Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: Z2S+vkQIeOAw4g7jTa5Ag8ChNv+e9YSBqkkPrY03YJg=
Subject key identifier: 88:83:67:F2:CE:A6:59:67:15:B2:D0:34:7A:B3:FB:09:BB:76:D9:B2
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 019CAAC5FB63AF07FD243D78F674B9ECA4FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 10B4
Signing time: Sun 01 Mar 2026 19:00:27 +0000
Manifest this update: Sun 01 Mar 2026 19:00:27 +0000
Manifest next update: Mon 02 Mar 2026 19:00:27 +0000
Files and hashes: 1: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: HB1zaHVCenmUK1r4ZrK6YD9+SHTGa7w8gF1U+p/barg=)
2: 6jWcTCuvnIbvDAxZuWYVZRLhDLU.roa (hash: LkG1rsHegbWJdLC+vukY1wOXCMcnkOUFAcxz3/K326I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c5:fb:63:af:07:fd:24:3d:78:f6:74:b9:ec:a4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Mar 1 19:00:27 2026 GMT
Not After : Mar 2 19:00:27 2026 GMT
Subject: CN=888367f2cea6596715b2d0347ab3fb09bb76d9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9d:e8:65:c2:48:09:9b:1d:a1:61:02:3e:82:
40:e5:17:a8:30:72:ca:58:64:29:d5:e2:7d:99:27:
7f:24:3e:f7:56:67:63:df:23:2d:c6:52:14:05:fd:
4a:d5:2f:fa:ad:8c:8c:66:06:bc:a6:f6:b2:8d:aa:
f9:d3:69:26:d5:b1:de:bb:f3:fc:4d:75:82:18:97:
b3:26:a8:78:91:13:84:c4:56:1e:33:21:aa:f5:f2:
f0:b7:16:13:41:f2:d5:3a:eb:b0:18:91:9e:fe:a6:
27:79:59:63:4b:e2:f5:f8:7b:aa:ec:0e:cc:54:60:
86:4e:ed:47:68:18:be:c6:f5:2f:19:a8:4a:45:66:
bb:09:e9:c4:8f:70:25:30:19:dc:f3:ae:4d:a8:bc:
5c:12:46:9d:17:78:8e:7f:81:09:f3:04:d2:ca:f1:
8b:3e:75:18:4e:6d:76:33:e3:5c:9f:91:99:8c:70:
f7:46:31:dc:5c:13:27:03:9d:9d:d4:c8:3c:76:35:
8b:cf:42:8b:1d:4f:02:e9:5d:7d:47:8c:e6:f9:e2:
18:c8:bc:00:fd:d8:ad:96:97:31:b8:ca:32:60:70:
b6:e6:c4:ad:c9:fe:9c:6e:b0:c1:f5:5a:a4:ed:72:
81:81:84:b0:92:0a:fb:73:eb:c9:85:4a:16:f3:cc:
3c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:83:67:F2:CE:A6:59:67:15:B2:D0:34:7A:B3:FB:09:BB:76:D9:B2
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0c:50:18:b6:ed:e8:a1:14:e3:20:b6:aa:46:c2:6c:77:26:
3e:15:6c:49:71:b6:1f:a2:d7:59:2a:06:63:57:42:66:7a:87:
40:8d:63:3e:de:d1:33:43:0a:f5:52:43:ee:ab:df:e2:36:ea:
57:ef:fe:44:d7:f3:cc:12:13:92:c8:f6:26:ab:15:7d:2b:be:
f9:4f:c7:e8:d5:c4:78:ea:4c:6f:26:35:1c:a0:60:7f:17:8a:
e4:b6:b9:28:8d:13:a3:8f:74:af:9f:51:85:4d:fc:10:b7:f0:
76:c6:dc:29:92:be:fd:f8:1b:7d:26:ae:1c:ed:71:7a:41:34:
f5:6c:e5:14:ab:5b:46:5d:61:d0:af:3e:23:c9:5f:c0:e4:d2:
75:77:b3:c1:87:ba:59:12:e5:3d:e9:c8:db:5e:73:f7:c9:db:
9f:6f:27:16:26:d0:12:b9:5e:3d:d7:89:21:cb:ec:d7:5c:85:
a7:0d:d7:f1:21:45:df:cd:f7:b3:30:06:5c:7c:79:0e:99:ec:
9f:e6:1e:e3:82:97:42:cd:84:86:3c:8a:25:a5:61:41:2d:5e:
5c:28:08:5d:54:5a:97:9c:56:07:b6:b2:24:8f:1b:61:a9:5d:
9c:06:e6:64:f3:ce:de:36:27:41:a6:75:d4:f2:2c:0a:0d:7f:
90:c0:d4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:33 2026 by rpki-client