Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
File: 4BGYDkOhYAqXZWfbBqNKARRf14o.mft (raw, json)
Hash identifier: Y6rbjyFXGTo2RMfe8rcYnz+JCahT28Zj6vmVSL3UPKI=
Subject key identifier: 2A:2E:6E:C5:91:C8:94:D3:59:1A:A7:87:DA:80:18:5E:43:C9:6D:65
Authority key identifier: E0:11:98:0E:43:A1:60:0A:97:65:67:DB:06:A3:4A:01:14:5F:D7:8A
Certificate issuer: /CN=e011980e43a1600a976567db06a34a01145fd78a
Certificate serial: 019D33AC959D93297FAAD33A25BD8552BFEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BGYDkOhYAqXZWfbBqNKARRf14o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
Manifest number: 010F
Signing time: Sat 28 Mar 2026 09:00:41 +0000
Manifest this update: Sat 28 Mar 2026 09:00:41 +0000
Manifest next update: Sun 29 Mar 2026 09:00:41 +0000
Files and hashes: 1: 4BGYDkOhYAqXZWfbBqNKARRf14o.crl (hash: WwvX881Gas2kfa8GcF7/CMsfP112tZt0/JrhEVh+nKA=)
2: aoCwhi5evCru6LgJTjJ8MV_C6jc.roa (hash: yQEGzqfXX6MkFbhFn963xnKD2YQsIROLhxeJWGdhd6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BGYDkOhYAqXZWfbBqNKARRf14o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:ac:95:9d:93:29:7f:aa:d3:3a:25:bd:85:52:bf:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e011980e43a1600a976567db06a34a01145fd78a
Validity
Not Before: Mar 28 09:00:41 2026 GMT
Not After : Mar 29 09:00:41 2026 GMT
Subject: CN=2a2e6ec591c894d3591aa787da80185e43c96d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:68:b6:2b:89:0c:d9:55:91:3a:a6:e0:3f:b2:
17:0f:38:63:c6:7c:97:94:74:d1:3b:a7:9f:e9:80:
65:f3:23:71:98:6e:73:1e:8e:cc:8b:95:b0:8d:36:
cb:36:b6:38:f7:fd:6d:63:e4:49:42:4c:28:40:7a:
c5:ca:be:54:8a:86:47:49:2b:70:ff:47:4d:b1:37:
9b:a7:d6:8d:6b:8c:e0:fc:64:34:b6:60:61:94:98:
13:78:5b:54:79:b3:c9:bb:66:78:b7:a2:f7:0d:2a:
fd:87:b6:38:2e:ba:71:8c:6d:97:4b:09:f6:54:fd:
b4:68:4b:68:6e:83:13:db:e3:95:c0:cd:67:8d:36:
9c:cb:cf:a4:e5:b5:36:84:b8:3e:25:49:61:9d:08:
ee:84:74:8a:e1:74:b6:d7:2a:2c:72:de:f7:62:bd:
7a:17:0d:f6:e9:12:35:be:bc:72:08:2b:d4:e1:80:
69:ef:b4:0e:ff:79:70:6e:2c:88:fa:8f:29:10:a8:
82:dc:b8:48:fb:b3:33:91:3d:4f:6d:25:f9:16:53:
cd:3a:bf:ae:d9:6e:f9:1d:c5:89:4e:33:7f:3e:7f:
11:53:45:af:ac:1f:23:c7:e7:68:ea:e3:46:18:5e:
8b:bc:96:b5:9e:2b:84:16:f7:d9:f1:48:b4:b3:bd:
cf:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2E:6E:C5:91:C8:94:D3:59:1A:A7:87:DA:80:18:5E:43:C9:6D:65
X509v3 Authority Key Identifier:
keyid:E0:11:98:0E:43:A1:60:0A:97:65:67:DB:06:A3:4A:01:14:5F:D7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BGYDkOhYAqXZWfbBqNKARRf14o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:a4:18:b6:91:c9:b6:97:78:02:06:01:c7:68:53:57:f9:c0:
0c:b7:8f:f2:08:1f:00:25:4b:9e:7c:b1:16:ed:41:d9:b3:08:
9f:8e:0c:db:9e:1e:8a:e6:dd:f2:96:99:e2:53:88:a8:8c:69:
42:3d:4a:20:d9:c9:94:ae:46:6b:39:64:7d:c7:7d:49:fb:92:
3a:2c:5e:52:5d:a0:9f:69:d3:21:10:01:f0:4d:bd:20:83:32:
1a:a0:d4:e2:27:60:83:f5:b5:e5:38:be:c7:bc:de:27:ae:10:
7f:96:e2:5d:5e:d5:35:c8:ba:2e:ce:10:36:fd:cb:d7:c7:a9:
9d:a4:b6:62:6b:09:2a:d3:04:bf:0a:f6:88:47:8b:1a:ef:2f:
ce:5e:0e:26:d8:3c:42:67:77:40:89:88:bb:eb:1f:29:15:6b:
3c:4d:b9:51:97:0f:4c:b4:c8:c9:d1:2c:d8:46:70:41:07:ac:
ec:5e:69:f0:80:cd:f9:c8:72:5b:cd:7a:43:cc:38:6c:26:22:
bc:6f:66:90:8d:39:82:7f:e9:cf:6b:5c:1b:99:c2:47:1c:a1:
0b:c9:73:6b:b5:2b:63:b7:ef:f3:e5:ba:3a:12:53:e3:4d:13:
aa:b5:3c:d1:db:43:4e:60:44:5e:1a:a0:bb:61:a1:db:d2:a7:
57:41:e1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:46:47 2026 by rpki-client