Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
File: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft (raw, json)
Hash identifier: jQOWkT/4ZlBK+OoEsnjoevqcmmEmdKwCXQ4SWmAkymQ=
Subject key identifier: BB:8E:AB:11:83:ED:08:17:0B:32:86:79:B3:74:AB:0E:33:8F:C7:57
Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
Certificate issuer: /CN=e2c756c691073752260eda0b29df3140cec48c18
Certificate serial: 019CABA237A72EF96A50BDF870813CF8D965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
Manifest number: 1132
Signing time: Sun 01 Mar 2026 23:01:00 +0000
Manifest this update: Sun 01 Mar 2026 23:01:00 +0000
Manifest next update: Mon 02 Mar 2026 23:01:00 +0000
Files and hashes: 1: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl (hash: HzIzsZEcCUHBFaB8VnqPC7fKx+IdpwumOJMxIxNDK3Q=)
2: T3y-vjZIxVWN7JxZPOetrQJcWz0.roa (hash: XkyUMDJqJv6+3HQxI00RxtfuBMdhPrCaA/EHDWTyM5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:37:a7:2e:f9:6a:50:bd:f8:70:81:3c:f8:d9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18
Validity
Not Before: Mar 1 23:01:00 2026 GMT
Not After : Mar 2 23:01:00 2026 GMT
Subject: CN=bb8eab1183ed08170b328679b374ab0e338fc757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b4:eb:8a:2e:34:50:ce:bb:9f:bf:ca:4f:e1:
a4:61:26:cd:a6:7d:bf:34:59:3e:7e:77:9f:76:90:
14:a6:37:7b:fc:7e:80:e4:3a:f0:b3:46:61:ec:6d:
89:65:c2:d7:74:b5:fb:dc:cf:6b:c7:86:ed:62:27:
d0:bc:0c:0f:80:e3:4f:e6:51:1d:2c:3a:cc:b4:d6:
0b:1b:e5:15:d7:32:4c:a2:7c:cb:95:d0:94:1a:3b:
49:0d:d0:45:3f:1b:e1:f3:b2:8d:c0:44:75:bf:cf:
b4:38:6f:54:dd:dd:ea:6c:f6:75:d4:47:15:b4:74:
6e:3b:64:89:9f:50:6a:b9:85:94:7a:02:02:88:d6:
6b:e0:df:ae:a3:1e:b0:46:6b:1b:b6:8f:78:52:4e:
48:da:1b:89:9b:a4:bc:1d:35:9b:42:ca:f3:91:da:
e6:49:1d:4f:43:1c:86:02:2c:66:a8:d9:ba:18:ab:
d0:12:96:08:e7:11:68:82:68:e0:70:f0:ae:b4:f4:
aa:a8:0b:cc:6c:89:6d:e9:68:ec:7b:2d:46:5f:5a:
92:4d:59:32:c6:db:27:7d:a9:8e:4f:e8:e6:d1:f1:
dd:cd:62:67:85:1a:d3:c2:0b:e5:e7:fb:3d:0a:58:
4b:2b:2b:61:dd:e3:db:42:36:85:01:30:a5:09:b2:
d8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8E:AB:11:83:ED:08:17:0B:32:86:79:B3:74:AB:0E:33:8F:C7:57
X509v3 Authority Key Identifier:
keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5a:a3:1b:60:a5:87:4b:56:22:80:5e:ca:8b:db:60:66:96:
99:af:4a:05:df:75:95:57:42:8d:b7:67:74:06:df:35:87:b9:
d6:c6:8d:51:6f:39:38:27:e7:75:b3:58:58:76:bf:8e:9b:b8:
0e:04:a5:2b:ff:84:92:e9:74:12:a0:31:b8:86:07:cd:43:ce:
63:b6:ed:6a:7e:4b:e5:a6:fa:d3:64:a2:cb:60:d5:cb:a4:f7:
79:0f:c1:5b:64:3b:00:98:85:8b:de:50:7d:54:0a:1a:e0:ca:
fa:b9:b2:0b:35:03:90:14:07:14:24:70:c2:e8:7e:f0:fd:4a:
97:f1:4d:41:a3:c8:1c:c7:32:f4:99:76:fa:64:a2:32:e1:53:
d2:be:5b:48:39:96:99:3b:6b:2c:ac:b1:42:2b:23:a5:a2:08:
45:e4:c8:3e:c1:e5:2f:f9:55:49:55:4c:56:db:62:9b:60:84:
e6:d1:37:af:b6:ea:83:c9:9a:d0:24:f6:7a:24:b7:71:5c:31:
f1:6b:31:ce:ce:61:b5:47:27:5b:a0:4b:ac:d0:f7:85:ba:26:
7e:27:36:d8:44:53:06:39:40:7a:d3:ad:ff:cb:47:20:3e:42:
2f:90:af:ad:f2:a2:7d:1a:00:03:e0:88:8c:44:36:61:a6:7b:
4f:e0:fd:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:59 2026 by rpki-client