Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
File: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft (raw, json)
Hash identifier: SSWGmRApB5B15yXFl2CsciHFDIo5GpzX1ws9DZqfsXY=
Subject key identifier: E4:0A:0E:57:35:19:C4:62:77:C8:F6:4D:39:68:C4:83:14:B0:F5:D8
Authority key identifier: 8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
Certificate issuer: /CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Certificate serial: 019CAB6AD01840C241EDD8518A64A545402A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
Manifest number: 04E4
Signing time: Sun 01 Mar 2026 22:00:29 +0000
Manifest this update: Sun 01 Mar 2026 22:00:29 +0000
Manifest next update: Mon 02 Mar 2026 22:00:29 +0000
Files and hashes: 1: jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl (hash: P5IBh+8A9hTFrkMuMGZS2+gUPM0ottk6iPrh6uhfNE8=)
2: mq6jdAhoY64n-S89EB8sdE29Spk.roa (hash: bvsiwXRJB+1a6z+HtrBRTvbHG/Lsx8kIyh6UkUd8Cek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d0:18:40:c2:41:ed:d8:51:8a:64:a5:45:40:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d80b45455d89731f87bb53f4dbe641189837d4e
Validity
Not Before: Mar 1 22:00:29 2026 GMT
Not After : Mar 2 22:00:29 2026 GMT
Subject: CN=e40a0e573519c46277c8f64d3968c48314b0f5d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:c6:ad:70:19:c9:46:4e:39:6d:fe:00:bd:
b5:95:11:7e:3e:7e:55:b4:e5:fd:dd:e6:25:7c:32:
3a:99:dd:bd:01:c2:df:df:21:1f:92:61:b3:d4:1b:
8e:01:33:fc:09:31:78:e4:1b:18:61:75:1a:8b:72:
66:52:cc:23:7c:18:54:d0:db:aa:bf:71:ec:db:f4:
8b:69:7a:11:63:d0:54:c6:78:fa:78:11:9a:74:51:
7d:28:e2:fa:24:e2:67:d7:e5:83:f0:2f:c7:a6:a2:
ff:88:42:3a:89:17:6d:26:e1:62:9a:aa:31:7a:c1:
de:27:29:81:a6:57:ce:76:8d:51:b5:12:80:08:76:
24:02:0a:87:f3:e3:3d:2f:2d:00:8c:b7:39:76:e9:
5d:dc:65:c1:87:d3:82:f1:21:a2:e9:57:66:aa:f8:
c0:32:24:97:14:ea:8c:6b:ac:bd:41:57:eb:14:79:
9a:e5:69:18:06:86:b8:6a:bc:b5:51:14:70:53:72:
83:a4:36:92:ff:1d:a9:ba:b3:ae:ce:55:d9:5e:01:
fa:db:68:4b:ae:46:56:dd:0a:07:b9:38:f6:bb:36:
28:1b:eb:a2:19:14:05:25:02:3a:74:19:70:8d:a6:
f3:09:94:be:80:5a:06:0e:ac:95:06:ce:f3:f0:c8:
f5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0A:0E:57:35:19:C4:62:77:C8:F6:4D:39:68:C4:83:14:B0:F5:D8
X509v3 Authority Key Identifier:
keyid:8D:80:B4:54:55:D8:97:31:F8:7B:B5:3F:4D:BE:64:11:89:83:7D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/ae0e68-a3b6-4673-81e7-380e5bdfa5e0/1/jYC0VFXYlzH4e7U_Tb5kEYmDfU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4e:2a:64:86:0f:72:a5:7c:26:7e:2c:62:78:9f:00:15:2e:
d6:d5:c5:19:4b:2c:77:6d:e7:a7:48:4d:6c:49:84:3c:a3:fd:
c9:c3:a6:bb:31:51:db:0c:0d:67:a6:c1:39:4d:eb:64:e1:fe:
bc:e6:92:8e:8b:82:03:02:c9:9b:25:bd:57:6f:2b:3d:47:91:
8f:44:ab:de:f6:ed:5c:f0:7d:fb:0c:fa:82:bc:a4:37:e3:49:
05:5a:24:53:9a:d7:76:d7:c8:ee:70:99:47:33:c0:e9:4c:db:
b3:12:b2:41:63:06:1a:f5:fe:2c:ef:ff:67:7c:40:28:0d:80:
62:a3:a6:88:1c:4c:be:61:40:57:a5:2f:8b:88:ab:e9:67:7d:
e0:3b:91:8a:68:ad:ad:8e:4b:da:95:a2:b4:7c:dc:45:27:36:
38:7e:c0:47:7e:6f:c0:7a:f0:30:13:10:08:f8:f9:ae:ad:15:
88:06:a9:66:db:ae:32:9c:13:2c:3d:e6:d8:df:13:7f:ee:c8:
c4:8c:1b:07:26:8a:a1:1c:f4:ad:7c:2d:16:38:9f:f2:f5:2b:
05:2b:32:52:47:3c:15:e1:35:a4:a8:6a:12:26:07:c6:23:b2:
db:73:c6:d5:3d:75:da:dd:e4:18:1b:98:5e:e7:e9:a0:0b:81:
62:44:fc:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:31:09 2026 by rpki-client