Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: jsRNUKwmFHC6N+aW30lxJcvPtdP2zUjUFMg090K/th8=
Subject key identifier: 31:2E:E3:16:22:1F:F6:44:D9:6D:79:2A:A8:B3:72:8E:5D:2F:08:11
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 019D284DF953995D26D1E41A4174F6FD1F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 0BBF
Signing time: Thu 26 Mar 2026 04:01:31 +0000
Manifest this update: Thu 26 Mar 2026 04:01:31 +0000
Manifest next update: Fri 27 Mar 2026 04:01:31 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: wHiVLjj4Raj/o4rvPftgMSA3ZwymlXezdKWxLMb4Fi0=)
2: ErpeCUDkmubemk25x6bhiE8fSGc.roa (hash: TTJUK42mws9XlE8j1BxdD7GShsktqMxOOwmtU5mBiJY=)
3: T0pinHQE9eLRbdmXpvSn-pLDjUA.roa (hash: fpKBkag1Eq814ryw6TGAsVdMfo9isfHsmaeJ5gB+g6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:f9:53:99:5d:26:d1:e4:1a:41:74:f6:fd:1f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Mar 26 04:01:31 2026 GMT
Not After : Mar 27 04:01:31 2026 GMT
Subject: CN=312ee316221ff644d96d792aa8b3728e5d2f0811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:38:57:12:b4:cb:b2:36:7f:13:08:ab:c1:94:
8c:16:90:a3:55:75:e7:7a:5b:58:e1:20:b0:1a:d3:
aa:5e:0f:e8:e7:24:d1:62:a3:e8:b7:c9:70:4d:4a:
48:d7:9b:f1:6e:03:94:ee:f8:75:ca:79:0b:fb:86:
ef:63:58:fb:34:73:ad:eb:0f:2f:72:65:ad:4e:23:
f2:62:a4:7a:6c:92:0a:93:f6:fd:1f:f2:b4:b6:42:
66:ac:b2:fc:50:08:d3:6e:18:dd:47:d3:ac:0f:f0:
aa:8e:81:f5:c3:96:63:55:50:5f:7e:ce:42:70:08:
45:a9:dc:c3:82:9f:40:1a:d6:b7:cb:e5:d2:10:99:
c3:87:45:b6:9b:98:ac:09:b8:65:94:0a:b6:13:51:
af:df:84:23:ee:e1:c3:55:80:a4:cd:8d:28:50:0a:
af:0e:d9:61:e2:30:24:81:23:1c:32:ff:ea:e0:dd:
7f:6d:b9:dc:e1:05:57:fe:7c:b6:bd:11:4c:de:a9:
f5:79:41:ce:dc:9e:36:25:98:24:5d:4c:85:ae:7f:
76:61:dc:1b:75:89:54:a5:ad:d9:39:6c:eb:d0:3f:
a6:de:08:68:fe:74:14:8f:8a:c1:61:3d:d8:1e:6b:
ac:82:87:95:12:fd:ec:10:e6:1f:77:03:43:f0:e0:
d9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2E:E3:16:22:1F:F6:44:D9:6D:79:2A:A8:B3:72:8E:5D:2F:08:11
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1e:65:31:d3:e4:35:4c:69:f8:85:75:4a:d9:0f:da:c2:8d:
b2:6f:63:f1:5a:67:5b:28:16:0d:5a:ec:3b:89:a4:ff:ea:72:
db:fa:98:40:b5:e6:9e:16:8f:10:3b:d5:13:17:bd:2a:59:b2:
12:f6:57:6e:48:06:bd:d8:6d:26:92:26:18:da:a2:64:ee:24:
43:6c:50:ae:a6:6c:3d:6e:06:c8:f1:c8:ed:4c:04:25:0a:0a:
0a:0e:6c:65:b1:d7:e7:d7:e4:3f:b6:d1:19:a3:25:47:59:d4:
26:ab:06:4b:3f:39:ed:59:f7:db:f1:a9:4c:07:97:41:f5:22:
25:52:15:39:e0:9a:45:5c:fe:8c:53:96:b0:a1:a4:fd:a8:80:
82:d0:11:4d:e5:bd:4a:75:db:c5:33:58:89:c3:f9:60:b7:3d:
6a:14:b9:1e:92:89:e3:43:0a:51:b9:0b:7f:2b:93:b2:9f:46:
38:ec:36:f5:ff:fe:84:9b:5b:21:63:72:2f:38:80:ab:70:49:
04:49:80:87:8b:3e:f5:d1:e8:0b:d6:c0:9a:35:d2:1b:eb:92:
a5:58:8f:fe:7f:d8:54:31:77:d5:06:de:ab:65:0b:da:e9:e9:
22:d5:55:9d:59:71:9f:4e:89:21:61:31:11:06:b0:6a:de:2b:
b1:bf:3d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:00:46 2026 by rpki-client