Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: QmQoA/SAltHevO8tUnZLVxv6iOrOIhtoouXD3LUSpbA=
Subject key identifier: 3F:4D:CB:07:1D:70:4A:DA:9A:CB:8B:8F:98:A6:95:B8:8A:3A:62:82
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 019CAAFD36B80D1C48DDF206B4BEAA3AC7F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 0631
Signing time: Sun 01 Mar 2026 20:00:47 +0000
Manifest this update: Sun 01 Mar 2026 20:00:47 +0000
Manifest next update: Mon 02 Mar 2026 20:00:47 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: sug2hEeIiGyMahWIEdi8TKKsjHQpHoV7lF/lA2qGlyY=)
2: jm7CLkDkWjLyx0drk5u0jmFrhNY.roa (hash: ammB/HZj8/N3/UAaLNlwGxNZkAQiwMa1PgzKQkDpB6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:36:b8:0d:1c:48:dd:f2:06:b4:be:aa:3a:c7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Mar 1 20:00:47 2026 GMT
Not After : Mar 2 20:00:47 2026 GMT
Subject: CN=3f4dcb071d704ada9acb8b8f98a695b88a3a6282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:cf:ba:1b:69:50:47:7d:35:84:66:11:c3:
0b:66:aa:43:c7:40:79:2e:18:1b:a5:32:78:26:6a:
84:d7:d2:64:b0:32:0b:04:50:e7:23:98:49:2d:28:
3e:1d:a8:ea:29:02:f2:c2:e1:c0:0e:89:49:8d:bd:
8d:52:5d:63:44:b1:50:7c:1b:63:66:22:bc:ac:d5:
73:90:bb:a4:29:ca:1a:75:48:62:a7:6e:c2:07:61:
c6:ad:26:3b:bf:c0:4b:71:03:a4:bd:e0:4d:9a:50:
0c:a0:05:50:da:27:c1:4b:ca:4d:ad:da:25:c8:ed:
0e:b2:72:a5:1b:f9:af:37:76:9f:0a:a3:38:ac:28:
fe:a6:3b:ec:ce:98:07:df:1e:c7:54:61:9c:fd:48:
81:79:6f:c4:54:e2:7d:c4:d7:f1:d1:09:85:fc:de:
b9:d1:d5:01:7b:bc:0f:bc:c4:22:d1:ef:13:90:2e:
9f:39:dd:0c:c5:0b:64:17:36:ef:c1:89:b3:23:1a:
c0:22:ab:02:0b:e5:37:19:2c:38:23:17:22:6d:26:
d9:4a:55:1d:0c:d5:36:e4:1c:77:74:e7:e7:0f:a2:
81:f7:19:6b:01:b8:d8:32:95:2a:da:97:7b:3c:2d:
b8:5e:e5:96:32:81:9e:58:84:03:a0:73:20:8e:aa:
22:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4D:CB:07:1D:70:4A:DA:9A:CB:8B:8F:98:A6:95:B8:8A:3A:62:82
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:65:08:eb:e9:e1:41:e8:a0:04:2c:e1:a7:42:c0:27:cf:97:
d1:e7:8f:e1:4c:9f:53:6c:5b:10:6d:70:2f:3c:e8:01:ce:59:
df:6b:d2:d7:29:fc:47:17:67:a6:41:f8:a1:44:26:de:ba:8b:
a9:c6:b0:25:a0:10:9b:73:b3:26:17:dd:c1:e4:23:d1:b3:f6:
c5:d2:5a:c5:f3:06:10:39:ff:5e:60:2a:15:18:95:6d:ca:c5:
3f:fd:24:22:ec:96:dd:0a:6f:55:4d:69:0e:ec:b1:8c:09:00:
6c:3e:df:a7:94:ba:77:31:f3:77:d6:f6:8c:f8:61:f6:b7:47:
f0:8e:52:ed:0f:55:58:c8:aa:f7:16:2c:eb:9e:5e:6a:ba:8a:
d1:c9:d3:15:23:76:04:68:84:81:04:00:18:b4:9d:38:3d:45:
e0:fa:92:1d:12:2d:a7:c2:fc:f2:f7:58:81:b1:24:ca:a5:1c:
a6:1c:8e:7c:9d:db:69:fe:3f:b9:57:ed:a7:be:6f:da:38:55:
e1:38:8c:95:38:cb:22:8e:29:cd:f7:d7:3d:a9:01:48:58:04:
78:7a:a9:20:be:a7:44:30:e2:fa:87:27:c5:e5:6b:2e:d0:41:
78:3a:c6:0f:6e:2b:48:d0:06:53:3f:e2:af:0b:ae:f3:2d:41:
31:0a:4f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:52 2026 by rpki-client