Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: S/HAPVJBL7rUedORF3y4BwiQK5rr6Yo5mXBApMOPAg8=
Subject key identifier: AB:1C:93:52:4E:CC:55:AA:4E:87:09:AD:27:82:DF:73:F7:82:C6:65
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 019CAB34240CED4695EF39E383BADFD0F1DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 0648
Signing time: Sun 01 Mar 2026 21:00:46 +0000
Manifest this update: Sun 01 Mar 2026 21:00:46 +0000
Manifest next update: Mon 02 Mar 2026 21:00:46 +0000
Files and hashes: 1: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: BkDH6hKmJ5XsYiJLp490xynNgyLzpoS1QqLSCe0lrr0=)
2: Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa (hash: imyx+MqhErllzPgURUbLOjPqBlQ0hxwFitun79GI6bQ=)
3: pIH-PyJ-S7KYRBMhx3HzyVyBgpM.roa (hash: 1cLs+Wdw+wnP8h4XUUBLHG3PCH085TENzzZDNYgitoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:24:0c:ed:46:95:ef:39:e3:83:ba:df:d0:f1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Mar 1 21:00:46 2026 GMT
Not After : Mar 2 21:00:46 2026 GMT
Subject: CN=ab1c93524ecc55aa4e8709ad2782df73f782c665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:f0:58:ee:44:dd:e0:6d:b6:31:c6:d3:d8:
05:6c:a9:d5:ef:68:eb:4a:07:cf:b6:17:9b:48:fa:
63:5e:82:44:e3:bf:77:f5:dc:46:05:5b:63:f6:00:
3d:ae:a8:1c:7b:43:9a:25:0e:1c:36:72:ab:d7:97:
4c:3f:9a:cd:f5:b4:b4:42:37:69:c5:3d:00:24:1d:
ef:38:37:1f:45:4f:07:43:b2:47:61:94:56:35:15:
31:49:14:77:e2:ee:ba:2b:ce:3c:a0:da:be:31:3c:
d0:96:06:d9:94:3d:7a:36:6b:3e:57:bb:71:22:45:
a2:9c:1d:82:28:d5:be:5f:dc:9f:5e:05:32:6f:20:
57:3e:28:82:13:e8:8e:3e:88:96:89:d2:0f:3c:39:
10:94:83:7e:a5:94:05:16:a1:58:56:53:fe:77:5e:
b7:b0:ef:d3:0e:5d:a9:c7:31:47:ba:27:51:58:3b:
1a:4b:09:0f:29:06:eb:3a:f0:11:50:c8:dd:af:64:
cf:fe:27:ff:4e:8d:32:25:7f:13:0b:97:de:6d:bd:
bd:87:5b:d8:34:e4:15:54:62:b7:52:3e:63:4b:ef:
65:b3:f7:f9:d8:31:b2:8f:81:5f:84:1f:28:63:35:
be:2e:0a:dd:ae:d0:a3:2f:70:54:ba:2f:04:12:61:
c3:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1C:93:52:4E:CC:55:AA:4E:87:09:AD:27:82:DF:73:F7:82:C6:65
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:cc:0b:b9:bf:5c:39:d6:7a:06:65:cd:4c:0e:1b:f2:27:8d:
af:a3:65:21:1b:89:21:fc:be:21:cb:4a:cd:75:de:65:5a:9b:
5b:a9:3f:a1:f5:97:7b:eb:42:ed:cb:9b:80:cb:d1:1e:d6:68:
a3:0c:cb:76:19:72:5f:96:db:f6:35:4b:24:a5:b9:a8:be:3d:
93:66:74:70:d1:7e:c5:dd:6d:bb:a6:53:cf:82:51:76:e6:3f:
0c:0b:90:96:9e:6e:b9:84:af:d1:57:66:5b:12:bf:80:5a:6e:
d2:7e:33:aa:8f:6f:3d:19:12:48:78:97:72:d0:d4:e8:ba:20:
3b:78:66:23:0d:bb:ae:54:d1:1b:19:1d:46:60:ad:8c:65:cc:
d5:f6:73:ac:db:53:2c:29:37:c2:7b:19:25:0b:0e:8c:3f:45:
e9:b7:41:8a:90:b6:9b:68:4a:3b:d5:13:52:f6:aa:1a:5e:99:
de:f2:5b:8d:2c:b8:3e:34:eb:ee:31:fd:44:1e:48:12:ca:a2:
4e:14:e2:47:4d:48:17:af:09:4c:4d:24:52:59:76:7b:26:60:
92:16:d7:7c:d0:e1:59:7b:61:04:e3:0e:b4:3e:3e:9e:d1:90:
29:16:f6:30:a5:99:59:d9:67:23:c7:ea:f4:18:ea:22:c6:a5:
65:99:f4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:16 2026 by rpki-client