Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
File: 4WgoY-mYep64ZougfJbJmhst_mk.mft (raw, json)
Hash identifier: ofjRaP1VpS1TQt6obwOaeNT70gW5jrPVNku49uE3gC0=
Subject key identifier: 95:1E:52:FD:60:BA:EE:D3:13:83:2F:BA:17:2D:F3:EF:CD:63:09:89
Authority key identifier: E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
Certificate issuer: /CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Certificate serial: 019CAA8F5B87648E3C8E80D05E43510B5D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
Manifest number: 01B8
Signing time: Sun 01 Mar 2026 18:00:47 +0000
Manifest this update: Sun 01 Mar 2026 18:00:47 +0000
Manifest next update: Mon 02 Mar 2026 18:00:47 +0000
Files and hashes: 1: 4WgoY-mYep64ZougfJbJmhst_mk.crl (hash: TD1DFmaT0r7s7B7UGZE0xdMxG7NKT7/yNwduPkcYXYY=)
2: Ac2bylIr7B437ec52nmYNkxcBLU.roa (hash: NVzCCl4oqQBqLlnzk4NHLtjdOZIYGTwFiCs0i6US8YQ=)
3: VurYQADeNAyQZfVqHtE93Y07CDc.roa (hash: zo7Q7XfiMqpPBNsTQ58E9qm/cSZ4esMUjH52zOEyenA=)
4: ey-McRgW79AZU_fzpE-27yI2jAk.roa (hash: pO+sInd8rxx8H+MS6Ps1T/UlLYjOIIjg8OASDn/RsGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:5b:87:64:8e:3c:8e:80:d0:5e:43:51:0b:5d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1682863e9987a9eb8668ba07c96c99a1b2dfe69
Validity
Not Before: Mar 1 18:00:47 2026 GMT
Not After : Mar 2 18:00:47 2026 GMT
Subject: CN=951e52fd60baeed313832fba172df3efcd630989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:30:92:48:ef:ae:3d:c8:bb:95:0b:92:28:
92:e5:6c:cd:c3:b8:ad:48:a9:4f:b6:63:20:da:d3:
03:cd:6b:33:a5:cf:37:1a:aa:5e:86:5a:b0:a2:75:
22:6d:85:20:3c:11:1f:93:8f:39:9a:7f:49:90:63:
db:9b:94:67:5a:77:5a:ae:85:28:c5:d9:bd:e2:5e:
c7:2f:81:e0:80:d6:aa:bf:c7:59:d0:78:02:f8:88:
87:b5:34:f7:23:55:d9:15:fb:40:06:e7:3e:ae:ca:
4f:09:42:9a:82:7b:b9:e9:fe:80:5e:db:d8:b8:a9:
14:22:51:27:aa:75:16:99:56:62:c6:24:a9:3d:5a:
49:48:f5:94:0f:46:37:dc:52:88:33:f6:61:f8:89:
cd:d0:52:fe:f1:d3:ef:bf:3d:2b:35:9e:df:fc:70:
7c:a5:c5:ae:fd:2e:92:c0:e7:0c:17:d9:88:3e:7a:
ca:cf:db:c9:12:0e:3b:8f:f1:aa:a6:74:fc:1c:c2:
aa:77:18:ac:53:85:b7:48:c0:55:3b:b6:18:92:3d:
65:c8:9f:6c:e7:b7:28:22:4f:7d:45:59:50:05:eb:
b8:eb:c4:c6:76:c3:76:26:f7:a2:03:20:8f:53:61:
e5:42:77:29:7d:a7:33:3c:70:8d:85:a3:95:92:5a:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1E:52:FD:60:BA:EE:D3:13:83:2F:BA:17:2D:F3:EF:CD:63:09:89
X509v3 Authority Key Identifier:
keyid:E1:68:28:63:E9:98:7A:9E:B8:66:8B:A0:7C:96:C9:9A:1B:2D:FE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WgoY-mYep64ZougfJbJmhst_mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ecdc5a-ef52-4107-b3cb-3bda3539c6bc/1/4WgoY-mYep64ZougfJbJmhst_mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:55:9d:00:81:07:5f:35:2e:ed:2c:80:c9:99:06:17:f5:67:
a3:74:a7:4c:62:0f:56:0a:24:94:df:87:34:ae:a2:ea:4c:08:
d5:bb:c2:c6:19:f0:a0:93:4c:fe:8f:0c:2c:ae:79:1b:02:e9:
e7:69:27:d2:30:03:b1:34:ba:9a:6a:8b:14:3b:26:1b:17:7b:
a1:15:88:21:be:56:26:9d:23:37:c1:68:76:ea:17:bb:9a:3c:
d1:75:a4:50:5f:2e:2e:cf:7d:42:ea:04:7f:ba:df:11:3e:82:
e4:f7:00:f6:28:b0:08:55:6c:e7:dd:b8:8b:91:3c:c4:72:b5:
32:3f:7b:33:00:70:f8:89:11:52:2a:69:e6:a5:1c:ca:dd:1b:
ba:ee:a4:6d:90:51:d5:6b:34:c3:fb:e2:5e:4d:91:f9:15:a1:
58:57:c0:e4:62:cf:d6:a2:76:bf:90:6a:2c:d2:d3:78:3a:a6:
fe:90:2e:e0:9f:b1:36:e5:cc:9d:8e:4a:f4:06:51:e9:df:5f:
32:35:f9:96:a3:ea:87:b6:16:e1:8e:b6:88:18:86:81:e7:81:
8e:fe:a1:0f:33:af:4e:ec:4c:06:ef:17:44:c4:de:cf:1c:d6:
70:46:9a:1e:4b:ee:19:ca:4a:46:a5:05:70:5a:8d:49:d2:f2:
5b:ca:fd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:56:59 2026 by rpki-client