd:d2:4e:93:6c:41:8e:da:ff:aa:87:c7:9e:11:32:40:d4:7c:
f0:bf:73:dd:65:e0:d2:5f:0f:eb:ae:c7:c4:56:cd:78:81:f4:
6a:aa:d0:96:9d:0f:34:ca:36:f8:a6:e8:1a:9f:6b:50:9d:87:
b0:fd:41:37:e9:63:b4:da:15:e9:2d:eb:5c:7a:53:8a:83:7b:
6f:56:ea:51:59:51:68:bb:97:a4:91:7e:7e:a1:52:fe:58:2f:
55:30:12:77:00:69:08:4d:db:3e:ce:80:60:28:99:59:14:59:
75:b5:e7:1d:2a:16:2b:f3:d7:57:6c:8c:61:7e:4a:f6:d0:dc:
70:50:e6:fe:e1:de:7d:26:3d:96:d9:ff:5f:6d:8b:42:c2:d5:
f0:7c:41:15:f5:80:63:fe:50:fb:40:3d:53:cf:d8:38:b6:55:
e0:10:e6:43:ef:5d:2e:2f:f1:db:d2:5a:64:68:2c:56:ee:16:
cd:09:bf:45:4e:90:4e:31:04:0b:04:05:47:b8:6a:93:75:bf:
af:60:8e:d0:d3:ab:df:ba:34:76:15:62:3f:dc:a0:0c:79:7f:
8c:99:58:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:09 2026 by rpki-client