Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier: ycx7s6eweX2/Y4vV+yTs7ULbb5rlvaofhhstE2kKxJI=
Subject key identifier: B7:39:03:9E:39:F6:60:14:A9:5F:71:EC:CD:A8:9C:B5:C9:43:84:47
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer: /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial: 019CACEB63FDB69602D0C7954895F60B0D6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number: 0829
Signing time: Mon 02 Mar 2026 05:00:33 +0000
Manifest this update: Mon 02 Mar 2026 05:00:33 +0000
Manifest next update: Tue 03 Mar 2026 05:00:33 +0000
Files and hashes: 1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: IFBN8tj9RwLpEhcWxMQl4EXtc0qdTkSb2f3hRY0BYh0=)
2: gVfdWm0UhTm-_kYhCxfI_PPh9pQ.roa (hash: KPBhQabvMXA3ivJ7vLYo7qGQjlOgp6mXdXBE/OSlu9M=)
3: wZ9RkRMpZ0zSJRETkyLZujvEe_A.roa (hash: 8sVpKy5s2khImy6cMRVFY6mSlDYqhzQpPN1YY16omwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:63:fd:b6:96:02:d0:c7:95:48:95:f6:0b:0d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Validity
Not Before: Mar 2 05:00:33 2026 GMT
Not After : Mar 3 05:00:33 2026 GMT
Subject: CN=b739039e39f66014a95f71eccda89cb5c9438447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:1c:12:16:3a:68:f3:f7:af:1c:a5:f6:6b:
5a:b9:4d:98:5b:86:0f:e1:6b:46:12:ed:35:fd:03:
74:ad:22:f3:e8:7a:7d:ff:61:52:9c:a6:ba:8d:43:
4b:cb:ca:50:78:d0:6a:89:3c:db:e9:ac:6c:f6:22:
8e:16:d9:4f:e0:7a:e6:bd:f4:01:3c:4a:6f:77:32:
70:e2:87:d0:f8:8d:8d:91:4a:97:3a:b1:66:ed:af:
7d:3c:58:c1:ee:71:25:8c:15:7d:5d:e9:bb:ef:4c:
79:ca:b6:ee:f7:f5:dc:56:71:ae:75:82:22:94:1b:
13:01:ca:13:26:d9:f4:3f:07:89:14:92:4f:00:d4:
06:6a:02:5b:af:07:92:64:bf:7a:09:72:16:10:a0:
4b:38:aa:1a:cc:4d:4b:1c:43:7c:a0:b2:70:88:6b:
db:f0:79:3b:c9:a4:c6:e4:07:36:e8:55:a6:24:65:
b9:cf:d1:08:d0:01:5d:4a:5d:89:7f:8a:23:32:8c:
a0:11:5b:c1:e3:7b:8b:1b:39:52:ff:bb:72:42:99:
82:77:57:ad:c1:2d:00:fe:cc:71:51:80:19:b4:76:
83:f1:54:10:51:5a:66:3d:ec:3f:3e:35:01:da:d0:
73:77:98:9a:f4:34:ec:5f:db:a5:e5:0d:d0:83:22:
72:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:39:03:9E:39:F6:60:14:A9:5F:71:EC:CD:A8:9C:B5:C9:43:84:47
X509v3 Authority Key Identifier:
keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:42:12:a7:4d:01:b2:9d:3e:54:66:e2:6f:86:78:32:a6:ea:
20:ea:6b:dc:4c:06:9a:50:92:a7:0a:bc:f9:00:d5:ae:d4:1c:
2a:54:9a:f1:9f:d8:56:be:02:c8:29:8d:9f:59:bb:33:ee:84:
4c:9b:0f:63:cd:0a:eb:9d:6e:31:fe:d2:65:5f:20:2e:44:81:
f6:6f:79:0c:cb:88:4a:7b:bb:22:61:78:27:1d:f6:ec:c0:b5:
1d:05:24:33:86:3a:bd:bd:4b:c1:f3:a8:1d:9f:86:e5:59:72:
41:72:bb:10:c4:7d:73:2d:44:d9:0c:8c:cf:a1:5f:4d:38:c0:
b3:85:05:f0:86:27:a3:df:3a:bc:78:bd:02:54:0d:3e:d6:4f:
73:de:09:03:6b:43:cd:37:a5:cb:4a:3c:53:ac:dd:46:c1:aa:
90:73:22:ee:a1:f4:37:4f:20:00:a9:7e:90:e7:23:8d:1b:46:
98:bc:52:87:ed:87:08:03:f1:83:7d:ec:e5:9b:e4:f2:81:4f:
2e:b0:b0:a7:c9:91:4b:36:b9:0e:b0:43:76:31:fc:54:62:69:
65:67:34:81:5f:05:57:25:70:ef:6a:a4:39:80:ce:bb:16:9d:
e3:e3:6d:e1:39:cb:52:80:1d:b3:63:90:33:2b:d8:08:6f:c7:
a5:ab:33:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:00 2026 by rpki-client