Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
File: dE4TPKDK2fH9FhWAWQspbbIjCM4.mft (raw, json)
Hash identifier: GpWzmuWJFzG2eCW7+DL7YdaGzb7gNSUpqAgVqTTiwvE=
Subject key identifier: 70:4D:B3:CA:C9:13:A9:AB:61:B1:CB:49:11:4C:46:31:C4:3B:CA:6E
Authority key identifier: 74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
Certificate issuer: /CN=744e133ca0cad9f1fd161580590b296db22308ce
Certificate serial: 019D25831244293680E64673C052669AF372
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
Manifest number: 0C40
Signing time: Wed 25 Mar 2026 15:00:39 +0000
Manifest this update: Wed 25 Mar 2026 15:00:39 +0000
Manifest next update: Thu 26 Mar 2026 15:00:39 +0000
Files and hashes: 1: CWBx_YaW55wp0Q8nHPmUDJfmm9g.asa (hash: sICMwCqCa7TLjDMZRJ5VqSQf7cfIQN96H4gFU0ZqRjs=)
2: a3t44Injkb3R_GXSuc0dS5CiLrY.roa (hash: zbUvHz7MU2Z+aJkIb7Yi+6/dp3AtOWPuD0S1MFlgedM=)
3: dE4TPKDK2fH9FhWAWQspbbIjCM4.crl (hash: BIbD1tX/ewrLnL5F+rJQ7j/ExoE+7RIiTmimmgbu9OU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:12:44:29:36:80:e6:46:73:c0:52:66:9a:f3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744e133ca0cad9f1fd161580590b296db22308ce
Validity
Not Before: Mar 25 15:00:39 2026 GMT
Not After : Mar 26 15:00:39 2026 GMT
Subject: CN=704db3cac913a9ab61b1cb49114c4631c43bca6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c0:4e:05:05:7e:7e:09:6e:f9:dd:46:dd:09:
16:05:3b:6d:f6:f8:4e:5e:48:f0:8e:4a:b3:d0:f2:
6f:b9:f9:6b:d6:9a:67:6a:17:6f:c6:ef:4a:e5:af:
ca:f4:af:aa:7d:8e:73:95:a4:39:02:a6:75:9d:92:
68:30:8d:43:75:06:1d:9c:6b:49:99:0e:b1:a8:1f:
a0:ed:50:ed:d9:99:be:d3:17:59:df:a9:94:e6:c4:
ff:02:f3:c6:5c:1b:53:4c:14:9b:c4:9f:dd:ee:e4:
39:04:0b:2e:15:09:f4:ba:7f:26:2d:ce:53:f4:81:
f5:c5:0f:e5:41:30:e7:56:de:2c:b0:2f:b2:f4:77:
41:a0:8b:eb:69:ae:ea:6d:31:52:ee:4e:b9:0f:aa:
cd:51:d3:50:91:7b:d0:7f:57:d9:b6:01:98:f4:b7:
c6:97:31:eb:fd:24:b1:21:cf:b8:6d:e5:0d:36:6a:
35:5e:f6:41:35:e9:c5:27:ee:ae:ce:71:c5:b0:2e:
12:a7:f3:1b:da:e7:ee:05:90:7a:b6:8a:3a:e8:eb:
a7:3c:c7:ff:f8:16:6d:ba:40:3f:55:07:51:b4:1e:
14:d6:32:2d:38:80:32:46:f5:d7:1d:7b:5a:d5:f9:
11:fa:46:a6:65:09:2a:38:f7:f4:ed:20:d2:29:b2:
bc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4D:B3:CA:C9:13:A9:AB:61:B1:CB:49:11:4C:46:31:C4:3B:CA:6E
X509v3 Authority Key Identifier:
keyid:74:4E:13:3C:A0:CA:D9:F1:FD:16:15:80:59:0B:29:6D:B2:23:08:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE4TPKDK2fH9FhWAWQspbbIjCM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b41190-da28-4301-90c5-95a4ef43c215/1/dE4TPKDK2fH9FhWAWQspbbIjCM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3e:b1:7e:38:8a:d0:14:00:3a:3a:27:7b:cf:bc:82:9c:1b:
8c:69:db:d1:0b:a6:7a:83:5a:50:63:a3:78:91:d1:ee:7c:ac:
fd:ab:95:32:d8:88:3c:07:ec:92:25:48:4b:01:00:93:3a:61:
25:3a:8f:77:91:b1:31:7f:5c:b2:b6:cb:70:08:ba:7f:e1:87:
ac:13:bd:ff:d5:b7:d8:19:20:80:2e:6d:df:86:7f:ef:8d:dd:
75:28:26:34:d7:20:79:96:83:4d:ae:44:f7:ff:b0:0b:c1:5e:
27:9d:f0:b5:64:59:03:30:c7:a6:c5:a2:29:e5:40:96:aa:ea:
05:26:6a:21:2f:d9:38:4f:8e:06:c2:c2:f3:4b:27:a7:c4:d8:
f2:82:2d:0f:6e:cd:d4:86:f1:1c:7b:36:f2:15:84:99:1a:ec:
ea:30:47:0d:42:9e:cf:c6:30:f3:47:79:79:64:3d:52:06:21:
c2:23:69:db:ec:b7:da:b5:f9:a1:5c:34:11:3b:03:a7:72:55:
ab:cc:ef:79:af:50:2c:5a:a7:5b:4b:4e:8b:e2:d4:ca:bb:31:
a7:b4:3a:bf:87:45:13:0d:76:d5:cb:0f:89:30:74:4c:ed:f4:
78:82:de:30:17:25:dd:c5:23:98:dc:e8:42:c8:24:64:17:d8:
91:79:ce:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:20:30 2026 by rpki-client