Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: fd6NjTVQMrIfrk+ZHPkyWKkBkSTAqjn/tEK4Tys0Hfo=
Subject key identifier: 7E:4C:D5:F8:75:D5:74:9C:41:2E:8C:88:F5:88:BB:4A:6D:AC:DA:EE
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 019D2AA92788E839A3E13431134E039B4335
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 15:00:21 +0000
Manifest this update: Thu 26 Mar 2026 15:00:21 +0000
Manifest next update: Fri 27 Mar 2026 15:00:21 +0000
Files and hashes: 1: E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa (hash: iGIvi874jRBhxZZbEUcwG0C99qEqnZSND8WgM3AT+F4=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: 4a6033YyThvobl2DyUv/KtYgV0W164eF3ChKLn0Yyp0=)
3: yUKdjmZYtQWjFFXFgM-27cUdhs0.roa (hash: ob1AlTKcmBmfwJd93MbWCK4KiRPHg8c27xb+FIsvFL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:27:88:e8:39:a3:e1:34:31:13:4e:03:9b:43:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Mar 26 15:00:21 2026 GMT
Not After : Mar 27 15:00:21 2026 GMT
Subject: CN=7e4cd5f875d5749c412e8c88f588bb4a6dacdaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fd:dd:7d:f7:55:ad:61:5b:f0:38:a0:e1:a4:
df:3e:02:ef:e8:3b:a0:e3:3d:7f:34:fe:09:a5:53:
dd:90:52:37:7b:bc:5f:1b:73:37:7c:b2:e3:43:f0:
6a:5d:ad:50:f2:3f:fe:f0:6a:fe:68:6e:ba:76:53:
7b:55:38:2a:38:a7:ce:8b:e5:7e:43:e0:94:99:df:
be:98:d3:8d:3c:67:0f:65:8e:d1:04:6e:1f:3a:eb:
72:cc:c9:13:cc:d7:da:95:e4:9a:79:45:1f:48:32:
18:08:c2:50:37:68:4e:69:ee:d9:3c:50:9a:e2:81:
2b:38:4f:13:b0:15:a9:81:0b:72:7e:25:84:f7:48:
21:97:e9:ec:79:3a:c9:b5:5a:e5:7d:c1:af:fc:ed:
ed:21:43:df:93:a8:a2:45:97:be:c4:21:56:05:ff:
a1:30:ab:77:19:56:68:7d:5a:67:80:fb:ad:b9:d8:
a3:68:5e:93:e4:61:bc:35:e5:b3:36:7f:21:fd:a6:
f0:f0:ed:ff:44:45:d1:c7:ea:f2:f2:ec:40:fb:7a:
db:49:11:54:8a:4e:05:85:f0:34:b4:d6:6b:55:bd:
97:29:8a:8c:e6:9e:c9:ca:21:c0:ac:67:ea:a5:47:
90:3b:70:15:cd:90:2a:d0:c7:51:73:28:70:85:de:
ef:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4C:D5:F8:75:D5:74:9C:41:2E:8C:88:F5:88:BB:4A:6D:AC:DA:EE
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8f:6d:3e:3a:43:37:e8:2d:8a:c3:f8:ae:a8:f3:cf:f5:1f:
02:a7:11:ec:93:2d:ed:db:12:c2:b4:90:be:37:c6:52:79:f2:
11:df:16:64:32:d3:44:95:c3:fa:b0:ff:47:dc:ab:7a:ea:51:
eb:77:10:78:d3:c9:73:9f:d1:22:60:92:ea:d9:07:da:9b:ed:
18:79:db:c4:af:04:0d:a0:ae:78:e0:74:c8:5b:8c:10:ba:23:
53:61:b1:36:2a:6b:fe:0a:a2:e5:b5:6a:09:af:5e:fa:1d:d9:
36:cd:95:87:db:29:f5:a8:88:83:65:cb:64:e2:61:e2:c3:ae:
12:ff:0d:1d:6a:f2:56:bf:4f:2e:77:d6:a1:06:c1:d8:53:72:
0e:48:74:55:28:18:68:2e:b6:75:89:71:47:41:7b:03:49:c3:
2e:b9:83:3f:e0:54:47:08:38:1c:ab:7d:ac:cf:72:2e:89:4c:
27:f8:00:c1:2e:29:68:39:79:66:46:65:fd:d1:d8:98:8d:0b:
54:e9:5c:8c:97:90:ac:30:13:2c:8e:7a:86:0b:57:04:42:77:
ae:00:b6:8a:bf:71:f7:26:a4:92:03:a9:9c:84:27:cb:14:da:
a0:22:81:c6:59:50:37:58:0f:de:d6:36:e9:8f:c5:13:0b:96:
65:a8:86:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:03:57 2026 by rpki-client