Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
File: 4SLitYIzoZPR9yd4Vl1smNdhY6c.mft (raw, json)
Hash identifier: VcDoAtY0zONGdCxCBDdTK93nWrz94mV+tsSP+nMIGyU=
Subject key identifier: F3:88:92:BB:71:95:B0:6B:06:7D:60:13:CA:41:2C:A4:4D:DA:74:5D
Authority key identifier: E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
Certificate issuer: /CN=e122e2b58233a193d1f72778565d6c98d76163a7
Certificate serial: 019D26CD089A4DDF91099EADAFE7F81A5167
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
Manifest number: 1465
Signing time: Wed 25 Mar 2026 21:01:04 +0000
Manifest this update: Wed 25 Mar 2026 21:01:04 +0000
Manifest next update: Thu 26 Mar 2026 21:01:04 +0000
Files and hashes: 1: 4SLitYIzoZPR9yd4Vl1smNdhY6c.crl (hash: dN5+/3yrlvHCO339IsCB48I6Wm3bkLxiKSGczwgLVyQ=)
2: R3kq7Tu6gRsTs905XA3OIx0hnx8.asa (hash: i0v0le2V8KgOYY+tMlhW7yajuhdDrHP/SvNGEb/LiEQ=)
3: XT_1jof6p0-6Rq9yGMKNddmG5gc.roa (hash: zoD4X0KwRY+rISekdKuEzTq6itAQw0dp7xwB+9IQQEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:08:9a:4d:df:91:09:9e:ad:af:e7:f8:1a:51:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e122e2b58233a193d1f72778565d6c98d76163a7
Validity
Not Before: Mar 25 21:01:04 2026 GMT
Not After : Mar 26 21:01:04 2026 GMT
Subject: CN=f38892bb7195b06b067d6013ca412ca44dda745d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:b2:4b:bd:14:84:e7:17:87:2a:80:14:f2:
54:0c:1b:a8:dd:8e:54:48:25:0b:36:be:0a:05:d5:
ca:bb:b9:8d:a7:4a:4b:b6:b6:21:d7:71:7d:aa:70:
ac:ac:eb:76:9f:26:a2:c2:82:59:ce:90:d3:a7:d1:
61:63:f7:f6:9d:c4:73:75:a4:1f:ed:4f:62:03:89:
5e:7d:66:f4:6a:42:ac:81:ed:e5:12:8f:6c:ac:98:
64:f8:46:80:5a:18:a7:fd:a8:ab:66:a3:ad:5a:c4:
52:39:86:d8:63:f8:43:87:16:76:4e:0c:8f:d0:40:
f7:db:1c:87:58:f7:bf:ac:56:48:1f:88:41:a5:df:
11:57:1b:c6:25:98:00:99:9b:6f:31:47:09:33:07:
a9:3a:9d:d6:88:7e:97:75:83:3c:59:86:8e:df:d0:
a0:4f:ef:b9:ca:01:ac:ea:87:e6:68:36:d2:15:46:
e5:13:44:ce:9f:25:cd:49:d1:1a:48:f8:2d:80:00:
24:95:e3:ae:71:7a:89:cc:09:1b:4f:9e:a0:91:fc:
2d:75:13:36:ca:60:0e:7f:bf:78:53:1d:ca:47:fc:
41:db:0b:11:82:20:32:ab:44:d3:12:80:bc:1e:a3:
fa:24:a4:dc:a7:2d:52:8b:bb:9e:75:e6:c9:64:6f:
80:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:88:92:BB:71:95:B0:6B:06:7D:60:13:CA:41:2C:A4:4D:DA:74:5D
X509v3 Authority Key Identifier:
keyid:E1:22:E2:B5:82:33:A1:93:D1:F7:27:78:56:5D:6C:98:D7:61:63:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SLitYIzoZPR9yd4Vl1smNdhY6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/d815fd-cfab-4a4a-9595-4166b75b08af/1/4SLitYIzoZPR9yd4Vl1smNdhY6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:82:a3:17:dd:fd:65:f2:73:6b:c7:8a:97:91:61:c5:d2:f7:
4f:aa:bb:c6:ae:8c:a1:23:8e:83:d7:3b:63:91:7e:f9:b9:29:
64:13:64:6d:37:26:4f:d5:1c:c9:9d:da:fb:3f:2c:01:bc:87:
f3:cb:6a:56:07:a7:a3:07:ef:d9:fb:79:46:76:ad:c9:8e:f7:
d9:2e:10:57:c9:d9:fa:9f:c5:b4:9c:a4:a3:a9:fc:40:f3:f0:
1d:e9:91:6c:a7:f7:94:be:f0:f2:c1:10:db:26:93:1c:78:57:
02:0f:28:69:9d:d5:a5:04:ad:ef:8d:bf:4a:45:6b:de:de:ab:
25:6b:45:5e:06:c6:6a:bf:af:c5:5b:d5:3b:95:5b:24:17:3c:
e3:71:15:4a:b1:81:a3:7a:a2:3c:9d:54:fe:cf:a2:04:19:94:
1f:bd:bb:5d:ec:31:cf:ff:7e:62:ef:b6:d9:d3:0b:af:f1:d8:
a5:a0:73:73:a7:65:f5:9c:5a:c4:43:00:2d:25:b9:2c:59:d1:
73:9a:fa:d1:3a:a0:cc:84:a1:79:cc:95:a8:80:41:61:9d:75:
c7:f5:47:e7:63:ff:84:ce:aa:bf:4f:e7:39:03:80:4f:37:5a:
e8:08:31:62:57:57:63:ae:6b:84:64:f7:02:c2:a1:73:ab:da:
e4:87:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:24 2026 by rpki-client