Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
File: C4JANE7t1v9gI0SCv8MAHW4boJk.mft (raw, json)
Hash identifier: q3jDTdevsP+krLGh94uzhbJyJvjpnuey2m+Jgqwa3YQ=
Subject key identifier: D3:01:2A:90:55:1F:97:05:F3:1A:D9:38:0A:5B:66:B6:AD:D6:F4:C1
Authority key identifier: 0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99
Certificate issuer: /CN=0b8240344eedd6ff60234482bfc3001d6e1ba099
Certificate serial: 019D28164F0BA0AE82E141D82BD0FD5D07DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
Manifest number: 02B5
Signing time: Thu 26 Mar 2026 03:00:43 +0000
Manifest this update: Thu 26 Mar 2026 03:00:43 +0000
Manifest next update: Fri 27 Mar 2026 03:00:43 +0000
Files and hashes: 1: C4JANE7t1v9gI0SCv8MAHW4boJk.crl (hash: F0gOaFoqgnYouU5SLhQHSORr+Lr17YecYrDpqw3SMNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:4f:0b:a0:ae:82:e1:41:d8:2b:d0:fd:5d:07:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8240344eedd6ff60234482bfc3001d6e1ba099
Validity
Not Before: Mar 26 03:00:43 2026 GMT
Not After : Mar 27 03:00:43 2026 GMT
Subject: CN=d3012a90551f9705f31ad9380a5b66b6add6f4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:5b:18:6a:bc:56:29:18:26:a4:e0:00:2a:23:
04:7b:b1:8c:40:c3:55:08:d0:38:6a:74:c8:91:8a:
d4:8a:cd:12:76:fa:29:0b:f1:8e:03:45:e7:46:74:
0a:48:c6:98:2a:e9:55:4a:4b:6b:4d:aa:34:1c:9d:
e3:8d:d2:89:4d:fc:8c:42:8e:af:1e:58:32:2b:80:
25:a1:03:c4:56:e0:ab:03:16:68:d1:b2:67:bc:c6:
34:f7:c2:1c:ee:ab:85:b7:b2:07:f8:51:48:d3:c8:
89:7a:38:2b:d0:59:6f:51:c2:e9:cc:f6:d2:f2:c0:
73:55:93:1d:61:28:b7:d9:b8:e6:05:78:ca:9d:06:
61:83:2d:9a:3d:5e:80:59:53:6b:77:eb:59:c3:80:
36:5b:f7:d0:4c:da:8c:40:16:9e:67:1f:86:1a:4a:
fc:a1:47:28:57:e9:42:45:0f:9d:1e:49:62:5b:b2:
9c:be:ec:3d:65:2e:62:39:49:59:46:fc:28:47:40:
98:27:3e:11:5d:ba:22:b1:05:cf:ad:08:f5:16:15:
fc:e2:03:e1:5d:43:28:71:0f:77:d8:fb:ba:9f:14:
33:be:8d:47:2c:4c:bc:5d:9b:cb:90:f7:4d:85:95:
43:00:4e:e7:b8:34:4b:cd:cf:68:a7:2c:b3:e5:d8:
d9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:01:2A:90:55:1F:97:05:F3:1A:D9:38:0A:5B:66:B6:AD:D6:F4:C1
X509v3 Authority Key Identifier:
keyid:0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:76:d8:26:31:29:21:76:8e:f2:1c:f8:65:a3:f4:6c:7d:16:
5a:19:9e:d3:b2:85:1a:91:af:dc:8b:ee:ba:dc:42:5e:0a:7e:
70:34:70:32:8a:1a:0d:74:1f:16:c6:7a:f5:d2:2b:c6:bd:66:
00:1c:3c:55:a2:b0:37:fe:4f:68:b2:38:98:1d:9f:9d:b4:41:
23:78:bc:4d:8c:f4:2d:f5:0f:48:b2:a5:58:25:19:cf:0d:82:
12:47:39:55:dc:ae:71:75:1e:92:fe:a4:5b:14:75:eb:81:d8:
69:4c:b0:bd:8c:63:e2:e6:07:74:fd:e6:98:95:90:db:8b:fc:
14:d2:d8:66:56:08:5c:ae:f1:5b:b3:a7:f9:20:e5:76:93:2d:
fd:93:25:3e:7a:38:64:fd:81:cc:40:01:10:03:4f:f8:c4:28:
bc:ed:0f:26:45:39:17:1f:3f:e6:c6:01:8a:9f:84:df:ce:26:
6d:f5:21:60:b0:f4:f6:e5:37:3f:56:ce:b7:b4:08:d2:8a:55:
ff:14:14:8f:f2:5d:bc:74:d6:4d:1f:0d:eb:cc:ff:26:51:a2:
b7:13:03:8e:0e:73:46:36:9a:b0:0d:48:65:7d:f7:20:49:ad:
87:0b:70:a0:6e:1e:fd:06:05:11:f7:7e:eb:c5:ac:99:fd:8d:
8f:9e:7b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:49 2026 by rpki-client