Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
File: if4_e4M8MGAut5hY5-r67VVPTFs.mft (raw, json)
Hash identifier: HaykPk30d6m6geYDpQwRHykqkeniWbBAjmbJnqR3v9Y=
Subject key identifier: E2:36:E3:97:6E:F5:C3:2A:4A:5E:53:BC:E8:89:E9:0C:14:5B:D2:5B
Authority key identifier: 89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
Certificate issuer: /CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Certificate serial: 019CADC7F0CFFBA2F743BF2224CF6D80C02E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
Manifest number: 0AA3
Signing time: Mon 02 Mar 2026 09:01:27 +0000
Manifest this update: Mon 02 Mar 2026 09:01:27 +0000
Manifest next update: Tue 03 Mar 2026 09:01:27 +0000
Files and hashes: 1: if4_e4M8MGAut5hY5-r67VVPTFs.crl (hash: VWy9PmgozVxBYhuy+eJtfmPz9pflKmYkQ7k3hlZl/7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:f0:cf:fb:a2:f7:43:bf:22:24:cf:6d:80:c0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Validity
Not Before: Mar 2 09:01:27 2026 GMT
Not After : Mar 3 09:01:27 2026 GMT
Subject: CN=e236e3976ef5c32a4a5e53bce889e90c145bd25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:6a:b4:72:0f:ac:83:06:8f:d5:37:64:79:
78:91:39:65:52:dd:74:93:e5:72:ed:e8:be:a5:64:
fe:31:55:ab:cc:bf:f7:ed:9c:6e:5a:0a:aa:e0:93:
07:5a:34:f1:20:ba:52:f7:42:7c:b5:b4:69:1d:64:
b0:00:59:25:9f:9e:a3:e9:3e:d4:34:09:a0:42:f0:
16:87:98:2e:21:73:28:cf:3e:96:e0:06:fb:d9:4e:
ba:72:f2:95:2c:59:03:30:f8:c2:84:29:d0:5c:33:
60:82:d1:ac:ef:56:4f:29:ef:c8:85:9c:f5:89:51:
11:0a:c2:53:28:7a:ba:5e:35:ff:f3:a8:9e:e1:0b:
38:ab:e8:41:72:15:33:ea:65:fc:1f:c0:96:5b:f0:
4a:69:3b:31:55:a0:49:9c:dd:4a:0a:44:87:0e:aa:
0d:00:71:3c:12:28:60:d6:64:3c:e6:02:32:2d:41:
c4:8c:44:e0:23:14:6b:56:b7:b1:49:21:d6:9e:0d:
b4:02:47:30:59:b7:fc:34:a2:61:c4:ac:8c:d2:1d:
d4:2d:17:4c:0d:fa:53:53:4c:43:ca:ab:47:49:34:
96:c3:6f:19:c3:14:d2:e9:8a:fa:ce:71:53:01:4a:
df:3c:6f:fc:f9:4c:ba:6f:5c:4f:5a:30:ab:e9:52:
9a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:36:E3:97:6E:F5:C3:2A:4A:5E:53:BC:E8:89:E9:0C:14:5B:D2:5B
X509v3 Authority Key Identifier:
keyid:89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:5f:62:4d:a7:ea:e2:74:75:25:ee:51:6c:4c:77:fe:a1:cd:
36:86:e6:e1:5b:6f:68:0d:ea:1c:b2:7a:51:aa:f8:98:10:3d:
39:a5:30:a9:96:88:72:fb:69:c8:e9:56:c9:3a:07:06:52:6a:
88:18:5c:55:cf:13:72:42:5c:f1:1f:22:08:f9:77:93:f6:52:
3c:f1:49:95:1b:4d:50:62:ae:25:5d:f0:3c:0f:f2:c9:dd:c8:
d9:6d:a1:4b:6b:4d:3c:86:7f:82:fe:79:f4:ba:a3:d7:39:aa:
7c:34:30:a9:6a:e9:37:68:8c:a1:d6:9b:d5:cc:d6:c9:ed:55:
e5:d4:34:54:41:99:87:d6:87:ab:ec:3f:bf:d3:27:b5:f1:5d:
9f:c8:56:d2:ba:b6:44:36:9e:c3:e4:83:6a:c0:95:04:65:29:
4a:75:68:96:2a:5a:b4:98:79:3e:74:24:b8:65:08:fb:89:48:
5a:d8:39:54:8c:d2:82:7b:05:63:bc:6a:ce:79:96:5d:7e:b0:
82:4a:17:0d:90:ac:d8:04:59:aa:e1:80:22:a8:cf:8e:97:a3:
6d:b8:44:26:77:c3:bf:20:dc:cf:a2:71:89:f9:85:49:2e:12:
3b:0c:ba:59:79:0e:4a:2c:14:d9:52:35:94:40:85:a8:e9:5e:
41:f5:44:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:30 2026 by rpki-client