Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
File: 4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json)
Hash identifier: IKLE9CTV1EFAtaK92KSrZHzebAUjM+m2DIWYnfwLxFM=
Subject key identifier: 15:72:4F:C9:E0:C4:5F:FA:D0:D6:30:AF:E5:CF:DF:21:76:FC:27:A8
Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
Certificate issuer: /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Certificate serial: 019CAA58E74B6064A772B8B5ACF5429EA2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
Manifest number: 032B
Signing time: Sun 01 Mar 2026 17:01:18 +0000
Manifest this update: Sun 01 Mar 2026 17:01:18 +0000
Manifest next update: Mon 02 Mar 2026 17:01:18 +0000
Files and hashes: 1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: dB2zLUD1RsR1w6gLTzSVD1VKo/iFDdbNVgxcWkxCs9Y=)
2: valzYXczYY3RJ6xb_g__yzBDYXU.roa (hash: bbU6NTwqQ5O7qErPjl86r7BZfQa4g2RHPM0gnU6rCb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:e7:4b:60:64:a7:72:b8:b5:ac:f5:42:9e:a2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Validity
Not Before: Mar 1 17:01:18 2026 GMT
Not After : Mar 2 17:01:18 2026 GMT
Subject: CN=15724fc9e0c45ffad0d630afe5cfdf2176fc27a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:09:e4:56:f0:ad:e7:9b:39:1d:2b:ed:88:91:
ad:95:1b:ac:76:00:71:4b:22:9e:fb:bb:9f:eb:27:
f3:b7:e0:58:49:96:c9:f1:76:d4:ae:73:0f:40:ad:
0d:91:88:b9:91:00:7e:32:ca:2a:c7:d7:60:42:0f:
31:f1:c6:bc:7f:61:9b:9b:f9:a6:b9:e3:48:a5:e2:
f2:b6:03:de:dd:54:50:7f:66:1c:28:86:aa:fc:f6:
e4:e0:ce:f4:00:3d:1a:c0:e3:90:10:0f:5a:6c:65:
33:c8:8c:b5:4c:9e:32:02:5c:8e:9a:ea:3c:2e:8d:
ce:e2:83:45:5f:90:9a:66:3e:f6:02:20:28:61:43:
d2:2d:3b:d0:54:30:42:e3:31:d5:4d:57:65:ff:e9:
30:21:d7:a0:6c:c9:69:7e:0d:b2:60:ba:ff:9f:24:
ce:49:0a:7b:75:ea:20:cf:3f:6e:14:0a:30:99:65:
71:42:17:61:6d:4a:e4:19:f7:31:43:dd:9b:e3:13:
8c:0e:bb:f3:4f:f5:07:b6:ca:c6:09:a1:a1:59:2b:
c7:e7:34:50:8c:c5:60:f2:09:7b:71:ae:73:05:c4:
ff:86:6b:03:38:d9:72:35:5e:13:a5:ae:20:dd:90:
66:6a:9f:3e:02:d2:55:b2:e7:63:14:86:b0:8e:5e:
d3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:72:4F:C9:E0:C4:5F:FA:D0:D6:30:AF:E5:CF:DF:21:76:FC:27:A8
X509v3 Authority Key Identifier:
keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b9:1c:31:8a:7c:48:cf:a8:bd:fa:09:d1:ba:00:bd:c1:39:
77:de:9e:ed:2c:b8:37:e5:cf:1a:dc:aa:62:5d:f2:e9:5d:44:
a6:12:03:b1:14:e2:dd:74:f9:39:e3:b5:0f:ab:12:b2:54:d6:
62:55:7c:d1:30:31:2b:e5:2d:c5:5a:20:d6:68:4e:78:9f:55:
49:5d:f2:70:9f:97:1c:15:9a:4b:24:cd:6a:4f:b2:09:11:4a:
78:09:27:e5:2f:82:c0:be:6a:e6:30:0e:47:38:4e:0f:84:2e:
7f:57:8b:5c:82:80:48:57:97:f4:bf:aa:1d:fd:ea:b2:1f:c1:
d6:f6:e4:df:4f:da:e9:47:39:f3:0e:44:b2:09:c3:0c:3d:78:
69:cd:99:01:6d:08:89:61:68:49:86:1b:e3:09:d8:f0:85:fd:
46:22:9d:1d:b4:d0:a6:25:24:f5:d4:e7:e0:10:d7:89:42:98:
86:3b:8d:9a:eb:3f:e5:92:db:1d:31:a9:79:95:2d:53:3a:45:
a9:9d:dd:de:7f:ce:27:f9:43:10:83:d1:2c:40:04:0a:7d:60:
14:85:a1:7a:96:b0:a1:f6:e8:ed:1f:fb:52:16:4a:80:e1:87:
2e:54:8a:0d:3f:e6:97:6b:2d:bc:29:40:08:12:f5:b9:8f:60:
ed:2e:21:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:47 2026 by rpki-client