Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json)
Hash identifier: l8cFQsWtMJ0GPzVakINY+7bYs24X0zfffVt1uduf/6o=
Subject key identifier: A3:0A:B0:7F:9F:3D:6C:EF:89:A1:2B:F9:44:D0:F5:EC:C9:54:C7:F1
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 019D3262F02660A55737D4E4021447CBE30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 03:00:37 +0000
Manifest this update: Sat 28 Mar 2026 03:00:37 +0000
Manifest next update: Sun 29 Mar 2026 03:00:37 +0000
Files and hashes: 1: 3VLJL7-f2gIaDHt9s5O08zvl02o.roa (hash: nvn//iDJID27yb0p4DmlRMNLDXzJBDmTCGYaGUQJ1lA=)
2: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: hGcbJGtDmr4fUxhnNlrcm0+PnGGB6C6fnGv/5/dClkE=)
3: AK-YlCPEVbLAZegzYkNrI96Oefg.roa (hash: TQp9SWZ90VsXFNcjm672V8NJs6N2oP9XQNZuCEin7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:62:f0:26:60:a5:57:37:d4:e4:02:14:47:cb:e3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: Mar 28 03:00:37 2026 GMT
Not After : Mar 29 03:00:37 2026 GMT
Subject: CN=a30ab07f9f3d6cef89a12bf944d0f5ecc954c7f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:02:32:64:13:a3:e4:a5:cf:aa:e0:46:1b:
95:44:24:19:64:35:fb:9a:d7:9c:f1:33:ab:06:12:
ce:5e:95:76:59:92:1e:27:80:a5:98:f7:d9:3c:78:
28:be:12:72:b2:82:40:01:c4:93:22:de:b3:26:31:
21:90:38:3d:f6:de:37:0c:b0:32:e6:f1:38:d2:3a:
21:a1:97:0a:f9:f0:64:b4:68:63:4a:b4:4e:18:cb:
ce:f6:3c:8e:ab:28:11:36:f1:24:65:0b:ba:67:d0:
10:4c:33:36:16:56:4c:37:02:01:e0:93:e9:96:25:
fd:9a:b3:2c:60:a8:98:71:1c:ad:f3:35:2e:e7:64:
c8:1c:57:b8:d6:6e:61:c9:e2:3e:87:51:09:6a:37:
89:9d:d6:30:79:6a:f7:a9:08:35:e5:2c:59:b0:19:
0d:fb:0c:87:1b:01:06:87:12:ed:06:d2:4d:c2:16:
4a:35:60:f1:41:7e:30:90:37:dc:41:04:a9:56:a9:
df:f8:e6:6c:64:8f:c5:c1:ff:44:16:cc:5d:0f:37:
8f:d0:63:51:dc:4e:41:6b:cf:11:70:ff:4a:7a:5c:
f2:a5:06:fc:e8:fa:38:07:d8:dd:22:4b:9c:d2:5c:
58:b1:f6:33:17:a6:22:a4:fe:38:9a:f3:dd:2a:4c:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0A:B0:7F:9F:3D:6C:EF:89:A1:2B:F9:44:D0:F5:EC:C9:54:C7:F1
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:05:28:ca:ae:d9:84:dd:ce:01:6f:25:6e:67:26:ad:23:3d:
62:9f:88:41:94:d1:87:60:ec:63:75:13:a9:64:9f:1d:54:d6:
61:48:b4:7b:5a:52:55:bc:8a:3a:63:95:8c:57:54:2a:0a:75:
4f:71:07:72:65:37:3f:25:7e:df:11:c4:d8:17:b5:bb:80:de:
3b:1e:bc:b0:e1:e7:45:6a:24:10:72:d9:f8:c4:28:d7:6e:c0:
ee:99:4b:dd:6c:85:a4:4c:db:65:cd:92:9f:8a:0e:df:5c:f7:
5a:de:3b:45:27:f6:e2:4c:ca:34:99:be:cc:47:c6:c6:32:f1:
22:e0:58:8f:e4:77:01:a2:55:b5:45:b0:a5:48:cb:6e:c7:9e:
46:da:2a:01:f6:0b:9d:14:ad:cf:20:df:9f:62:e8:71:39:10:
88:82:4f:da:4c:3f:75:67:53:01:29:71:54:5f:11:e7:42:0d:
7f:b5:37:67:4f:d3:60:29:e3:ac:a3:be:c7:bd:b6:c0:96:08:
ef:8b:69:b5:e5:95:6b:84:b0:cd:c1:78:23:9a:e4:15:e0:44:
47:a2:5a:5a:47:56:c2:14:69:d3:5a:36:8f:4d:5c:07:6b:80:
11:01:b6:38:7f:6a:9c:68:b6:5f:2b:c7:e7:b0:56:78:95:72:
e6:ef:89:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:27 2026 by rpki-client