Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
File: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json)
Hash identifier: lE2WtTOx/Kd7UsJ6yViRToGvI7NOoMYx8Q/PmCP3/lI=
Subject key identifier: 8C:0A:F7:36:20:7E:9E:70:9B:94:DA:9F:15:49:73:93:B4:28:76:90
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Certificate issuer: /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial: 019D270447A883674AA612BB446DF8C50F9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
Manifest number: 1300
Signing time: Wed 25 Mar 2026 22:01:25 +0000
Manifest this update: Wed 25 Mar 2026 22:01:25 +0000
Manifest next update: Thu 26 Mar 2026 22:01:25 +0000
Files and hashes: 1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: /V50cP2aMlPxDJ7dw4cc8pLWcd1JV/dyo0k0AUsN5BI=)
2: maEv5ArPl0MhVYV7tQz9rkyTAIo.roa (hash: dBiLGOeBpvZw0H7gef9rbExfaEt6iLiJPLCEXhR/0HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:47:a8:83:67:4a:a6:12:bb:44:6d:f8:c5:0f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Validity
Not Before: Mar 25 22:01:25 2026 GMT
Not After : Mar 26 22:01:25 2026 GMT
Subject: CN=8c0af736207e9e709b94da9f15497393b4287690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b5:7b:37:59:cf:96:5d:d8:06:85:17:e6:33:
e5:19:32:4f:f5:e2:06:29:de:ec:52:d7:48:64:d5:
9c:c2:62:65:8a:24:b1:5a:9c:f6:d4:71:e0:8d:45:
e1:d0:fb:82:b8:df:de:bf:c7:d3:6e:ea:43:ca:e0:
66:49:3c:e8:89:c3:18:bf:65:9b:73:43:f5:ca:a7:
a6:bf:1b:a2:62:53:21:0a:d6:df:56:f7:e1:bb:dd:
c9:df:6d:0f:b9:3e:3b:e5:4f:6f:ec:09:46:8d:2d:
01:71:e3:f3:73:b9:29:21:73:84:a0:fa:c7:d8:a2:
19:73:86:18:3f:aa:24:dd:5e:61:a0:ab:65:85:b6:
90:80:ee:6d:77:c9:25:99:21:2c:b3:7d:70:c6:5f:
04:2b:24:1e:4d:4c:c0:66:d2:c6:fb:ec:ea:2c:0c:
9d:bb:98:7a:28:12:d8:b4:25:c5:46:04:49:84:7f:
7d:73:90:fa:a0:4e:b6:92:96:7e:d3:45:9d:b8:03:
38:5c:fa:fa:76:55:9c:b4:aa:4e:66:de:fc:70:ea:
97:8a:a6:37:e7:43:f6:56:de:94:b3:d4:25:e2:89:
87:f2:2d:2d:40:d4:73:47:19:89:57:1f:4d:65:df:
59:cf:4d:87:f9:6e:dd:07:b7:99:7f:ab:09:50:a3:
aa:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0A:F7:36:20:7E:9E:70:9B:94:DA:9F:15:49:73:93:B4:28:76:90
X509v3 Authority Key Identifier:
keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:df:df:da:56:39:13:3c:12:63:58:b8:9c:ad:ed:1f:d3:2e:
9f:74:e0:eb:2d:16:bd:aa:5d:a5:48:34:cd:32:8d:23:0c:fa:
f9:4b:13:c1:af:bf:71:75:aa:0d:0d:74:57:cb:42:ae:45:d3:
05:f1:b1:15:53:00:3f:a0:c1:5a:b4:02:2b:82:31:94:8a:b3:
65:dd:2b:ae:0c:b2:a7:c2:1e:be:15:61:c4:6f:cb:1f:1c:cf:
00:9a:b1:16:29:ec:91:49:33:34:b2:d5:46:35:73:ac:1a:4e:
93:9c:b0:4d:11:3c:93:86:50:01:6e:a5:2f:ab:c0:ef:17:f9:
e2:01:ee:2b:f6:7f:01:9d:b2:c7:6c:86:e2:2c:2b:6c:17:b3:
09:4f:a9:96:b6:4f:09:5b:cf:7b:a3:17:3f:1a:5a:c6:87:c2:
0b:f0:73:47:b7:68:2c:36:2c:4e:5d:b3:6c:ae:cb:30:58:65:
e6:7e:ab:b4:78:47:5f:32:53:b3:b3:6b:f2:47:d4:5c:fa:3d:
4b:20:64:00:80:21:0b:33:53:07:b7:23:27:2e:84:a1:26:cc:
10:97:7c:8a:b9:fa:19:8b:0a:0e:db:44:cc:fd:a6:62:82:d3:
3b:1a:8e:1a:cc:d9:25:5c:aa:9d:8b:6b:a5:3f:28:d6:5f:12:
73:e6:7d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:13:55 2026 by rpki-client