Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier: DryJIpegiJrEc5TtFrmZpgej1XP8sW04NgPec0njQEU=
Subject key identifier: 56:52:98:AA:AC:38:94:F4:FE:DA:34:17:A7:44:48:CE:57:3C:F2:AB
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 019D25F1857B57BF4DEB894D2DAC1B1DB465
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:01:18 +0000
Manifest this update: Wed 25 Mar 2026 17:01:18 +0000
Manifest next update: Thu 26 Mar 2026 17:01:18 +0000
Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: QvxKfBgrZTaq/aJrxHYqg0FiN2uLD7Ha4xy8al1C4qs=)
2: qBE40uvjM3KhFoCteBLo6azxKqs.roa (hash: C60d4ehA+DJZSNtWiIvd1yDVO2n8d2kan5kGi6wEoXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:85:7b:57:bf:4d:eb:89:4d:2d:ac:1b:1d:b4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: Mar 25 17:01:18 2026 GMT
Not After : Mar 26 17:01:18 2026 GMT
Subject: CN=565298aaac3894f4feda3417a74448ce573cf2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a0:25:fe:e2:d3:75:21:48:42:a0:60:d2:d9:
87:d3:a5:91:21:77:9a:65:de:9f:30:eb:d9:78:65:
d0:98:2d:b7:94:ce:97:a9:2d:86:17:00:a1:e7:56:
01:1b:c1:4a:c6:fc:b7:69:88:11:b5:19:81:c3:17:
f8:18:74:91:94:6a:e6:4f:7e:dd:5a:ee:7f:11:b6:
ba:92:30:4c:b3:7c:df:d7:0b:89:78:2c:a8:2c:45:
d3:3a:b9:93:88:32:18:a7:ed:5d:9d:7f:0d:9e:39:
05:23:14:a0:b0:77:fb:cf:c8:22:87:be:db:73:51:
be:37:d2:82:83:2c:d2:f4:14:f1:47:72:10:0f:a5:
d0:c5:54:5e:1c:fe:c2:82:75:b5:f1:24:c9:40:54:
aa:87:f7:0f:96:33:fb:13:9c:63:13:12:1e:ff:a5:
5d:0f:c8:6e:7e:8b:1a:f2:35:ab:e4:67:d7:d9:1d:
88:29:4d:98:e5:cc:a7:97:2a:58:c8:6f:6e:cd:e0:
01:2c:99:0d:04:46:53:63:4e:91:ee:8d:ba:97:f5:
d3:50:75:fa:14:ea:90:60:88:b7:5f:b9:93:27:55:
62:bb:97:23:a0:82:84:32:39:67:1f:10:5c:21:65:
7b:5e:88:90:f8:cc:25:2f:59:3b:45:32:87:d9:3a:
fb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:52:98:AA:AC:38:94:F4:FE:DA:34:17:A7:44:48:CE:57:3C:F2:AB
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:de:20:f3:3e:de:50:38:ee:eb:1c:7e:53:ff:da:b8:70:ba:
41:0c:8f:8f:c1:26:b8:4b:0c:4b:39:2c:25:93:e4:7a:bc:26:
17:ee:39:34:a9:f9:62:3e:70:ea:81:18:0c:9c:b8:2e:e5:c9:
51:02:85:f4:54:1c:e0:9a:4c:a9:4b:c4:7a:30:77:45:a4:db:
d8:55:aa:91:a3:f5:0b:78:94:4e:c0:de:3f:a7:a0:9a:e6:dd:
ff:33:16:9f:87:a9:5e:aa:53:e6:67:c1:75:b5:bb:85:7f:6f:
5f:06:eb:e5:10:5e:54:3a:d5:62:0b:0e:8a:c7:57:ba:6f:1a:
3a:4a:71:4b:29:17:8b:74:b2:48:4f:0e:e2:10:cf:ae:c7:3a:
75:de:4b:79:63:f9:40:a5:e8:59:9f:79:25:b3:98:ad:9c:0e:
5c:60:37:10:ff:a0:ad:38:c9:1f:61:dd:2b:82:ef:5f:4f:24:
6c:0f:00:49:35:d5:d2:6f:8a:15:5a:b5:d4:99:d4:79:4f:55:
b0:0f:3b:b9:43:a0:9e:0c:94:42:d1:d3:9d:6c:63:7d:6d:ae:
10:4f:79:7f:13:83:8e:16:28:f8:0a:16:3e:9b:48:98:c1:76:
0d:65:7b:93:7a:8e:12:c0:7f:a7:e3:5b:b6:fe:b8:a1:b4:ea:
9a:34:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:29:42 2026 by rpki-client