Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier: bZYklShiDwqO6QPboJsw7bgdIlMpwuoC28AxXKURIgE=
Subject key identifier: 8A:84:EA:9D:99:BE:FC:10:31:03:FC:00:85:DD:79:8C:80:8B:BB:63
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 019D265F32C8684D2932E13E8446AF62C576
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 19:01:06 +0000
Manifest this update: Wed 25 Mar 2026 19:01:06 +0000
Manifest next update: Thu 26 Mar 2026 19:01:06 +0000
Files and hashes: 1: 1-No8JnCXoZmNvwGOuPwKrmYYJ6c.roa (hash: 2kZ069SCXyvjYNeKIO+pvEFPTW/9AX8f/8u5tWS3u3U=)
2: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: Fc2+QEAzNkGmk48aEATQkF3iVeCs6dzQtqZSx1IZ0+0=)
3: BW5S5s1xvxdYeismlznCSfBL2yI.roa (hash: EtWeWpCD+suUmysPule/ohTEye/jj6Q4dBOVaR6L3gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:32:c8:68:4d:29:32:e1:3e:84:46:af:62:c5:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Mar 25 19:01:06 2026 GMT
Not After : Mar 26 19:01:06 2026 GMT
Subject: CN=8a84ea9d99befc103103fc0085dd798c808bbb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:58:8f:b0:7a:8f:84:08:f8:39:1c:0c:85:
74:db:85:c7:b5:a0:3e:c9:13:8a:5a:32:86:52:28:
75:6c:91:e9:8c:f1:26:34:37:03:08:e3:5a:3b:0d:
66:90:f9:fb:4f:20:a7:33:86:3f:55:22:fb:93:70:
0b:f9:a8:75:f9:e8:0f:d8:71:b1:86:e9:8f:3e:95:
99:95:ef:9f:91:24:c4:0d:16:45:8f:aa:e0:ae:e6:
b3:fc:11:8a:32:6f:5a:14:ad:62:15:4f:47:54:03:
53:39:fa:0f:91:cf:a9:13:b3:0c:85:4f:31:c2:c5:
a4:d1:13:16:dd:fe:65:b1:80:a5:55:33:55:87:c0:
45:99:fe:78:9d:79:05:dd:3b:1b:36:b1:0a:b5:02:
81:fb:a8:19:3b:23:7b:64:ae:95:4b:a0:ed:55:f0:
91:ef:3c:b1:39:a5:99:5c:43:89:6d:90:84:3a:3e:
ad:34:82:b4:8d:f1:9f:26:14:2a:51:2b:05:5e:b5:
ff:90:99:90:7e:af:b3:90:75:c1:e4:9d:b1:88:49:
7e:71:6d:c8:1e:a7:60:15:aa:2d:62:dd:1f:e2:36:
a8:f9:1d:87:b5:fe:85:14:6b:ac:34:ac:83:dc:de:
a9:5a:f1:0d:ce:41:5b:07:93:20:4a:f4:72:43:b5:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:84:EA:9D:99:BE:FC:10:31:03:FC:00:85:DD:79:8C:80:8B:BB:63
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:0c:d5:db:8b:1a:e3:77:b7:a8:06:d3:48:e0:40:06:7f:57:
b8:95:7b:4d:4f:e9:9f:3c:ea:b1:af:f9:30:4e:fd:40:45:19:
b0:54:e7:02:56:4b:5e:37:c4:98:fc:35:e1:fd:d1:0c:31:dc:
5a:d3:c4:d0:21:23:43:b9:9e:57:dc:ea:03:46:3a:91:d8:00:
4e:37:6a:dc:9a:63:40:63:3d:a4:46:bc:b6:61:64:cf:f6:94:
b9:db:0d:02:e5:b3:43:c0:c4:4b:a1:ee:aa:83:5b:3c:44:ec:
35:70:a4:2f:71:31:e4:d0:85:6d:45:c5:ed:c8:02:5e:d5:79:
64:b3:c1:b6:85:bc:cf:38:a2:5a:aa:00:15:f3:d9:8f:3b:ee:
7f:43:fa:45:b7:d9:36:e7:f0:71:e3:7e:4d:e8:f6:4b:e9:c4:
7c:2c:d1:ae:b2:b0:98:2f:ee:e3:80:47:17:ad:30:d8:7e:ee:
fe:dc:c1:39:8d:54:7f:c5:99:b7:8e:bc:16:05:72:2e:60:0d:
6a:3a:9d:cf:9e:73:6a:ca:08:fb:42:43:53:e7:8e:84:0c:21:
b7:04:d1:9d:db:df:cb:9e:92:17:96:d3:9e:f2:71:0f:2a:53:
25:db:2d:2f:5c:50:97:ef:af:35:d3:ed:99:03:19:32:80:91:
68:68:20:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:25 2026 by rpki-client