Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier: ufetf4z9OPFQi7LtaDsPDkCL51VA729dPMsARAbJpK0=
Subject key identifier: 25:73:5B:DA:5F:1D:C4:18:98:4E:53:B6:E5:96:3A:53:AC:86:FB:B9
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial: 019D28F22C7B7EAD5C8D42CE2F4D5D369535
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 07:00:52 +0000
Manifest this update: Thu 26 Mar 2026 07:00:52 +0000
Manifest next update: Fri 27 Mar 2026 07:00:52 +0000
Files and hashes: 1: 1_CArV4y8iJiwF-qVbyr6lB9z1M.roa (hash: sgMm20YcGzVkjGjRqisERD3t8QppN0pvoO75EGB83sY=)
2: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: hbBHpN1EPHoq/4L8FVq2rmeUBic+0fHYf4G8Jl+6yFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:2c:7b:7e:ad:5c:8d:42:ce:2f:4d:5d:36:95:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
Validity
Not Before: Mar 26 07:00:52 2026 GMT
Not After : Mar 27 07:00:52 2026 GMT
Subject: CN=25735bda5f1dc418984e53b6e5963a53ac86fbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:f8:8e:35:78:16:b7:61:9c:46:e4:25:86:
c2:fc:bc:a1:b5:5a:e3:41:ac:ef:1c:66:07:11:7d:
48:bf:b1:d7:8f:86:df:f3:76:ff:6c:e7:f3:53:10:
9f:3f:f4:4a:4a:0f:fe:d0:2c:dd:e5:f3:b6:35:4a:
38:f7:fd:95:a3:fe:2b:2c:dc:ba:b5:8c:d9:b7:0c:
25:69:fc:05:3b:12:b5:7c:29:1c:fa:7b:2f:c6:67:
cc:5f:a5:db:24:3a:23:a6:b1:d2:d4:40:9b:cb:98:
8b:1b:a1:c6:40:6c:a0:94:c5:72:fa:36:a5:af:3f:
94:40:32:a7:ed:f5:c9:6e:2e:c9:32:c1:a3:d8:b0:
7e:20:79:2e:61:a8:b0:d5:d6:c1:df:99:3a:b7:ca:
1f:f6:27:47:0c:f1:34:89:1c:e8:a7:30:9a:ee:b9:
59:14:dd:2c:48:b5:19:06:ef:fb:a0:db:55:5c:72:
2c:96:73:ae:f5:db:5a:e6:27:21:0c:93:e3:55:9b:
5e:f3:6c:c7:63:7a:3c:10:f5:0b:47:c0:40:21:45:
f0:3f:19:0b:28:58:f9:5a:37:79:d7:92:95:f4:e0:
e1:b4:5f:e0:63:28:45:a4:69:29:ad:a5:ea:1a:ff:
ac:6d:2a:0c:c5:35:cd:e8:7f:31:e7:13:ea:99:44:
4d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:73:5B:DA:5F:1D:C4:18:98:4E:53:B6:E5:96:3A:53:AC:86:FB:B9
X509v3 Authority Key Identifier:
keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7e:10:c5:b4:01:6d:7d:86:5a:62:c0:3a:de:5e:5b:49:c2:
2f:09:c9:8a:96:aa:f9:43:db:02:6b:5f:cc:6e:7a:83:50:4a:
67:d3:3d:dd:fb:29:75:40:3d:7e:8c:92:37:a6:6c:b9:8a:27:
c4:cf:ab:69:f8:a2:e5:fe:52:80:74:fb:56:b8:90:79:ed:04:
98:4d:76:01:13:0d:d1:a1:7e:f7:49:d7:8c:6b:03:c6:ea:19:
c5:5f:03:fe:e8:97:af:d9:be:61:6f:6a:62:54:58:31:eb:38:
16:d2:14:76:b9:3a:e2:6e:5b:a4:ad:1d:81:4d:f2:d6:25:c3:
7d:f4:1a:49:74:cb:93:40:9e:0a:74:f9:50:46:8a:d4:20:d1:
a3:4b:06:dd:e5:e9:40:37:eb:28:a7:2a:55:31:0a:de:a5:6b:
75:2d:e3:d7:11:6a:88:14:d6:8d:fe:b8:a0:f8:8f:96:5e:e2:
9d:49:e8:2f:72:93:e2:46:4c:1c:8f:b6:73:b4:98:e4:f3:98:
01:9d:51:2e:83:f0:5e:a5:7a:b3:88:56:26:c8:be:43:46:0a:
3c:46:5d:5f:88:29:28:c7:fb:8a:95:d1:f8:13:44:6d:14:a8:
21:4c:cb:54:9a:ef:0d:de:fc:03:b6:e2:6a:92:33:9d:76:4e:
86:d3:a3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:42 2026 by rpki-client