Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
File: 4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json)
Hash identifier: fcGTk1/aW6ZEV1ZdUVcK0nRLuCRCn92BCQ/igmD2e08=
Subject key identifier: A1:9A:2B:BC:36:21:EA:D5:4D:74:A9:03:74:03:73:18:1E:56:17:58
Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
Certificate issuer: /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Certificate serial: 019CABD9EBD308A07D81F2E4A6BA4D23B554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
Manifest number: 1842
Signing time: Mon 02 Mar 2026 00:01:51 +0000
Manifest this update: Mon 02 Mar 2026 00:01:51 +0000
Manifest next update: Tue 03 Mar 2026 00:01:51 +0000
Files and hashes: 1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: /6ysRl+USgiINJC01/162Urzpy4aHObRvIttvXTJr/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:eb:d3:08:a0:7d:81:f2:e4:a6:ba:4d:23:b5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Validity
Not Before: Mar 2 00:01:51 2026 GMT
Not After : Mar 3 00:01:51 2026 GMT
Subject: CN=a19a2bbc3621ead54d74a903740373181e561758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8e:38:d1:d8:18:8c:ad:f9:0a:13:ad:01:1d:
da:95:3e:92:73:e4:8b:7f:3d:67:cb:c4:47:ee:6e:
34:8b:a0:4d:08:8e:88:0a:cb:33:2c:1f:7a:4b:f1:
fe:a6:1a:2a:8c:b3:18:ea:d2:70:b1:2c:a1:76:a5:
d1:51:f0:6f:b6:05:88:1b:ca:0c:1f:8f:d6:26:16:
5b:88:57:7b:ae:ce:0e:5e:0f:31:79:ff:68:46:90:
36:05:50:01:dc:ab:78:64:b6:b9:dc:d8:61:86:ee:
c2:e2:2b:d6:e1:76:c6:95:b3:75:f9:86:3f:03:01:
ea:0a:7a:f9:35:07:41:7b:65:22:5c:0c:8a:69:be:
3c:66:a5:a4:a7:4b:87:da:de:e3:65:b5:e0:9e:40:
8c:44:dc:79:c3:b5:f9:ad:1b:b5:48:68:a7:cf:5f:
31:47:bc:b8:af:de:85:63:dd:5c:f6:c8:5b:41:73:
47:35:53:01:02:60:f9:77:30:5c:70:eb:20:f4:c9:
93:99:cf:20:c7:c6:5e:77:9c:de:eb:53:c6:87:ba:
5f:19:eb:3e:a9:c1:7a:7f:39:da:3a:4d:a9:71:aa:
28:3a:1d:39:af:c3:a2:76:01:b4:26:3c:f3:1f:d2:
d6:c9:f0:5b:33:38:fe:46:83:e4:8f:3c:2d:55:f7:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9A:2B:BC:36:21:EA:D5:4D:74:A9:03:74:03:73:18:1E:56:17:58
X509v3 Authority Key Identifier:
keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:94:5f:1f:5f:e4:3d:97:13:22:67:e7:95:e1:27:c7:46:9e:
e4:26:d2:c5:6a:d4:c2:f5:cb:da:f8:0e:e8:8a:06:5f:9b:23:
69:d1:81:3c:cf:8d:f8:1b:1d:30:2b:4f:3f:ab:e9:82:9f:84:
4f:1b:83:f3:fa:22:e5:b9:28:18:76:f9:49:59:d2:ee:4c:f7:
98:1c:ea:95:16:2d:23:d6:d0:ab:fa:29:f9:c3:78:13:58:a2:
35:47:e2:88:11:d3:b8:7b:3b:6d:cf:a6:74:e9:f0:de:5b:4a:
02:b0:ce:f8:4e:32:7d:8b:a9:25:55:08:c1:b9:d0:61:0c:1c:
f0:62:ef:62:76:65:76:3a:37:65:fa:fa:78:f8:d7:01:67:f1:
99:b7:68:e9:39:d7:be:47:ba:88:6b:1f:e8:bd:56:ad:19:19:
16:f5:f5:98:cb:63:3d:b6:15:4a:c5:6f:0a:e1:dd:0e:fe:54:
b8:d4:be:e4:c7:8c:16:49:e8:bf:bb:f6:0a:90:b4:cb:2f:c1:
66:f1:fa:23:f5:db:80:1f:08:79:db:54:eb:3a:be:e9:45:42:
72:eb:0c:d8:20:75:8b:81:1e:e7:92:f9:e8:c4:69:66:a8:44:
a8:8c:20:ee:89:26:97:30:64:36:1a:23:a1:18:51:95:4e:63:
d9:f0:43:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:25:40 2026 by rpki-client