Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
File: e4mF-uoIWYwFzDC4LigjBq95MxY.mft (raw, json)
Hash identifier: AWs72VhdbNGHZVVjkWbE7cvzCtw8QCacZLg+FlEdk68=
Subject key identifier: DE:1B:33:35:41:B6:D5:47:D2:55:4A:0C:CA:7B:5F:AC:5D:12:63:8F
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 019D288440633BE9C2728BBC860120DC9677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
Manifest number: 1122
Signing time: Thu 26 Mar 2026 05:00:48 +0000
Manifest this update: Thu 26 Mar 2026 05:00:48 +0000
Manifest next update: Fri 27 Mar 2026 05:00:48 +0000
Files and hashes: 1: ctypwi_YKCa3xqtYI5R6ti_6Q04.roa (hash: qrdXq0UfoxpWYAu0rvMx4Tk+4wVIHjFefJvMtTB1BXk=)
2: e4mF-uoIWYwFzDC4LigjBq95MxY.crl (hash: 6GC3E62rGc0uU7O42Z/Aza+LrBUMpIUrdg6SNsMgQD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:40:63:3b:e9:c2:72:8b:bc:86:01:20:dc:96:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Mar 26 05:00:48 2026 GMT
Not After : Mar 27 05:00:48 2026 GMT
Subject: CN=de1b333541b6d547d2554a0cca7b5fac5d12638f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:34:20:88:01:43:e9:cb:b7:ff:ee:da:eb:0a:
3a:0d:03:8f:c1:4a:14:f1:c5:94:a3:78:94:4e:c4:
78:75:9c:94:79:4d:e5:35:25:eb:56:26:fc:11:42:
45:0e:e3:99:18:8e:dd:82:1b:ef:b9:4c:cf:5a:eb:
4f:1a:bc:92:f6:a7:06:b3:42:fc:34:56:48:3b:66:
f0:e3:83:2a:87:6d:5a:bd:5e:69:3e:22:70:a6:39:
b0:96:27:00:53:f6:c3:f9:c9:27:5c:40:25:95:c0:
f7:41:50:89:55:b6:7c:f8:88:d5:f4:88:2a:84:6e:
eb:e5:69:f5:03:12:56:f6:93:d3:fe:d6:f6:e9:02:
6c:1f:1e:96:6a:06:ea:d0:55:bd:36:1f:6b:be:3e:
8e:b5:63:13:e9:e4:cc:ce:f1:4b:00:77:2a:df:c2:
2a:1b:77:ed:14:1e:62:b2:9e:e9:a2:69:4f:8a:87:
d9:23:65:c4:57:08:50:e8:1b:50:f5:bc:ba:cb:bd:
c5:10:9a:87:e0:1a:2d:b9:8d:a8:79:e1:80:a5:7d:
ee:ba:ec:ad:e2:47:e4:3d:db:bc:a1:cf:4f:ac:ec:
09:6e:a3:cd:7c:48:24:be:23:2d:4c:25:2b:23:d8:
c2:f2:19:fa:54:53:f1:da:0e:67:58:df:b4:ff:75:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1B:33:35:41:B6:D5:47:D2:55:4A:0C:CA:7B:5F:AC:5D:12:63:8F
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4e:21:02:b8:35:cf:d4:f0:08:1a:2d:5f:13:ca:51:89:88:
a1:ce:a5:57:f6:aa:b9:44:f7:04:f0:58:d0:73:00:c7:5f:39:
b7:e1:4a:64:73:6d:b2:c8:f5:7b:34:98:d3:eb:5e:07:78:03:
81:fb:aa:07:8e:20:93:78:55:e2:36:82:15:ff:8c:d1:07:7a:
28:20:f6:89:4c:fd:a1:62:55:f7:1d:ad:14:61:6b:50:5c:04:
8c:89:1e:a9:8c:12:ad:d3:4a:4a:3e:bd:f7:b0:29:a9:58:4e:
d1:3f:65:00:34:f3:d8:6a:52:a9:d5:1e:37:a5:6b:e0:fd:3f:
7d:dc:10:e2:71:95:70:b6:b2:aa:79:ec:44:0f:81:8c:b5:24:
e8:cf:10:9d:5a:c4:77:ed:a7:1c:d8:ea:99:f4:05:be:bc:a8:
59:b3:da:93:78:66:3a:ac:40:cb:04:d0:7b:75:da:e9:8a:8e:
fd:56:cc:66:81:4a:06:5d:68:04:62:5e:0a:c6:c5:45:0f:60:
9c:ca:2e:5e:7a:eb:eb:77:fb:98:28:fe:f4:2c:0b:6e:74:02:
c3:5f:65:f5:c2:ad:14:1b:e5:64:a9:58:fc:3a:f1:e1:f1:d6:
20:b3:f3:a1:1b:7c:38:e6:20:3a:51:5f:02:cc:9a:72:2d:ca:
4a:e1:36:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:42 2026 by rpki-client