Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: Tt1eI2HNx1ZySWQyB6WUt+Scn25I/G5BTAWvpK9g9qk=
Subject key identifier: 99:A2:93:37:CB:2D:7B:93:46:22:F2:ED:40:A5:58:19:0D:94:64:33
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 019CA8A151367649AF9BB1A770F08535B431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 13A1
Signing time: Sun 01 Mar 2026 09:01:10 +0000
Manifest this update: Sun 01 Mar 2026 09:01:10 +0000
Manifest next update: Mon 02 Mar 2026 09:01:10 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: InSd4/HTzRBjjRmkEILEyT6botGa4DV0+ZIdENjM+sY=)
2: _2TjfVrCZo9B9qI9aJsIIj8RhAk.asa (hash: M/M1jD58xwzQOF/SAmLUskPi5EjlgSXMDxr/H80Jdlc=)
3: i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa (hash: w8gWgmF42nIarY6Emvf1fz/wNEfrJpHlyRzan9puCwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a1:51:36:76:49:af:9b:b1:a7:70:f0:85:35:b4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Mar 1 09:01:10 2026 GMT
Not After : Mar 2 09:01:10 2026 GMT
Subject: CN=99a29337cb2d7b934622f2ed40a558190d946433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:01:0c:8e:69:b7:4f:bc:e9:13:a3:2a:07:
03:db:19:a7:91:14:ff:ef:bb:57:f0:37:81:29:33:
d9:ec:23:d8:69:eb:c6:83:31:96:1d:c1:88:a2:fb:
57:17:09:ec:87:69:81:9d:9b:2c:4d:e9:c6:f8:c1:
c8:e7:fe:6d:64:ee:29:a5:88:99:5f:40:dc:81:5f:
21:c7:07:6b:6d:0f:b8:cb:85:2f:a0:38:a0:c6:83:
f8:fe:30:c3:e4:94:d0:b4:b7:ae:dc:a2:d5:a1:6d:
30:33:31:68:50:9b:df:ad:5d:9b:df:dd:c1:61:27:
fb:ff:9f:87:0e:30:b2:2a:58:cc:dd:d9:ea:04:f5:
74:43:d2:83:6c:f2:97:05:3c:f2:85:41:37:31:d8:
6e:a8:c3:98:55:ac:25:c6:7b:57:61:8c:09:aa:7e:
17:b5:ee:37:8d:34:2d:0b:78:46:2c:e2:b0:5b:fb:
df:5d:e5:02:a8:db:15:5d:5a:5a:1a:46:0d:01:42:
b9:d8:12:a2:09:0a:32:b9:4c:66:fb:b8:08:48:98:
85:23:7d:e9:46:77:9a:5e:c7:32:92:6e:11:44:60:
0b:b6:ee:a4:23:d0:3c:2b:d0:95:8b:8b:d7:ed:3b:
6a:4e:97:1f:cd:a0:f7:55:b7:65:04:b5:4a:fd:ad:
00:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A2:93:37:CB:2D:7B:93:46:22:F2:ED:40:A5:58:19:0D:94:64:33
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:43:96:24:f3:51:42:62:e9:75:52:ce:bb:2d:90:bf:00:ed:
fb:70:c9:f2:63:18:72:a2:57:37:f2:b3:a3:62:66:6f:56:cf:
58:53:4a:13:14:4d:ec:3f:a4:5b:20:2a:1e:b0:50:f5:e5:c4:
08:09:9c:03:e2:92:79:e4:45:0d:b7:18:83:6c:8f:a7:1a:cc:
6c:c7:9d:4b:b3:f3:3e:8e:47:d5:cd:2d:fc:57:37:3c:64:2f:
c8:5f:1f:1b:62:4d:be:91:cf:97:63:74:a1:06:de:23:55:a2:
3d:51:6f:24:bb:cc:6e:f5:44:6a:10:c2:37:23:26:17:56:34:
12:88:13:7c:e4:fe:2a:3d:1d:5b:25:21:63:15:45:88:71:d4:
2a:d7:fb:90:6a:c2:39:f3:b1:d8:3f:89:b6:33:19:ea:96:06:
c0:7a:1e:5b:c9:48:a3:ad:29:29:de:1d:c0:04:d5:43:99:1c:
aa:4e:38:39:d9:f8:44:c8:50:f1:b5:8e:57:53:7d:66:08:d8:
4d:e7:49:c5:89:28:62:a5:90:27:cb:d1:d0:73:be:b5:05:00:
80:d3:72:36:5e:5a:17:9d:ca:e3:f6:f1:5c:4f:56:81:e8:8a:
a2:15:75:e7:62:40:90:a7:93:75:1a:72:cc:23:9b:5a:e6:e8:
29:5f:88:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:28:30 2026 by rpki-client