Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
File: 4Uk5uDWV4u-2lFa83yOGalB59vU.mft (raw, json)
Hash identifier: BoCMTTiFHxKaUIZv60UPX66GVQW9TfzqVp1y63yZt54=
Subject key identifier: 1A:88:A0:A7:38:81:DE:E1:68:7A:8B:89:58:3C:DC:05:2B:8C:90:E6
Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
Certificate issuer: /CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Certificate serial: 019CAD5962EFD9857344986DB306A83E3B7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
Manifest number: 184A
Signing time: Mon 02 Mar 2026 07:00:42 +0000
Manifest this update: Mon 02 Mar 2026 07:00:42 +0000
Manifest next update: Tue 03 Mar 2026 07:00:42 +0000
Files and hashes: 1: 4Uk5uDWV4u-2lFa83yOGalB59vU.crl (hash: AOmgbjPClBWnBQMr7xNb0IXzUppPbza9DsfBTzifiuY=)
2: AFD3LN3IxTOKfmEYuxEuR7wUjPc.roa (hash: 3fx4frrKprBnR59Ru38Fa8S145quoaM9IAirxeo8gyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:62:ef:d9:85:73:44:98:6d:b3:06:a8:3e:3b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Validity
Not Before: Mar 2 07:00:42 2026 GMT
Not After : Mar 3 07:00:42 2026 GMT
Subject: CN=1a88a0a73881dee1687a8b89583cdc052b8c90e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c4:9e:31:da:f2:da:81:fc:0e:1d:21:19:5f:
b0:42:4f:32:ff:7e:23:fe:61:97:a9:09:42:56:2e:
eb:d5:1b:9d:35:9d:b4:33:ad:c5:f6:be:59:2f:00:
ee:f7:0b:ef:85:2e:6a:2c:e4:6d:ff:6f:66:5e:25:
1e:80:9b:2f:d9:50:51:2a:76:f3:9f:e0:6c:70:c6:
4c:35:75:d0:b9:41:eb:c9:12:74:92:d6:4b:6d:73:
6b:4a:9a:0b:7d:5e:f2:62:76:ef:81:66:09:c9:53:
59:77:9f:9e:ac:80:f6:a2:ab:92:a4:02:db:00:49:
e2:02:bd:fd:ff:b2:35:73:22:32:57:c7:0c:3d:a6:
74:5c:3c:6f:65:78:94:34:da:e2:f8:6e:7e:67:69:
c0:a1:f2:37:7b:3d:44:6e:b0:38:f6:2c:fb:50:a3:
94:e0:bc:7c:48:bc:fd:65:7d:4b:6e:3a:d2:ab:a2:
d6:72:57:df:28:34:b4:29:cb:ee:08:02:dc:82:3d:
49:a5:31:79:74:6b:94:06:3b:38:e5:ce:70:bd:73:
98:65:d2:1a:0f:97:3a:fa:20:0a:7d:91:bd:c7:e3:
54:05:57:42:9c:a6:4e:a5:fc:41:5d:67:a4:dc:e7:
32:46:50:bd:38:12:a1:d2:86:aa:6d:ce:92:7b:c9:
9b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:88:A0:A7:38:81:DE:E1:68:7A:8B:89:58:3C:DC:05:2B:8C:90:E6
X509v3 Authority Key Identifier:
keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cb:88:64:b8:f3:87:36:04:37:7b:1c:81:58:05:47:4d:52:
39:2c:09:df:08:aa:05:35:cb:7c:ba:ce:05:16:a3:f8:cd:cd:
90:5d:ec:bf:53:76:5b:70:4a:4a:3d:35:03:0a:3a:c1:d1:dd:
e4:29:26:4a:42:88:99:d1:fc:16:28:61:6e:40:0a:38:a9:bc:
aa:22:bd:db:82:ee:e5:5f:0b:67:45:92:34:3b:93:cb:17:ae:
03:45:f0:40:9e:53:e2:dc:bf:ae:88:02:7c:d4:2a:e5:8b:b8:
37:3a:43:c5:4e:b0:02:ce:53:d2:d8:22:51:e1:e6:aa:e4:f0:
e3:7b:bd:3e:a1:27:35:ec:91:08:24:8b:1c:91:1f:90:24:73:
99:ee:c6:6b:1b:3d:a2:31:35:84:5a:f6:e2:77:53:db:af:4e:
59:cc:13:72:c2:d8:d3:72:e8:2f:ae:a8:d0:f5:4d:14:9f:a4:
95:1f:cc:81:d3:e7:7f:d2:60:dc:0f:7a:23:11:54:fd:96:ee:
64:19:cf:d5:a4:a5:d2:5a:79:56:bd:ff:f2:77:19:d8:46:7f:
18:89:73:46:1d:89:41:78:b3:8d:06:d9:6a:cc:85:bf:03:16:
1a:e4:8e:b6:f9:21:8a:3e:71:ef:7e:bb:8b:96:9c:30:9b:58:
dd:f6:8d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:21 2026 by rpki-client