Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier: Hzyz1ROK+LbI+3reeCIcoRto53009rP3hHAJW+IwzhE=
Subject key identifier: 13:C4:28:9D:EC:A6:2F:E4:2B:8A:4E:00:CE:53:14:3D:16:35:D5:7B
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial: 019D262820601ADD689DF26C803F6F8C7331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 18:00:56 +0000
Manifest this update: Wed 25 Mar 2026 18:00:56 +0000
Manifest next update: Thu 26 Mar 2026 18:00:56 +0000
Files and hashes: 1: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: qFAgeYIMteh1SWv0SbGjsWNyrVho3a4fJIfHE36QSMM=)
2: K1FdA87T8eFrwlS20DD-axC_KRg.roa (hash: UelE8kISfcUjG8bRU19xRhDTFmmSIXEMYIXQuI26se4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:20:60:1a:dd:68:9d:f2:6c:80:3f:6f:8c:73:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Validity
Not Before: Mar 25 18:00:56 2026 GMT
Not After : Mar 26 18:00:56 2026 GMT
Subject: CN=13c4289deca62fe42b8a4e00ce53143d1635d57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:f3:ed:26:28:59:36:54:01:eb:18:ff:f3:
ff:ba:1d:94:64:83:5b:b4:50:eb:c4:80:39:05:f8:
ee:90:fd:ac:42:93:93:ef:79:1e:d8:ff:3f:99:86:
2c:9f:0e:d4:50:0c:d4:e9:45:71:5d:59:a3:34:71:
f7:03:c9:54:f4:66:4b:1e:23:a4:65:80:86:fc:8f:
93:09:06:f5:ea:0a:0b:86:73:64:6b:37:a5:15:b6:
42:b5:07:0e:af:87:76:89:06:05:5e:6a:2f:8e:20:
77:90:9d:88:74:78:52:36:00:06:dc:71:ce:83:c1:
f5:fc:e5:97:b1:a4:87:9e:85:36:94:f2:bb:96:be:
03:00:0a:d3:bf:96:c5:94:e7:25:60:d9:75:2e:b3:
bf:df:d9:8d:11:e8:43:b1:12:f2:ea:2d:dd:74:ea:
7b:57:e3:31:69:40:1a:1b:66:90:f2:e1:87:02:40:
e8:32:ad:7c:1b:c4:a1:49:c1:f5:f3:c4:df:af:4f:
3a:09:9e:1d:c7:e9:1a:70:7c:15:66:c8:7d:d7:c2:
e7:57:74:d1:9c:0c:af:8e:2d:1d:62:35:53:c0:44:
f5:fe:fc:ea:3f:36:88:6d:52:83:7d:65:5d:32:a1:
df:bf:aa:c1:f8:60:8d:34:90:ea:4c:fe:67:24:ec:
8a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C4:28:9D:EC:A6:2F:E4:2B:8A:4E:00:CE:53:14:3D:16:35:D5:7B
X509v3 Authority Key Identifier:
keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:12:39:92:ff:a8:6d:1d:4d:1c:c1:d4:b8:e9:d1:d1:12:39:
51:d3:37:29:ef:89:b4:65:57:f2:3c:a1:fc:c0:f1:64:b2:af:
fd:5c:58:a0:18:78:69:06:3e:f3:72:c9:df:0d:07:9e:d2:66:
10:0f:c5:e0:e1:a6:8f:89:91:6b:9b:e5:73:79:74:bc:94:48:
d2:7b:a3:36:7a:71:fc:ba:7f:54:b9:6f:8c:01:80:e3:f4:dc:
9f:bb:ed:68:5f:b9:8a:72:fd:22:60:23:53:46:c4:0e:e5:94:
7d:4e:00:88:bf:70:ec:5e:d1:e6:1d:6a:c7:b9:d8:01:4d:6d:
ad:6d:23:fc:c9:e1:48:02:b5:71:c4:f2:16:45:bd:f6:22:c7:
c1:65:54:f5:1e:f2:3c:7b:43:f8:c8:2c:a8:5e:ab:a9:94:e5:
a4:e5:d2:04:31:0c:3c:bb:9a:c0:10:cc:a8:cd:c4:14:77:99:
fe:49:39:84:4c:aa:54:26:18:5a:bc:0a:0c:f7:1b:f8:3e:98:
9a:c9:1a:5c:49:2b:ca:48:7d:53:9a:ef:d8:dd:e3:99:b9:cd:
ac:2d:f3:fe:cc:98:c0:16:1b:71:08:02:37:95:ea:bf:05:75:
ec:f0:77:e1:29:36:4d:24:3d:d0:da:18:e5:a5:fc:9b:8d:2a:
26:29:46:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:05 2026 by rpki-client