Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: SLldrWMbNVZsC2NcwNyvj6r8F83hcgb6V6+17jbwpuc=
Subject key identifier: FB:7B:D3:C3:19:14:A7:6C:09:92:7E:2A:C5:C3:CA:DB:52:11:29:18
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 019D25F0F62C423CC191F8B171B303C63199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 17:00:41 +0000
Manifest this update: Wed 25 Mar 2026 17:00:41 +0000
Manifest next update: Thu 26 Mar 2026 17:00:41 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: Fjj+s/gfvjCzxYcxlbMoHWOlvxJics9xh8Fr29PpH1Y=)
2: j6eYXTGIPK6gsz2syCvMaVTG-yE.roa (hash: 91e+kynlaPtGnq7c6oIlywSzsBYw97PzDquhkqe4ygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f0:f6:2c:42:3c:c1:91:f8:b1:71:b3:03:c6:31:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Mar 25 17:00:41 2026 GMT
Not After : Mar 26 17:00:41 2026 GMT
Subject: CN=fb7bd3c31914a76c09927e2ac5c3cadb52112918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:65:40:97:e2:1f:17:71:2e:f7:49:7d:1b:61:
ed:d9:82:8c:0d:9c:f9:8c:f2:4c:a3:0b:24:f6:9c:
72:80:c2:40:c9:68:e0:ab:9f:94:e3:f5:84:91:96:
8b:75:ab:2b:a5:0f:e0:9a:85:d3:73:32:6c:d1:e6:
6f:89:a2:97:22:29:df:03:96:b2:ab:60:63:74:f6:
53:cc:23:04:e7:d8:c4:a9:f0:a8:0f:4b:1d:8f:73:
c8:cf:d7:af:0d:29:2b:3a:9d:5b:27:70:d8:13:90:
d6:81:ed:0f:63:02:b0:31:6e:d1:b4:84:4f:a2:af:
03:d7:5c:17:da:98:a2:13:55:95:b2:2b:25:49:fb:
9e:cf:e2:c7:f1:92:21:64:b0:5f:3c:10:61:9c:89:
5f:78:87:1c:35:48:d8:d6:87:e6:08:c8:3c:f0:fb:
98:bf:fe:04:6d:17:cd:dc:8d:0b:17:61:70:ef:ef:
56:80:a1:bc:2a:08:99:41:d6:71:a1:93:ab:2c:26:
54:2c:17:ca:50:0e:0a:28:21:01:a0:56:5d:9c:9c:
65:f6:d4:1c:f0:bb:7e:1d:2c:c5:73:53:96:b5:63:
33:15:0a:f6:c9:4a:f6:a7:1c:08:4d:df:1d:ee:f3:
18:27:27:35:63:d2:c7:a6:e9:6d:23:cf:aa:dd:ba:
0b:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:7B:D3:C3:19:14:A7:6C:09:92:7E:2A:C5:C3:CA:DB:52:11:29:18
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:63:eb:fa:c5:71:34:20:9a:85:d5:da:a2:c8:a9:b0:c0:98:
b8:4b:a4:f7:f3:dd:51:f1:ac:2d:d1:90:8a:86:fa:a1:a7:6e:
18:03:b7:9d:eb:8a:3b:78:09:08:d7:3b:07:d4:a8:1c:d5:b3:
3f:c8:85:61:33:87:4b:2c:ef:12:96:ec:8c:f9:9b:7a:3a:84:
69:56:4f:de:7f:1e:27:4f:47:85:41:ec:5d:1f:cf:80:12:4a:
7f:e3:a4:98:34:8e:b6:c2:07:e6:06:17:98:c6:1f:94:00:60:
4f:77:d5:0e:bd:29:f7:4d:c7:8f:46:9b:fe:8d:e8:2a:a5:b3:
29:dd:35:ef:af:ef:3c:19:52:26:07:bd:e5:73:4b:09:cd:c1:
69:6b:1a:fd:fe:48:5e:25:ba:5d:45:c5:78:28:3b:f0:50:fa:
00:52:a2:45:4f:98:87:71:6b:94:96:2e:d0:43:86:37:0b:22:
14:49:fc:3a:b6:6c:fd:a6:45:95:65:4f:9a:17:c2:6a:34:f4:
66:9b:52:b6:08:02:72:9e:c9:69:75:51:57:ca:70:10:20:46:
91:9f:4e:f0:b1:4d:47:ba:d4:04:c5:6c:fc:d7:7f:56:a6:4d:
97:d6:57:f2:04:d6:e1:5e:b8:a8:b4:65:25:ec:c2:70:6c:9d:
ca:d6:d1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:55 2026 by rpki-client