Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: UMYVRP9L52S6fAZrxmnyNiUp8opdmawsqrRN/VQ9nno=
Subject key identifier: CE:6D:E9:BE:27:1A:68:E1:61:DA:53:88:61:4B:93:6B:0C:48:C6:28
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 019CAF7F338E2D99BE19970C7F0C1DA6C493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 1157
Signing time: Mon 02 Mar 2026 17:01:14 +0000
Manifest this update: Mon 02 Mar 2026 17:01:14 +0000
Manifest next update: Tue 03 Mar 2026 17:01:14 +0000
Files and hashes: 1: Br3g91W4evf2A8FX4-nPHSqH7Oc.roa (hash: gTgHpNU+s78J1A+sPr7pjfV/Fs0kKMeRldiNIgByjo4=)
2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: BahPPe7wgdVZB24n3XIRTU5dPhi7FEkkzwhUT7Iivro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7f:33:8e:2d:99:be:19:97:0c:7f:0c:1d:a6:c4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Mar 2 17:01:14 2026 GMT
Not After : Mar 3 17:01:14 2026 GMT
Subject: CN=ce6de9be271a68e161da5388614b936b0c48c628
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a0:f9:a5:23:c3:0d:84:a7:9e:c3:22:11:cd:
ee:cf:1f:57:89:1d:7b:e1:fc:cb:65:b8:4b:1a:0b:
9c:5b:77:5c:65:66:9d:47:1d:45:28:1e:d6:31:7e:
f1:b0:75:55:47:bb:8b:86:19:59:2e:94:49:ba:92:
33:8a:24:2b:22:87:42:c0:3e:97:42:fe:e1:87:63:
f0:4b:b0:f8:c0:c0:61:cd:f6:64:83:41:67:44:fd:
dc:de:6c:69:fd:a7:76:a1:4b:c8:12:a6:89:43:d2:
ae:6e:94:a5:dc:60:d3:f8:b4:9f:c2:86:ef:b7:3c:
eb:9c:80:7c:3d:63:95:fe:78:51:b0:2d:a3:95:88:
04:21:ed:ed:dd:22:5b:c3:0f:7f:23:d6:99:73:bc:
98:ea:7a:ca:a0:94:f0:63:97:49:92:7e:16:aa:f6:
6a:ef:95:06:50:7a:2a:42:70:ac:8b:99:c5:64:0e:
ec:42:b1:1e:fb:24:dd:ff:73:c8:44:f9:4e:ff:ec:
8c:3e:b8:bf:23:7a:5c:74:15:a7:db:70:9a:4c:18:
d7:91:28:53:88:6f:b9:31:87:07:98:29:2d:de:d5:
68:da:bf:c2:e6:92:31:0c:6b:b7:8b:47:35:62:bf:
3c:67:7d:f3:ff:49:ee:4b:81:a4:23:2c:ec:81:bb:
7a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6D:E9:BE:27:1A:68:E1:61:DA:53:88:61:4B:93:6B:0C:48:C6:28
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:f4:f0:c8:d6:40:f9:d3:6c:68:4c:98:c6:5f:bd:29:0b:d8:
2c:3b:cc:75:6d:b7:ba:80:19:eb:3a:8f:e9:36:90:fa:43:a7:
91:67:14:21:39:9a:6e:f7:a0:b8:5c:81:5f:2a:d3:6c:55:1f:
d7:ed:da:c2:b5:63:25:d4:d5:4e:b8:6b:95:f3:65:a9:9e:78:
c7:53:7f:cf:24:08:e2:b0:a8:ba:88:e0:20:8b:f4:12:a9:d3:
56:6c:ca:2f:b9:aa:00:cd:5e:76:33:b7:e8:d2:71:e4:ef:80:
bd:5d:14:bf:38:63:16:59:8c:b3:df:38:fa:fb:43:7f:84:cb:
0c:3d:76:69:f5:f9:ad:df:d3:c4:3f:0a:09:96:2a:cb:3a:d1:
51:ff:00:b6:66:82:52:26:7a:b6:94:a2:7e:ad:d3:e8:85:d6:
77:dd:fd:63:ed:9c:ef:48:f6:3a:84:1c:19:78:f4:83:4e:85:
5a:32:fd:0e:e3:6b:e9:7f:b5:f7:87:48:c5:6f:20:f3:1e:00:
22:5d:51:6d:df:28:d1:25:98:3e:2f:29:36:f8:e0:dc:b7:7b:
cf:ab:13:f7:29:ac:ce:a8:c0:e8:2d:33:9d:2b:58:62:75:7a:
42:0f:52:4a:cd:10:a2:e7:47:42:0f:aa:6c:94:41:45:3e:4e:
7d:28:d5:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:04 2026 by rpki-client