Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
File: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft (raw, json)
Hash identifier: CTFvJ6iRU5J4b1k/nMhvCKd2W77/9q3k9329KHP5Zzc=
Subject key identifier: A7:E9:8D:38:E7:DF:AC:06:FC:04:EA:9A:2F:14:D3:D2:16:D0:00:6F
Authority key identifier: E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
Certificate issuer: /CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Certificate serial: 019CA832F0D875A633D73E9254F4B5C419CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
Manifest number: 15
Signing time: Sun 01 Mar 2026 07:00:36 +0000
Manifest this update: Sun 01 Mar 2026 07:00:36 +0000
Manifest next update: Mon 02 Mar 2026 07:00:36 +0000
Files and hashes: 1: 4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl (hash: uRh2uWxGELWUk6d+G3oByhmyIZ322B87C9RBmdqP/+M=)
2: AFLK_8dbQHSlYChoAA91MADo2dU.asa (hash: 7cAv3e9gnI3dZUR9MQwkNpXKUI1PglLX9wimy3aeHe8=)
3: Piv3x5GjdFWYogfJry-sQL2JX-U.roa (hash: 2ZYAqvuqxNoPqFzul2MyF+P3n7KAI2Js6FxsXshtYjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:32:f0:d8:75:a6:33:d7:3e:92:54:f4:b5:c4:19:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ca795c4b5fb3c9e7dd992e7a3764902d121bc2
Validity
Not Before: Mar 1 07:00:36 2026 GMT
Not After : Mar 2 07:00:36 2026 GMT
Subject: CN=a7e98d38e7dfac06fc04ea9a2f14d3d216d0006f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:01:ee:20:89:98:6f:0e:0a:e0:04:3b:b1:0e:
07:fd:03:7d:65:ee:c7:70:58:88:7e:c4:7e:61:6d:
96:53:d3:95:46:11:f2:5d:0d:f3:64:4e:7b:af:0a:
09:b1:65:b1:39:f6:73:cf:35:be:d4:dd:98:79:35:
83:28:aa:f6:e9:e5:86:77:00:69:b1:f5:4f:02:2f:
36:06:11:aa:f2:d1:9d:e9:88:c4:fd:32:09:cd:2e:
2d:35:77:dc:27:0f:47:b7:d5:16:1b:0c:c6:b2:7a:
3b:02:d5:25:c0:93:92:84:01:41:54:c0:2d:91:d4:
78:60:b4:cd:c5:5c:21:31:5a:13:03:de:1c:20:64:
40:07:10:8f:4d:79:cc:44:6a:c1:0f:c2:70:e9:7a:
04:44:8d:2e:53:d9:26:c7:f3:d5:80:96:f0:6b:2f:
c2:a8:48:ff:14:20:76:83:13:41:8e:11:c5:9b:ab:
2e:47:df:41:a7:17:dc:16:7c:c2:01:3f:22:ee:1a:
5d:fa:f4:4c:be:54:6c:2f:51:51:74:4a:ba:1a:83:
e0:63:47:97:ef:20:4b:45:9b:46:a1:60:04:1d:3f:
6a:b7:3d:ad:88:7a:4c:dc:3d:b4:37:4a:9c:3d:e4:
7d:b5:b5:40:ed:7c:a9:e5:df:e0:29:2f:c3:49:2d:
65:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E9:8D:38:E7:DF:AC:06:FC:04:EA:9A:2F:14:D3:D2:16:D0:00:6F
X509v3 Authority Key Identifier:
keyid:E0:CA:79:5C:4B:5F:B3:C9:E7:DD:99:2E:7A:37:64:90:2D:12:1B:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7bb97f-6d3f-4607-8191-fd0a139c7f3d/1/4Mp5XEtfs8nn3ZkuejdkkC0SG8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:91:a9:d1:80:f3:13:b9:4a:76:ea:fc:42:18:37:c2:69:3b:
25:93:74:74:ec:4c:db:40:44:8d:f1:af:39:08:be:f3:19:17:
53:d7:ad:ab:1c:bb:00:50:96:bd:68:04:02:60:dd:ea:d0:d2:
0c:9b:90:ff:c7:11:b8:81:09:4d:40:67:ab:8f:09:db:33:3f:
fc:db:59:1e:8e:4a:eb:24:fb:5e:86:1b:17:7b:76:d0:9a:01:
f6:19:80:dc:e4:cf:a6:95:8f:49:7c:57:22:1f:c3:cc:a0:e8:
4f:08:49:55:4e:e0:a0:2e:5d:7b:12:02:19:e6:19:5e:80:7f:
09:a0:eb:09:a6:56:2c:2b:5f:c6:e4:20:5a:0a:cf:e8:9b:79:
0e:00:e0:b8:b5:9b:f5:27:f0:d9:c6:24:ad:6c:c2:d0:f8:92:
01:d2:0a:03:31:a5:a5:31:3f:21:3b:fa:25:0d:5f:9d:b8:69:
da:d1:d0:3f:42:68:5d:1c:6e:33:12:1b:e6:40:dd:e2:af:a6:
95:fd:92:de:ed:95:d5:51:bd:65:68:69:a5:1f:f2:9a:6c:7b:
41:8e:c2:0b:ea:eb:f5:bc:b9:77:08:d9:bd:1f:11:b4:bf:95:
55:c3:96:ba:70:ce:7e:07:84:49:44:b6:25:92:f6:49:4b:0f:
77:06:86:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:43:06 2026 by rpki-client