Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: p9lbb+4TSgrBLb/UNOpJfV2IL59FVvuH+KajJsi4Gv0=
Subject key identifier: 1A:61:5D:57:28:95:9B:31:A4:9D:17:73:F3:13:4C:37:09:7C:44:43
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 019D28843A1282B495F04F6D9A24988EFCEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 05:00:47 +0000
Manifest this update: Thu 26 Mar 2026 05:00:47 +0000
Manifest next update: Fri 27 Mar 2026 05:00:47 +0000
Files and hashes: 1: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: 87EdsDzmboF9wi4DsurRV2vCzjq43qorAG24nXzyRis=)
2: jbafLlCB65wc3lu8qCmYl11AIFk.roa (hash: K+M36ULpoKKc2R4rksKlSojLYrf7EhhEe4ldkXRNVqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:3a:12:82:b4:95:f0:4f:6d:9a:24:98:8e:fc:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Mar 26 05:00:47 2026 GMT
Not After : Mar 27 05:00:47 2026 GMT
Subject: CN=1a615d5728959b31a49d1773f3134c37097c4443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5f:2c:32:b5:ab:27:fe:df:1a:e0:bc:c8:87:
35:b3:2a:8f:84:ec:e3:c1:8e:b3:a5:21:84:39:f2:
c5:c2:32:53:01:e0:09:c0:35:9d:c9:8c:87:21:72:
ff:c1:ce:1a:2a:31:7e:2f:c3:1c:9f:87:13:0a:91:
6b:1d:4d:49:42:9a:88:c6:6a:94:59:3d:f0:14:fe:
f6:45:a2:73:ef:d8:14:2b:bd:8d:6d:44:2f:fc:1c:
02:b3:c7:e3:6a:d3:1a:da:d6:45:7a:58:3d:e4:05:
c5:cb:c0:a0:7f:04:7a:63:a8:29:ba:b6:b4:b7:e7:
df:42:3b:ff:c0:96:d4:30:e7:65:49:81:d4:7e:7a:
48:66:48:07:39:03:bc:95:a7:3a:df:e9:4b:2a:94:
64:83:79:53:5e:cb:27:9e:83:73:8b:72:81:a4:55:
25:bf:7f:a8:c2:f7:5f:29:9e:27:15:99:a6:b3:d1:
d5:b4:a7:a3:a1:92:e2:2f:83:19:ce:cd:82:77:c2:
61:07:9d:07:6f:bf:57:ed:ab:c9:47:5d:cf:ee:3e:
c2:02:0f:34:2e:97:1e:7d:fc:b0:a0:ff:cd:87:6a:
08:c3:68:f8:f2:49:8e:b1:f5:18:74:5a:17:f2:40:
ae:7a:5b:1a:dd:6a:7c:a0:db:d3:58:cf:2c:ef:9a:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:61:5D:57:28:95:9B:31:A4:9D:17:73:F3:13:4C:37:09:7C:44:43
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:72:b5:dd:d1:33:5e:6c:e8:31:7f:f5:73:21:be:65:e3:25:
2b:8c:ee:74:94:2a:19:17:87:3c:0b:f6:8d:3a:74:d9:7b:eb:
31:96:eb:1a:59:97:1e:77:a1:91:c4:87:6a:ef:38:4d:01:7f:
56:11:c9:55:79:6a:e4:64:76:74:f1:12:98:a8:2d:12:54:98:
6e:77:03:4a:8d:8e:20:5f:2b:86:8f:cf:d7:ec:16:7a:2d:6c:
86:73:c6:4f:e9:03:7a:26:68:44:3b:fc:e3:c2:25:02:93:91:
51:43:b5:94:e0:ff:12:3f:b9:ed:60:df:08:8d:9e:8e:84:20:
b8:67:fc:97:08:4a:84:45:75:65:06:89:cc:03:28:0c:f9:a0:
7e:37:0c:07:ae:2a:a0:5e:66:b7:70:60:89:0a:b4:45:cf:ed:
ca:76:a8:cb:39:55:3f:a3:57:4d:0e:39:d6:0e:36:da:4e:98:
2e:a6:f3:6b:25:4f:f7:ad:15:da:57:b9:69:7f:df:75:9f:3e:
33:10:b9:33:05:51:78:fd:88:5a:7a:a6:8c:89:21:81:89:41:
ba:b1:1f:46:c0:54:67:a6:70:11:a4:76:05:8f:d1:c8:d5:2b:
92:9b:3d:e3:20:24:f5:b0:1a:38:0c:33:b7:7b:85:6f:d9:93:
18:4b:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:47 2026 by rpki-client