Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File: 4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier: roHqW9MM/Q2XMLNwjhBX0cITi1XLzT5yxLqf5Rt0TiM=
Subject key identifier: 00:E6:1F:EF:F5:1B:71:E5:74:4C:B3:C6:8A:A1:67:1F:E9:B0:3D:B2
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial: 019D2B4EDC8D087866D55CC51AF95CD0F2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number: 07C8
Signing time: Thu 26 Mar 2026 18:01:21 +0000
Manifest this update: Thu 26 Mar 2026 18:01:21 +0000
Manifest next update: Fri 27 Mar 2026 18:01:21 +0000
Files and hashes: 1: 1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa (hash: 5s0riiJVWdi9HHDl4S6viqfJpzTBR9zdtDH9C+DcLJc=)
2: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: h1TLOgkas/84R4y9ZvA1lXYxw6D0HRsIPoUsIKze4Uo=)
3: OBbXBCvcqIaXdkpP01srqqNumYQ.roa (hash: tOeKjUztrQmZUOK5tSU3z7kVcfpLnbmQDA6Js+6Ulgo=)
4: odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa (hash: kP+uJe1dyrOkqr9O36VTGq109yqCnpr2QUsWWtiUKws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4e:dc:8d:08:78:66:d5:5c:c5:1a:f9:5c:d0:f2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Validity
Not Before: Mar 26 18:01:21 2026 GMT
Not After : Mar 27 18:01:21 2026 GMT
Subject: CN=00e61feff51b71e5744cb3c68aa1671fe9b03db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:a8:16:59:bc:2c:7b:43:25:26:56:e1:e2:d4:
c1:d0:7c:ce:54:a1:81:5d:08:9d:42:74:72:de:0c:
db:e5:c2:7a:d9:f6:30:c0:50:9f:9a:c2:d3:96:c8:
b5:ee:d4:f5:4f:2c:db:c5:a2:21:58:07:81:71:3f:
66:5e:15:3e:bf:ad:27:ea:db:ab:bd:29:05:44:0d:
de:95:32:f9:a3:c4:65:c6:1b:d1:51:af:a0:01:c8:
0c:5d:5f:91:e4:40:2a:fa:ef:95:54:8e:b1:52:1a:
ba:ea:ec:e4:a2:f6:99:7a:bb:f6:31:21:38:f5:b0:
19:70:99:7a:c9:51:0c:60:72:dc:9a:7e:2f:97:4b:
16:57:99:11:d6:90:d2:b0:b8:65:12:63:06:7f:6c:
52:06:31:9f:dd:c7:fc:39:3b:0e:3b:0a:3e:48:2f:
2f:be:50:b4:21:67:1b:94:ae:a5:43:6a:1c:79:5a:
dd:e0:f4:6a:71:a7:4a:02:63:26:2e:97:f3:8d:27:
a7:9e:9d:7d:04:80:25:6e:57:89:e5:88:2a:ad:e8:
d3:7c:eb:15:56:f2:01:c4:3e:e4:4a:cb:02:b1:61:
d0:21:da:52:4e:74:70:2e:0a:eb:f8:72:3e:f8:d1:
3f:23:9e:ca:4e:47:4d:af:93:9f:0d:2c:5a:a4:e9:
16:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:E6:1F:EF:F5:1B:71:E5:74:4C:B3:C6:8A:A1:67:1F:E9:B0:3D:B2
X509v3 Authority Key Identifier:
keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7f:40:d3:54:a5:6d:09:98:60:79:a2:e9:bb:d6:02:39:77:
7b:f4:13:14:7d:e6:da:32:56:8f:77:ad:53:59:95:8b:eb:89:
be:5e:f7:89:c5:f2:ad:f7:70:19:7a:e0:0a:50:7b:96:47:01:
1c:2b:03:e6:1e:d1:cd:31:e4:aa:65:63:0f:9b:20:0c:a4:67:
d6:1f:72:f7:e7:f4:09:83:66:15:0b:5a:32:52:48:0a:e8:1f:
00:d9:e1:be:68:a3:a8:de:33:3d:68:bc:ff:f3:50:9a:9a:a6:
cf:06:cb:42:41:bb:e1:74:e8:35:31:b7:13:7c:02:31:95:2b:
71:87:18:ea:97:74:b8:01:a4:d2:40:fb:1f:b5:b0:03:1f:38:
85:5a:11:b2:88:9d:b0:94:3e:8a:81:97:b1:90:aa:1a:48:66:
1d:c4:53:b1:3d:31:72:09:e9:44:55:9f:b1:af:cf:42:59:7a:
ea:71:0c:1f:39:85:07:5f:3f:cb:d8:df:4d:ed:e5:10:77:67:
26:55:40:18:09:86:f8:bd:26:2c:f9:47:04:ff:43:32:ee:ce:
6f:1b:f4:ae:ec:c2:72:e1:05:10:aa:1b:8c:4c:0f:d5:59:ed:
dc:ce:ce:e3:63:89:79:fc:52:af:2f:26:c0:ad:2d:48:53:fc:
6c:2d:9e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:43:59 2026 by rpki-client