Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
File: 4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json)
Hash identifier: R37zQweTrdU5ZzqG0BIYDDqnHtpwayKBTrsTySiVr2Y=
Subject key identifier: FE:26:2F:AD:18:DE:51:19:8F:4B:A8:67:0E:87:7B:13:41:7F:5E:1F
Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
Certificate issuer: /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Certificate serial: 019D25835DF267BD9A90F5F36DADA5A3D6BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
Manifest number: 1881
Signing time: Wed 25 Mar 2026 15:00:59 +0000
Manifest this update: Wed 25 Mar 2026 15:00:59 +0000
Manifest next update: Thu 26 Mar 2026 15:00:59 +0000
Files and hashes: 1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: X50GN9U/8IG+/tr5hLgZnAgkC2nvlSSdNggTd1vBwQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:5d:f2:67:bd:9a:90:f5:f3:6d:ad:a5:a3:d6:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Validity
Not Before: Mar 25 15:00:59 2026 GMT
Not After : Mar 26 15:00:59 2026 GMT
Subject: CN=fe262fad18de51198f4ba8670e877b13417f5e1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:fa:ed:35:e0:e3:10:57:73:b2:22:40:25:
65:6d:b1:54:56:78:62:ad:ea:4b:17:50:bc:a3:b6:
a2:db:91:0e:12:2d:eb:5d:14:02:88:89:17:1e:71:
5f:13:c8:11:b1:f9:cb:ec:0a:b4:fa:6b:4e:1f:af:
1c:8e:b2:6e:a9:bd:42:3c:73:a0:df:5b:7e:b5:31:
ff:e6:71:a4:45:ed:b1:54:16:24:c6:90:c5:21:41:
01:9c:6f:d7:d8:97:f9:dc:bb:e4:c2:64:47:07:bf:
3a:a2:37:db:dd:88:70:6d:1d:9d:e0:64:82:20:18:
44:30:aa:59:bf:a3:4e:8b:96:54:7c:6a:94:c8:34:
db:70:92:4a:e9:13:80:e3:a1:ef:f6:86:5a:c5:04:
1e:6c:b7:ef:03:38:99:57:9e:d2:4c:70:88:e3:ce:
94:9e:a4:b6:15:e4:71:79:b7:fd:ff:75:29:dd:8f:
4f:b4:ad:d2:36:de:da:b4:ad:47:59:e6:9c:6d:2b:
2a:1f:c8:ad:af:34:26:0f:b3:fd:ce:81:9f:a0:d6:
fe:31:b9:6a:d9:9d:84:9a:d0:d4:e0:bd:da:a1:c4:
5b:44:f0:0e:4f:88:83:b0:9e:0d:91:1b:ef:c3:2a:
58:2c:74:9f:94:de:93:43:ff:af:fd:25:a4:6b:06:
64:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:26:2F:AD:18:DE:51:19:8F:4B:A8:67:0E:87:7B:13:41:7F:5E:1F
X509v3 Authority Key Identifier:
keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1c:36:41:cb:c8:84:f5:e3:0b:5a:ac:ba:74:81:25:e4:b0:
d7:af:82:8f:37:3f:52:bf:f3:3f:5d:70:3b:fe:8e:f1:d1:61:
a2:98:a2:c3:63:f0:bc:3f:2e:d5:3d:b8:63:90:69:e8:82:17:
c6:e9:e8:4b:4a:37:c3:46:ae:20:ce:0f:dc:9d:e4:77:f2:43:
98:c5:79:ea:db:5a:fa:99:74:65:90:da:12:82:f6:53:83:1a:
3e:81:27:b5:81:47:1e:ff:4c:f9:88:1a:63:dd:71:41:9d:1c:
9a:53:b9:62:9a:8c:94:a3:c5:c8:68:b8:e6:38:ed:5c:c9:7f:
e5:52:79:3b:e2:e1:0d:be:18:fa:86:9f:da:e1:3d:6e:2a:93:
c0:d1:c4:6f:19:02:d6:06:aa:77:34:c9:f5:a9:aa:95:f2:1b:
2f:3d:a5:86:68:2f:6c:e4:0c:4e:c5:a8:43:9e:7d:13:73:7d:
b3:d7:fa:4b:5e:86:2a:e8:c5:9e:9a:68:51:7b:cd:44:88:10:
56:a2:00:82:84:84:da:b0:77:59:a0:b6:c1:9a:85:d3:c4:9f:
c2:39:68:d1:4f:89:3f:84:22:97:0e:43:64:ff:f2:80:06:bf:
7a:e7:99:98:41:e9:a0:40:19:ab:8b:28:d6:89:f1:dc:c1:a2:
4d:1f:b3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:19:40 2026 by rpki-client