Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File: d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier: z7ZVQ1AdK1LO/eKtiLomff2J7NFNGtskd92vKKi7BxU=
Subject key identifier: 4F:7A:45:0D:95:11:4D:02:6D:88:98:D5:8D:5A:15:9E:64:5A:5B:5E
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 019CAB6BDBA6E16AE4F6A6242A88048E52F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number: 0CD4
Signing time: Sun 01 Mar 2026 22:01:38 +0000
Manifest this update: Sun 01 Mar 2026 22:01:38 +0000
Manifest next update: Mon 02 Mar 2026 22:01:38 +0000
Files and hashes: 1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: BMsuQbv3+WWR9ZdTz4MAjFLZPKpIUF3zfYNMQrOUWmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:db:a6:e1:6a:e4:f6:a6:24:2a:88:04:8e:52:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: Mar 1 22:01:38 2026 GMT
Not After : Mar 2 22:01:38 2026 GMT
Subject: CN=4f7a450d95114d026d8898d58d5a159e645a5b5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:f4:ca:c6:ce:f8:07:59:f3:64:35:7c:f4:5e:
98:c6:92:67:16:b1:dd:cb:95:01:ea:9f:a0:44:84:
3e:fb:ca:ec:7a:35:dc:82:cb:6a:b7:93:a5:be:18:
f9:25:2a:f6:e9:34:78:7d:84:3a:54:27:8f:56:27:
be:06:1b:ca:61:6b:20:77:e5:8b:1e:78:9d:06:6b:
04:39:87:63:1c:fd:68:84:b6:07:36:e4:00:e1:73:
5e:75:e5:45:ba:02:76:fd:a5:63:15:5a:38:29:3d:
33:7b:fd:ca:78:50:b1:40:c5:0d:a0:49:78:f6:84:
26:e7:e4:cb:95:e8:56:c3:3d:03:72:ed:aa:8d:93:
6b:d1:4b:b6:4b:21:1c:aa:dc:06:fc:65:99:e6:08:
89:d2:a8:d7:37:79:72:5b:43:59:14:72:31:60:6f:
04:1f:b7:2f:06:ef:5c:0f:9c:51:c1:ad:ec:1e:92:
61:9a:15:a9:20:f0:b6:4a:c4:6f:ce:9f:b3:49:2f:
71:c1:08:63:5e:35:9e:de:60:95:ad:0f:de:dc:54:
1f:62:d8:ce:5e:da:7f:be:b6:95:38:2d:56:1f:c8:
08:3c:ff:86:6d:de:67:ed:a7:59:e3:b5:f9:d2:63:
a2:91:20:b1:1f:c5:b3:b4:06:af:d8:45:58:11:90:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7A:45:0D:95:11:4D:02:6D:88:98:D5:8D:5A:15:9E:64:5A:5B:5E
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:83:1b:ca:74:d3:09:d5:47:45:7c:49:3f:8d:5c:65:4d:d2:
72:1a:24:bf:6b:b7:1c:5c:43:0f:4d:6c:3b:74:c8:50:8e:fb:
e1:24:91:07:11:0a:29:ea:48:c8:92:a7:d1:3c:cb:aa:fb:30:
c6:f2:f5:6e:49:ae:9d:ce:2f:70:69:82:24:4e:88:f8:a9:63:
88:9d:ef:79:da:d6:05:35:2b:27:e8:fa:73:ba:e2:be:7a:5a:
2d:0a:e0:42:67:a4:d7:4b:ba:d9:7a:68:5b:56:4a:72:3e:bb:
7a:bb:64:b4:86:af:59:d0:d0:41:bc:33:66:fb:26:5e:d8:ef:
51:e4:19:09:41:1c:6a:fa:53:20:f2:59:c9:c4:db:93:a9:e2:
d5:b4:cd:c3:b8:39:b8:3c:f5:98:d3:63:d5:96:19:21:7a:3d:
f2:b1:66:9d:b6:ec:be:3b:6d:dc:5d:80:76:0a:eb:91:af:09:
43:bd:bb:af:7d:5d:57:aa:74:84:f0:4d:bb:01:b7:4f:44:88:
4d:a8:7a:3e:b2:30:df:8d:64:59:0d:df:5e:e0:41:5e:2e:55:
ac:25:a4:78:a1:14:18:05:48:ae:db:a3:e7:6f:02:26:1b:65:
34:91:9f:c0:3f:cf:4b:a8:0c:d1:cb:5e:74:55:0f:cb:f8:86:
55:37:a2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:03 2026 by rpki-client