Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier: lDKuhPygUlhaUMjseBO5A/21w5BNgKJLdwVZQIuoRtQ=
Subject key identifier: 54:A9:C8:26:89:E6:8C:F7:FE:E4:2A:8A:3E:4E:FD:8B:84:2B:AF:24
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial: 019CABD9C9B2DF064081CF30EE0D7C319616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number: 0973
Signing time: Mon 02 Mar 2026 00:01:42 +0000
Manifest this update: Mon 02 Mar 2026 00:01:42 +0000
Manifest next update: Tue 03 Mar 2026 00:01:42 +0000
Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: k3UbGbZwpC7R1D6tRAOTt2qPFDwU2t5Qsl4Vp/yoMCE=)
2: MPWn9lYh7Ig78eg1IuFu_hQVgcY.roa (hash: iyM+MzYg4hUTkqmFv32rNevlyEv/xOwD98IypdwiHXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:c9:b2:df:06:40:81:cf:30:ee:0d:7c:31:96:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Validity
Not Before: Mar 2 00:01:42 2026 GMT
Not After : Mar 3 00:01:42 2026 GMT
Subject: CN=54a9c82689e68cf7fee42a8a3e4efd8b842baf24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:e3:46:14:64:9e:fa:ed:42:5a:fd:e6:95:
cc:3f:63:76:2c:8f:04:2f:0b:c3:a9:9e:bd:ff:70:
7e:30:33:10:2b:45:73:4a:9e:ae:95:f3:57:c5:ce:
b0:27:62:b8:c7:06:05:a7:54:ee:ad:28:16:6f:cc:
9c:f1:14:f9:48:26:fb:44:c4:44:f9:6f:9a:ab:40:
11:d3:78:75:ef:b1:0c:34:88:db:df:f5:20:84:27:
1d:65:99:24:ea:1c:e4:8b:6c:93:e6:cf:f8:cf:64:
9b:ae:b2:21:ec:49:27:1f:09:0f:5e:83:9e:8c:68:
20:90:bd:bb:d7:fd:03:4e:c5:32:d5:a5:f2:49:ac:
4e:88:ee:ab:d5:a5:04:30:15:86:1f:ed:c6:81:7e:
58:5c:96:a3:d2:22:29:48:a4:52:11:59:a0:10:32:
dd:78:f4:57:55:62:a3:04:63:bd:8f:ba:17:60:ab:
81:ed:ba:27:c9:23:47:4a:02:db:97:f9:d9:d7:33:
3b:fe:25:3f:bb:b2:58:61:3d:49:dd:2a:b8:f9:7d:
c0:53:e9:8c:51:ca:44:ec:a1:32:e3:82:2d:f5:0e:
67:af:4f:8c:a1:71:72:4b:68:88:1c:a1:0b:37:b6:
83:a9:b6:cf:e7:f3:1c:6a:25:4b:0e:a6:71:7e:ee:
74:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A9:C8:26:89:E6:8C:F7:FE:E4:2A:8A:3E:4E:FD:8B:84:2B:AF:24
X509v3 Authority Key Identifier:
keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:9c:cd:ba:0d:86:61:40:e2:d7:eb:72:21:9f:90:fd:14:77:
7a:de:52:a6:c4:0b:44:df:d9:44:20:11:e4:45:2d:51:ac:5e:
da:d9:fe:d4:b1:33:b6:48:55:23:99:77:37:8a:91:53:7d:56:
0c:e3:18:8f:a2:7f:07:51:85:a9:8e:55:0d:6c:15:16:5c:64:
ac:eb:04:da:27:7e:e9:02:ee:7b:c0:87:2c:57:3d:00:0e:38:
78:e8:99:33:a2:12:db:de:29:5a:09:a6:06:c6:03:7b:af:77:
72:b8:1b:0a:24:b2:5b:3b:27:bd:c7:91:7a:53:91:4d:eb:93:
d1:97:71:77:c3:bf:f4:73:d5:06:31:69:17:8a:20:34:6a:ca:
2f:03:41:35:a1:fc:6c:b5:42:dd:26:32:08:b6:7c:f2:ce:70:
83:33:15:82:66:33:45:76:b7:43:38:b3:43:9b:bd:ec:a2:fd:
35:70:5e:93:03:44:c2:a6:c0:c0:cc:43:c5:1e:5c:4b:98:ae:
b7:d0:d9:1b:bf:07:96:0c:cb:6a:17:23:be:5e:b1:c7:8a:0c:
ad:37:7f:6f:ea:9d:f6:d3:dd:4e:f7:ce:0c:bc:71:4c:37:f1:
9e:8e:43:51:0f:ca:9a:b4:a8:a1:ee:ea:d1:cf:88:6b:bd:05:
6b:ba:ad:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:46 2026 by rpki-client