Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
File: x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft (raw, json)
Hash identifier: F3HkhhY3ix7VHx9pFAlxGldozwO+iqJ0TqVJqyBHsNw=
Subject key identifier: 90:EA:3B:E3:39:B7:6A:8D:B8:D0:2C:DB:7D:F1:BD:2D:88:FD:EB:C7
Authority key identifier: C7:87:2D:A0:32:25:1B:AE:0D:E5:10:AC:5E:A6:15:7E:4E:4E:86:8A
Certificate issuer: /CN=c7872da032251bae0de510ac5ea6157e4e4e868a
Certificate serial: 019D284DC25C50DCC79455A8374B9236AF94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
Manifest number: 01EF
Signing time: Thu 26 Mar 2026 04:01:17 +0000
Manifest this update: Thu 26 Mar 2026 04:01:17 +0000
Manifest next update: Fri 27 Mar 2026 04:01:17 +0000
Files and hashes: 1: QQUsq5_bxMpaX0AgXCyLCGuNTIo.roa (hash: Buoj/gVa9VpkIZHwN4cu0QEoROO7EbtKc1cRDJ64dfw=)
2: x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl (hash: RYMigRtUP9eN9bffcqt4CFXoYxvX8X/aouDXQnzx8Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:c2:5c:50:dc:c7:94:55:a8:37:4b:92:36:af:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7872da032251bae0de510ac5ea6157e4e4e868a
Validity
Not Before: Mar 26 04:01:17 2026 GMT
Not After : Mar 27 04:01:17 2026 GMT
Subject: CN=90ea3be339b76a8db8d02cdb7df1bd2d88fdebc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0f:4b:2b:d2:21:c6:f5:19:b2:f2:52:20:de:
ff:c8:f3:62:28:f4:25:bf:69:87:54:13:b6:5f:9e:
17:d1:8d:5a:3f:7b:25:62:88:66:f5:2c:54:c8:16:
a6:a8:1d:73:aa:fd:cf:d7:0a:4a:c1:8c:f0:7a:d8:
c6:a8:cd:4d:8a:7b:98:b1:0d:4c:86:9a:1e:ed:4a:
f3:6b:5a:28:c6:d0:53:31:9f:13:a9:bc:1c:8a:8e:
ea:b6:51:e5:9c:87:5e:eb:c2:74:29:6f:d9:01:9f:
9c:b0:28:5a:c9:0b:a5:97:83:9d:03:8e:59:df:7b:
74:bd:d0:17:ee:5f:49:f6:6d:e9:9b:cd:1e:5f:41:
3d:4a:3c:1f:a3:45:22:36:f7:fe:bf:23:e0:b7:9a:
12:a2:53:9f:4a:0a:34:20:a9:ee:ed:bc:d3:1b:c4:
1e:6c:07:cf:e0:8d:d5:31:5e:dc:fb:70:f7:59:ad:
fb:a4:54:22:e8:05:76:e2:ce:26:27:13:cd:a1:12:
0c:4b:29:4d:2c:31:04:0a:81:c6:64:68:2c:a1:74:
76:5d:b0:3f:f5:e9:29:41:5e:9b:72:2e:14:04:af:
a8:a0:12:2b:2c:c4:87:fe:42:00:53:cc:04:71:86:
9c:a0:5c:88:d5:7f:08:c3:15:76:db:f6:19:e9:ee:
2a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EA:3B:E3:39:B7:6A:8D:B8:D0:2C:DB:7D:F1:BD:2D:88:FD:EB:C7
X509v3 Authority Key Identifier:
keyid:C7:87:2D:A0:32:25:1B:AE:0D:E5:10:AC:5E:A6:15:7E:4E:4E:86:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:78:a0:9b:b7:97:e5:54:7a:2e:fd:9b:9c:05:da:cc:7e:bb:
80:49:13:0b:5a:25:af:47:5c:1b:a4:1a:62:2c:55:9d:0f:76:
d1:65:85:65:13:0d:28:68:6e:a7:4c:3a:cf:04:43:d3:af:d6:
14:b9:fb:43:d4:4b:b8:b0:dd:d5:56:94:88:e8:5a:bb:50:42:
1e:d4:d1:fe:bd:c4:f6:19:7f:da:f3:f3:b7:c2:f3:a7:fc:72:
52:53:e7:a3:82:93:59:02:8d:c9:77:f6:69:f8:ba:92:94:e9:
a7:44:b6:fb:f0:3c:a7:1d:5c:9a:73:2a:f4:fa:3f:8b:dc:17:
11:44:8e:dc:07:e5:8d:6c:e5:8f:b8:28:40:e4:34:ac:6f:e2:
18:7d:05:40:1f:5d:50:c2:05:40:5f:11:9d:a7:34:28:ea:73:
93:60:68:c6:39:ec:49:ba:29:5f:c7:3a:00:76:4e:2e:d5:cb:
ea:c5:03:f2:e7:d4:66:c7:10:f0:1f:84:4f:2b:13:40:f2:98:
a3:50:64:d4:e6:61:7c:e6:50:3d:b4:8f:d5:83:19:24:52:b2:
43:46:2b:48:85:32:fe:c7:32:a2:69:fc:db:2b:bf:20:95:03:
a0:02:de:bb:52:f2:1e:ea:42:0e:dd:d7:45:da:cd:79:56:70:
36:68:83:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:16 2026 by rpki-client