Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
File: 4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json)
Hash identifier: nyRbTBNDWf7JuvC1JjqgHLhLBpd1TpzFvlODR6y83VM=
Subject key identifier: 54:4F:38:F9:0F:0E:9A:D7:D3:68:D5:EF:50:2D:C4:6F:57:6F:60:D4
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Certificate issuer: /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial: 019D28846E5870BFBC7679EDF76DED318BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 05:01:00 +0000
Manifest this update: Thu 26 Mar 2026 05:01:00 +0000
Manifest next update: Fri 27 Mar 2026 05:01:00 +0000
Files and hashes: 1: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: wrFXDSwElXXf3C/3kfIsOxOSmAnd2GDTuZFaeQbrMV0=)
2: HMpkFnFRNLrRrrjLr9m-Ha2OMAk.roa (hash: MvD+kW64gasfrmfOU4x0HNuN58jbkr9LphVnvyCI/70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:6e:58:70:bf:bc:76:79:ed:f7:6d:ed:31:8b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
Validity
Not Before: Mar 26 05:01:00 2026 GMT
Not After : Mar 27 05:01:00 2026 GMT
Subject: CN=544f38f90f0e9ad7d368d5ef502dc46f576f60d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a7:31:94:de:5b:36:95:46:2c:13:11:f9:55:
8b:a5:24:d3:e0:fa:99:59:71:51:68:a9:34:9c:7c:
75:72:e8:ee:6a:f2:03:b0:f5:73:a3:9e:0c:0c:ed:
23:b1:ec:d9:1c:ad:16:ff:ae:30:02:1b:61:c8:50:
04:b9:6c:4b:5a:5a:94:22:6a:32:b4:52:18:8d:e2:
cc:a4:fc:9f:cb:6b:95:ed:81:8d:b0:53:3b:9c:68:
b6:c4:69:8d:9c:1d:cd:67:16:0c:62:93:75:86:23:
6e:83:3a:10:7d:8a:de:e8:67:8c:39:0d:45:c3:12:
33:08:06:c6:80:8f:d0:f1:56:9b:6b:88:db:a4:8c:
5e:41:98:0c:f5:d7:5b:96:5a:34:14:20:78:93:87:
d3:ff:0c:3a:67:55:bc:4b:20:f4:98:dc:87:0a:0a:
04:e7:41:8c:53:a4:22:1d:93:68:e6:a3:db:eb:09:
bb:7d:ca:05:9e:96:00:ff:3d:d7:8c:2a:0a:e5:fe:
63:df:64:4c:57:b5:c2:65:77:8c:06:3f:4e:7f:fa:
00:08:1a:28:12:a2:3f:33:a4:78:85:6e:9b:36:ad:
b9:ac:61:7e:fc:bb:30:40:3b:bd:f9:f1:2d:18:11:
19:9e:e3:10:9f:b5:7a:4a:60:2b:21:90:19:1b:d6:
9b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4F:38:F9:0F:0E:9A:D7:D3:68:D5:EF:50:2D:C4:6F:57:6F:60:D4
X509v3 Authority Key Identifier:
keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4b:8d:7d:81:e6:6e:ed:f6:47:87:d3:2f:9e:1f:e3:58:60:
d1:d4:49:67:ad:45:f7:ca:3a:aa:62:2c:cf:c4:34:88:dc:f0:
fb:e1:01:0b:86:32:30:91:71:dc:bc:39:d2:54:83:82:43:5f:
2c:29:9d:98:d0:53:e6:18:c5:ab:d4:98:99:d8:7f:dc:3b:0d:
45:10:da:e1:c8:58:57:18:2e:4d:05:01:1e:56:69:70:12:4d:
5e:2f:0e:cf:f4:f0:b9:f9:c8:25:3c:7f:e9:20:9b:77:99:0a:
f4:bf:53:48:c9:04:0f:5f:3f:88:27:6d:7f:3c:e7:ae:96:2f:
c1:4c:d9:28:6c:09:60:c9:f3:4d:58:e8:1e:a0:7e:16:ce:1b:
27:2d:69:27:49:8b:48:de:9f:c0:6d:32:59:41:e7:d6:6a:85:
8f:51:37:ac:83:6d:af:1d:2b:10:7b:6f:a1:7e:6d:57:a8:87:
ca:03:f1:52:f9:f0:31:94:18:53:0e:e7:48:c4:e6:ab:14:b4:
cb:09:5a:fa:09:e5:e8:f9:f4:f2:e8:ef:b8:65:ec:32:6e:95:
9d:56:af:34:be:1a:ab:6a:da:3a:24:f1:f1:8b:64:0c:84:3b:
54:69:38:94:69:f0:e9:9e:66:d9:19:35:36:7b:33:09:e3:c4:
dd:4e:59:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:01 2026 by rpki-client