Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft
File: 4336E008jUaNzls3Q1-Z4yPa4Og.mft (raw, json)
Hash identifier: YfcgdoRqmjJUkY5XuM4B/jmtqbOh2mv+UY/XM6jTelQ=
Subject key identifier: 02:40:4A:A8:C0:4A:0D:F4:78:53:7C:AB:96:D7:2F:37:62:AB:E0:11
Authority key identifier: E3:7D:FA:13:4D:3C:8D:46:8D:CE:5B:37:43:5F:99:E3:23:DA:E0:E8
Certificate issuer: /CN=e37dfa134d3c8d468dce5b37435f99e323dae0e8
Certificate serial: 019CADC8026C9CE8DB773C452C446EBA5772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft
Manifest number: DF
Signing time: Mon 02 Mar 2026 09:01:32 +0000
Manifest this update: Mon 02 Mar 2026 09:01:32 +0000
Manifest next update: Tue 03 Mar 2026 09:01:32 +0000
Files and hashes: 1: 4336E008jUaNzls3Q1-Z4yPa4Og.crl (hash: Sdpi528B6j7guQMQdVEQpjTSOcvaDwJIFZGbKK+xdB4=)
2: FRuRXxuNQm-JvyXERoW5thoxpcA.roa (hash: hsEvgyVR3TbSFnQqvOe0YaHjtr8cJR2KhsCKJEMysHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:02:6c:9c:e8:db:77:3c:45:2c:44:6e:ba:57:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e37dfa134d3c8d468dce5b37435f99e323dae0e8
Validity
Not Before: Mar 2 09:01:32 2026 GMT
Not After : Mar 3 09:01:32 2026 GMT
Subject: CN=02404aa8c04a0df478537cab96d72f3762abe011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:1f:7e:9a:e0:4a:f1:6c:6b:5b:8d:bd:2a:b2:
42:f8:62:9e:e1:95:3f:72:08:72:dd:51:cd:72:37:
ff:65:5e:01:76:f1:8c:80:ea:3a:b9:69:62:19:fc:
94:ca:67:e5:b8:b0:b8:dc:29:eb:e6:5e:b2:e9:f4:
32:a1:6d:ee:e3:ad:64:13:cc:1c:11:e1:c5:ac:de:
4d:c4:3f:13:32:40:24:64:05:bd:3f:d5:cd:e9:6b:
26:01:ac:04:a9:f4:b9:01:d9:ad:ad:b1:32:f6:cb:
11:a9:4c:fe:1e:4d:e2:c2:b2:0c:f3:06:30:83:d0:
48:fa:4a:21:7e:85:cc:cf:6c:df:3b:3e:f3:ac:9a:
e5:dc:14:4c:3f:e7:9f:e1:76:7c:72:a0:b3:a3:88:
91:b2:e1:6c:90:b9:49:ac:57:39:79:ea:33:a5:6e:
0e:ca:c4:85:e1:f7:c2:ea:5c:38:2a:74:16:20:62:
80:82:28:fd:ec:99:db:c0:a4:3f:1b:6b:65:52:2d:
c9:1f:90:79:ef:1a:6a:55:9c:34:67:f7:96:91:12:
b2:43:ba:d1:5d:4f:cb:18:b7:ca:bd:8b:78:b1:c7:
0d:e3:ca:cd:b6:f1:23:0a:48:1e:bc:d5:96:16:3e:
27:6d:a1:04:13:20:df:03:e2:1c:8f:c3:12:ed:48:
ee:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:40:4A:A8:C0:4A:0D:F4:78:53:7C:AB:96:D7:2F:37:62:AB:E0:11
X509v3 Authority Key Identifier:
keyid:E3:7D:FA:13:4D:3C:8D:46:8D:CE:5B:37:43:5F:99:E3:23:DA:E0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4336E008jUaNzls3Q1-Z4yPa4Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c1b447-4352-4fd1-9c27-5f4a70712c23/1/4336E008jUaNzls3Q1-Z4yPa4Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:55:0f:d6:ef:5a:e0:50:a6:93:36:46:d5:a0:59:2a:fc:7c:
f2:8c:bc:9b:12:7b:07:69:a5:6e:26:31:8c:8e:b6:48:af:bf:
56:a3:c7:bc:28:05:84:34:b8:c2:59:bf:c1:d6:29:59:b3:46:
ce:84:3e:4f:ef:36:07:e5:87:b8:f2:bf:2a:39:d0:45:5f:d8:
20:f3:27:fd:d1:da:ac:e9:0f:dd:00:8b:6c:38:4b:bf:1a:29:
99:dd:8c:f2:9c:35:13:89:09:32:c5:40:bc:65:dd:29:78:b7:
c2:5d:1e:75:fe:70:fd:4e:4a:5f:f0:42:1c:a6:6f:82:8a:c4:
92:4c:81:71:3c:05:f4:dd:50:1c:cc:3b:f4:6b:48:01:2a:de:
9f:57:b2:1a:1d:18:35:3c:1e:cb:06:d1:d5:ae:8f:63:e3:f9:
c8:71:20:27:df:d6:9b:6c:ca:b8:f2:03:13:35:85:a7:b0:93:
eb:0c:af:bc:28:a0:6e:7d:5f:92:f1:33:09:96:8e:30:4b:c3:
cf:e1:e9:89:67:78:b6:dc:38:db:dd:c1:86:7f:e1:a5:38:ce:
fc:2d:49:ef:ec:c4:5c:79:66:5b:8c:d8:73:bd:a9:90:34:95:
32:a6:19:b0:be:4d:2d:e5:aa:b5:fb:0c:fb:22:95:00:15:98:
9f:8e:11:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:42:26 2026 by rpki-client