Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier: FUk3onTeMzkD/diQEVAXJd0SorksuggkqDerwLsMsxE=
Subject key identifier: 9E:9C:1C:EE:F4:5D:31:51:E7:1F:D3:F0:0D:CD:28:F1:71:C5:44:95
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial: 019D27729C241666CB4CB4E4DB5CADF99862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number: 1707
Signing time: Thu 26 Mar 2026 00:01:55 +0000
Manifest this update: Thu 26 Mar 2026 00:01:55 +0000
Manifest next update: Fri 27 Mar 2026 00:01:55 +0000
Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: SI571KMAWhyGcQSaM/c5rgVmTpCbxbw0gedhIYvY0PI=)
2: wxMlSMWtQ0ndBMMV3tfXfzI4pMo.roa (hash: Cum4Di2WX2Vf5OYvq7GxldvC9jsMY0qM5fo7QBzndMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:9c:24:16:66:cb:4c:b4:e4:db:5c:ad:f9:98:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Validity
Not Before: Mar 26 00:01:55 2026 GMT
Not After : Mar 27 00:01:55 2026 GMT
Subject: CN=9e9c1ceef45d3151e71fd3f00dcd28f171c54495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:69:84:0a:a5:1d:29:de:a0:c2:40:a8:9e:86:
12:91:7c:29:08:f9:b4:8a:b4:e7:d0:0c:1c:31:2c:
16:a9:5a:0d:d8:9d:4c:54:b6:9d:63:32:8d:4a:02:
43:fa:12:59:14:fe:6a:ca:58:de:16:5a:0b:81:29:
4a:1b:60:68:03:68:60:2f:65:81:65:1f:86:a0:43:
28:92:3e:bf:46:b6:eb:be:42:bf:b8:45:56:a3:92:
98:12:c3:3a:1c:74:01:f1:0d:d6:b0:13:3a:d7:ca:
a8:1b:7f:37:93:27:50:05:f1:81:33:99:83:09:97:
72:87:f5:6a:ee:70:53:cf:c6:3a:38:06:c7:ce:74:
0a:ba:0e:8f:de:e9:20:71:3a:76:3a:42:ab:83:a6:
af:11:fc:69:e2:d5:34:d9:43:0b:92:71:14:84:2e:
8b:0d:ad:9d:83:da:8e:e0:01:70:6b:fc:54:14:83:
e3:fb:91:c2:69:5c:f0:58:06:fb:8b:82:08:d4:56:
18:2f:03:a5:ba:1b:60:6e:32:7b:e1:41:a6:32:31:
62:09:c1:1a:a9:a7:93:37:93:91:16:5d:37:01:f5:
b6:f6:4f:44:87:9a:6f:54:3a:c1:5b:9a:99:bb:45:
f2:0c:36:e0:f4:4f:73:43:bc:38:ef:8d:c2:ef:61:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9C:1C:EE:F4:5D:31:51:E7:1F:D3:F0:0D:CD:28:F1:71:C5:44:95
X509v3 Authority Key Identifier:
keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:d8:dc:87:7e:12:17:eb:54:02:b4:71:46:dd:14:1e:ae:e1:
c1:03:82:98:c4:79:a6:16:41:75:4d:51:96:35:87:3a:9e:26:
3d:e3:76:14:d7:4d:c2:1d:2c:b3:85:3a:fb:ba:69:db:be:26:
53:1c:2c:d3:58:b0:07:28:a0:38:28:ca:1c:65:b1:9d:72:70:
64:a9:c0:5d:8c:ed:5a:08:55:60:40:13:83:d4:cc:77:04:ed:
34:d6:38:1e:3a:7a:69:de:4a:93:bb:e2:d1:f4:57:22:9c:49:
32:5a:1d:b2:a4:a2:34:c8:db:98:f3:f8:93:e6:ed:0b:87:34:
db:b1:31:66:06:8c:1a:bc:0c:78:56:30:7d:3f:38:ae:7a:ac:
77:31:aa:c8:68:56:74:f9:d2:4b:83:99:0f:79:e1:d5:90:37:
97:36:78:45:7d:28:8b:f4:b8:f1:cc:1d:1c:ab:aa:c3:84:e2:
5c:54:61:b8:8c:96:60:ef:2f:ee:6c:6f:2e:57:d5:9e:ac:17:
a0:ae:42:b9:b8:60:f4:6a:0b:f1:08:e2:f2:5a:5a:1d:87:44:
80:b7:ab:33:a2:31:94:54:7f:8d:10:c6:f0:49:b7:de:a4:80:
aa:49:07:32:4f:a7:dc:34:9e:f1:40:3d:09:7e:7a:d6:e1:97:
dd:15:bd:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:32:51 2026 by rpki-client