Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: EmqSF+/hb/3WPlOZH48w+rNrDvq1q6khMfERywDOS08=
Subject key identifier: 9E:1B:21:F3:50:4C:8F:ED:CB:1C:A5:BF:A6:72:DC:F4:AF:93:8B:1B
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 019CAD2239E65E714CCEC42721774478101B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 1346
Signing time: Mon 02 Mar 2026 06:00:27 +0000
Manifest this update: Mon 02 Mar 2026 06:00:27 +0000
Manifest next update: Tue 03 Mar 2026 06:00:27 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: VEkfTd6ZtI+JNmfX+IeFF93jMU10Qptqk1SP+W317tM=)
2: 5BcZMkFK4H4HzeU32Pg9Et5_SQ8.roa (hash: yDr7OimE93R5A5WQDfIWvLQYnSnCYBj7r4S1yWKb1hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:39:e6:5e:71:4c:ce:c4:27:21:77:44:78:10:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Mar 2 06:00:27 2026 GMT
Not After : Mar 3 06:00:27 2026 GMT
Subject: CN=9e1b21f3504c8fedcb1ca5bfa672dcf4af938b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:0f:77:50:fd:e5:10:7c:60:c6:ec:b7:a4:
a2:92:6a:b5:28:16:59:cf:65:b3:51:d7:1a:6e:38:
59:0e:33:61:78:26:31:9b:2f:6d:b4:e1:2b:b8:7e:
d6:f0:60:8d:e0:00:49:4b:fe:7b:1c:7a:35:23:5d:
1b:b7:17:cc:c0:95:2f:36:f6:00:67:75:8f:05:17:
78:7d:b2:23:be:f1:22:b1:21:91:ea:f7:02:be:e6:
8e:e2:ed:d1:c7:02:bb:8f:22:20:97:38:90:04:1b:
10:02:6d:13:d8:d4:73:f7:7d:f2:60:1a:75:e2:96:
c7:c6:92:17:db:51:9b:7e:62:c8:bd:33:b6:54:00:
dd:48:7b:29:6e:75:ee:c7:0f:f6:f1:f1:9e:6e:7b:
e6:03:38:1c:06:2f:f1:da:9e:50:63:cd:f1:0b:b4:
c0:bc:ac:bb:7d:b2:0e:8f:61:2a:d2:b8:1e:c6:6f:
56:dd:7f:a7:0f:d2:7b:20:c4:c6:6b:f8:be:52:65:
1c:4f:65:5d:c7:10:e4:1f:2f:d3:b7:87:d2:9d:02:
58:72:35:7c:53:3e:10:07:c0:64:9a:53:06:5e:42:
1d:89:c9:b6:29:3c:be:d8:e2:86:83:1e:01:60:db:
10:8c:11:af:a8:47:e3:e9:d3:9a:8d:17:6c:5d:b8:
8c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1B:21:F3:50:4C:8F:ED:CB:1C:A5:BF:A6:72:DC:F4:AF:93:8B:1B
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:8b:01:f9:42:b4:7c:c5:3d:42:12:1c:18:f6:00:23:c9:93:
75:86:b9:4d:9a:52:d5:e1:76:49:0e:3a:cd:0b:2b:4f:7b:4c:
7a:e1:95:0b:99:fb:44:08:68:f6:b5:49:2c:86:5b:4b:11:19:
9e:ec:57:5a:fd:53:1b:ee:d3:d8:3b:3e:88:b4:fa:af:75:ac:
d8:a0:fe:f4:1c:5b:ae:5d:8d:c6:8c:14:eb:e2:b1:77:b1:fa:
28:47:8f:89:a1:ac:2f:65:fa:48:49:ad:01:e1:72:36:f6:b2:
82:8d:4e:c1:e6:d4:25:3d:31:2d:de:e7:b3:e7:71:15:fb:77:
f4:4a:48:0f:a5:0d:df:c0:80:e7:3d:55:4d:46:98:7b:67:b6:
2b:37:8b:30:a5:d3:03:ff:76:50:e7:74:1e:5a:f9:3d:68:2c:
b8:ce:28:69:c4:51:7f:07:e3:69:e1:8b:2f:92:6d:0c:15:3e:
37:25:fd:5d:fd:eb:c5:73:8a:66:cd:f6:54:f7:99:0a:93:7d:
4e:ca:a5:3a:91:6b:f5:ba:74:ef:c7:09:a4:77:dc:44:01:a8:
94:80:c8:37:97:c0:bf:f6:b3:d2:e0:f9:93:64:a3:81:a8:2a:
92:27:38:66:0b:bf:72:b8:09:22:9c:1f:40:c8:9c:22:41:76:
90:e5:dc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:56 2026 by rpki-client