Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.mft
File: rSX4k9NuB3Dley0M13QKKRtQVVo.mft (raw, json)
Hash identifier: YJxoMdlKs+sXo8BJtsBY6jpNeDfW15NFmxhv5fhLn1Q=
Subject key identifier: FF:67:87:F5:09:4C:61:0C:82:CA:22:AD:6A:42:F6:9B:00:36:1C:85
Authority key identifier: AD:25:F8:93:D3:6E:07:70:E5:7B:2D:0C:D7:74:0A:29:1B:50:55:5A
Certificate issuer: /CN=ad25f893d36e0770e57b2d0cd7740a291b50555a
Certificate serial: 019D28F2A9C16007D91515D7C9D4BCDFA426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSX4k9NuB3Dley0M13QKKRtQVVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.mft
Manifest number: 4E
Signing time: Thu 26 Mar 2026 07:01:24 +0000
Manifest this update: Thu 26 Mar 2026 07:01:24 +0000
Manifest next update: Fri 27 Mar 2026 07:01:24 +0000
Files and hashes: 1: rSX4k9NuB3Dley0M13QKKRtQVVo.crl (hash: MxTPazn8V5Lct7aFiTir1N4UVnzq65o0jzf+YEtWM3M=)
2: sptD_SP5mhKTKaXCvX_xij3mTc0.roa (hash: 7umL9bhBhCGN0pKOVOKEoWxSfrKW+H7O6vZH9R2/gDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSX4k9NuB3Dley0M13QKKRtQVVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:a9:c1:60:07:d9:15:15:d7:c9:d4:bc:df:a4:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad25f893d36e0770e57b2d0cd7740a291b50555a
Validity
Not Before: Mar 26 07:01:24 2026 GMT
Not After : Mar 27 07:01:24 2026 GMT
Subject: CN=ff6787f5094c610c82ca22ad6a42f69b00361c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f8:23:98:8d:42:51:f9:7c:4a:d4:b7:54:5c:
20:ba:b6:44:58:b1:ee:70:ba:ed:d4:97:2f:50:1c:
62:b7:2c:60:0b:20:b6:9c:83:84:23:ea:2c:f7:1e:
7c:d2:52:ef:bf:e9:cb:48:f9:f9:0f:7f:25:3a:dc:
8a:41:bb:8d:c6:7d:63:32:ef:02:e9:68:de:a3:0e:
08:02:26:7e:e6:32:4d:f8:95:3c:f8:ed:2a:bb:69:
62:1b:e1:8a:3b:00:66:d2:c9:75:30:7b:61:82:c5:
07:ba:5c:e1:eb:c0:e5:af:96:13:0c:96:d3:75:d9:
59:e2:5e:cb:83:a4:c1:b1:6a:22:f0:08:6d:f4:97:
01:d9:59:6d:ac:bc:f7:4a:b7:64:10:d7:90:c3:98:
ca:e2:d5:87:dd:38:93:96:63:f7:8c:ff:93:4e:49:
4e:93:06:89:23:28:70:06:26:a8:c3:14:d6:21:1d:
51:af:93:65:e4:8d:90:f7:66:73:07:63:8f:67:5e:
b8:22:1c:3f:17:1a:98:f5:9f:f5:e5:a7:9d:df:81:
49:96:eb:d3:04:38:0f:5d:2f:5d:5f:3f:16:77:35:
14:3f:70:09:58:ee:a3:94:38:58:0f:44:03:53:25:
05:fd:c9:d6:cb:af:a5:ce:e0:2f:ff:83:e9:90:b5:
8c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:67:87:F5:09:4C:61:0C:82:CA:22:AD:6A:42:F6:9B:00:36:1C:85
X509v3 Authority Key Identifier:
keyid:AD:25:F8:93:D3:6E:07:70:E5:7B:2D:0C:D7:74:0A:29:1B:50:55:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSX4k9NuB3Dley0M13QKKRtQVVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/3c9f5d-a80e-4149-b11a-d20cadc1b8dc/1/rSX4k9NuB3Dley0M13QKKRtQVVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b0:18:dd:08:54:52:3a:63:41:c9:85:ef:59:91:24:ac:97:
78:0c:12:ad:9c:93:7d:79:1f:a3:d3:c9:40:4b:b1:8c:b3:cd:
6a:b2:ce:bb:ba:db:de:df:78:9d:97:6d:10:b6:3b:00:ef:5d:
a9:f8:1b:5c:96:ef:31:09:75:e7:ca:4f:c3:ca:2c:24:89:ba:
64:90:11:33:8f:12:36:a0:dc:e4:4a:b6:e7:0d:f2:21:2b:dc:
d4:38:60:ce:84:c9:2f:9a:d0:10:4c:ba:c5:86:db:1f:6c:60:
2d:25:e1:47:d2:82:87:29:5e:74:2d:6a:31:42:e0:47:9e:19:
70:a2:3c:08:35:89:ae:a1:be:36:8a:49:7a:1e:32:57:c3:da:
fb:67:e6:d7:c5:c6:89:50:20:a2:e1:bd:05:64:c4:df:29:fc:
97:ef:c0:8f:52:bc:ab:f4:49:26:7c:51:5e:d0:bd:33:75:3e:
c5:0b:30:4d:5a:39:93:e0:a2:5d:99:50:37:44:d2:ee:ef:d7:
60:c9:82:92:1f:ee:c7:8b:26:ea:f4:4b:54:d3:76:6a:72:19:
10:16:f4:50:76:97:83:c7:4a:14:80:1f:bb:c8:ad:07:7e:30:
1a:77:2c:83:a2:80:50:7b:e1:21:42:f5:2c:03:d6:ee:98:e2:
f7:06:d9:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:13:59 2026 by rpki-client