Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: nuRbXqoUnOQvfGxy/M5KZNf/XXjAKN21Dkerpp8K/YA=
Subject key identifier: CA:B3:4A:D8:AA:1A:DF:21:12:B8:D9:0D:C6:A7:E4:0A:B8:65:ED:09
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 019D2884713D8E047778A2439105C3C33573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 0672
Signing time: Thu 26 Mar 2026 05:01:01 +0000
Manifest this update: Thu 26 Mar 2026 05:01:01 +0000
Manifest next update: Fri 27 Mar 2026 05:01:01 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: Fxce11FgLMIAWhxoPE6tJtgYvcS9TuRMCBWb/74iOF4=)
2: jm7CLkDkWjLyx0drk5u0jmFrhNY.roa (hash: ammB/HZj8/N3/UAaLNlwGxNZkAQiwMa1PgzKQkDpB6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:71:3d:8e:04:77:78:a2:43:91:05:c3:c3:35:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Mar 26 05:01:01 2026 GMT
Not After : Mar 27 05:01:01 2026 GMT
Subject: CN=cab34ad8aa1adf2112b8d90dc6a7e40ab865ed09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:10:12:5d:b1:6a:77:d5:13:fe:4f:b5:e9:
6b:c3:9d:73:d1:ff:a6:73:9e:dc:7f:15:8b:cf:a7:
5b:7c:e1:38:6c:53:9f:83:e1:b6:93:72:5e:ef:74:
58:c7:fd:a3:d3:af:3f:73:bf:35:27:dc:7d:a0:4c:
79:8f:7e:bc:e1:52:4e:1c:75:cd:5f:99:f4:ef:af:
2e:54:4b:53:fc:da:9f:2f:97:b5:df:d2:40:bb:99:
82:b7:91:1c:00:94:d6:72:3f:71:8d:f0:2e:43:31:
69:af:29:6b:4e:db:52:92:65:91:a1:28:0a:53:4b:
72:03:e4:d8:3f:97:5a:d1:e9:66:00:6b:66:98:3e:
55:c0:cb:f6:f0:81:31:7b:de:38:bd:c7:3c:49:a3:
93:4a:1a:be:61:e9:e6:f5:26:82:b4:23:2a:60:d0:
27:f9:84:ac:7f:fd:52:d9:43:9a:85:6a:09:9a:48:
95:cf:bd:94:fa:f7:e5:35:c5:10:8b:76:64:dd:97:
63:8f:ee:67:79:b7:ee:39:d6:50:e9:27:e3:1a:ff:
bc:8b:32:d3:be:47:f4:b5:86:55:f5:18:75:3b:81:
b6:65:69:f1:9f:01:c2:04:f8:ab:d5:d8:1e:56:46:
68:b3:a7:83:e3:1a:7d:9b:87:f6:4d:58:3e:ad:ac:
bc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B3:4A:D8:AA:1A:DF:21:12:B8:D9:0D:C6:A7:E4:0A:B8:65:ED:09
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2b:1c:aa:27:4b:d6:e6:52:8e:db:40:9b:31:47:6e:80:ab:
76:a4:a9:cc:3e:2d:4e:b1:79:cc:c0:8a:5c:07:e1:a4:22:48:
ec:bc:67:1d:fa:02:7f:0e:a5:d3:c7:27:01:99:88:a2:c2:91:
07:15:18:7d:70:0d:82:cd:08:53:b0:12:41:64:bb:55:dc:83:
76:3d:3d:9d:b8:8a:f7:57:b7:5f:51:57:36:3b:ea:dc:3a:ba:
71:25:2d:a9:de:74:db:d1:1f:ed:5c:77:29:24:cc:68:2a:13:
21:c8:ed:cb:b6:08:08:42:ae:db:51:bb:15:74:cd:bb:ad:e2:
d9:f3:12:28:e3:a9:d8:3e:f3:4f:bc:62:98:ac:5c:9f:f5:6e:
68:a7:a2:6d:32:e2:6b:6d:6a:f9:61:0d:e0:f8:40:01:30:30:
fd:07:c8:01:bc:e2:fa:8d:a1:a0:2b:7f:73:85:bf:bf:06:d7:
7b:7f:c7:9b:84:39:6b:4b:c6:2c:2b:d8:1a:85:3e:91:fc:aa:
70:cc:b2:89:31:2f:d8:04:58:a4:6f:bb:b5:69:09:8a:c6:64:
60:93:f8:72:10:46:cf:98:58:e7:36:28:52:5f:f8:d0:62:38:
f6:41:fb:02:b3:97:5f:46:f0:b7:03:20:e0:8e:8e:da:c3:cd:
35:a3:aa:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:25:46 2026 by rpki-client