Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: B4Zo29a8hbg/NnEqATtmNn+h+t85wAsSWlcTlW+8aDw=
Subject key identifier: DA:27:9A:2C:24:7B:CF:F0:4A:1A:F8:7C:26:88:87:05:3C:AF:53:A8
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 019CA9B3644DCBC7CD4B8547F3E51075CDC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 09CA
Signing time: Sun 01 Mar 2026 14:00:31 +0000
Manifest this update: Sun 01 Mar 2026 14:00:31 +0000
Manifest next update: Mon 02 Mar 2026 14:00:31 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: GTNx4M4L4f5K4Ud0BlZm+1tKm6XrfuoOd6g0P+iVAJc=)
2: YWMzYYdq1V4GAPZh68WrmEyhVfI.roa (hash: L4cChRKUEEfDnkwJCOfQ9K/LTDSkENg728c4ezgiFqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:64:4d:cb:c7:cd:4b:85:47:f3:e5:10:75:cd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Mar 1 14:00:31 2026 GMT
Not After : Mar 2 14:00:31 2026 GMT
Subject: CN=da279a2c247bcff04a1af87c268887053caf53a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:ac:5a:f5:da:11:54:96:51:5e:f8:30:7f:
de:f6:15:7e:0c:af:30:d2:00:b1:ee:b6:f7:8e:57:
11:06:61:fc:fa:c4:a2:a1:0a:f5:35:30:a5:c2:26:
a6:9b:1a:e2:e0:4d:e0:a2:cb:c6:22:27:95:7b:e6:
54:16:58:9d:e9:e3:b7:a6:d0:9d:fd:26:8a:a9:56:
91:ad:99:5b:70:8b:8d:68:63:12:32:02:4c:e0:52:
f9:e0:b3:93:54:63:62:fd:d8:97:68:56:38:70:35:
a9:a2:9f:06:85:b5:3b:7a:f3:a1:50:d8:4a:04:9b:
75:5c:1c:0e:01:7b:eb:9f:dc:88:be:d7:26:c7:42:
22:05:81:df:ad:19:80:fc:37:57:9f:ec:c1:86:90:
86:7c:75:83:f5:27:a5:76:ce:fa:03:c9:87:1d:54:
39:bf:5b:61:35:f6:fc:dd:7e:14:00:bd:83:18:8e:
56:d8:17:17:c4:64:b0:62:84:07:c6:b7:e0:70:52:
1d:be:a7:48:aa:89:2b:4b:2c:86:3b:4a:5d:09:44:
d0:7e:3b:cf:e4:c4:81:b5:f0:bc:50:4e:7b:4f:50:
f4:c5:3c:69:d8:92:d0:6c:ab:a4:f8:42:61:31:10:
0d:68:8f:70:ee:55:05:cb:4f:49:94:28:a8:f7:86:
7a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:27:9A:2C:24:7B:CF:F0:4A:1A:F8:7C:26:88:87:05:3C:AF:53:A8
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:bf:f6:96:63:d9:76:f5:36:cc:17:20:5a:e6:5f:30:a5:79:
ab:c6:be:41:29:b7:fd:08:53:25:35:fd:5e:ba:57:de:a9:ed:
8e:6b:0d:e5:8b:bf:a4:8a:33:48:8d:67:e5:a3:c2:d6:1c:fb:
b9:ff:68:1f:18:15:6c:e6:63:ff:d2:9f:0f:5e:2f:6e:fd:b1:
3d:3d:8f:31:7a:97:10:d5:30:d6:89:3d:82:a2:7c:51:79:b1:
bb:c3:56:60:df:11:e6:99:60:f4:ea:48:0a:87:13:5e:4e:3f:
f8:8a:fe:59:78:8e:ec:a5:ca:8b:77:52:9b:c2:32:a9:2b:3f:
b3:80:63:73:ae:b4:3a:72:14:4b:68:7b:da:0b:fc:e7:ce:e2:
e1:a1:6e:60:f7:f5:9d:4c:ad:65:69:bf:df:f7:c0:2a:f2:91:
19:b2:3c:b3:97:03:24:f2:3b:b6:52:22:62:17:ed:cc:b2:4b:
06:4d:34:58:da:b8:0d:dc:cb:fa:d3:95:ef:0d:d2:ef:6a:44:
5d:16:5d:54:1d:57:b6:99:d1:e2:47:ee:7a:de:81:0f:57:82:
5b:67:d5:84:de:f7:3c:d3:a0:73:1a:1d:68:b9:1f:24:4b:d4:
8f:81:af:3c:8b:ff:7a:e4:e9:7f:c2:0d:82:a3:67:14:3a:49:
cb:8c:84:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:34 2026 by rpki-client