Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier: ubxl1z26a9lwJkX2elilFvtUm7cvAtOB0Nqi+oU2a8o=
Subject key identifier: 05:FB:FF:5E:1A:B9:7F:A2:B3:EA:D1:D7:2E:DC:66:79:DE:34:D1:9A
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 019CAC475C11312C0C038D47EE84AEBD145F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number: 0CEB
Signing time: Mon 02 Mar 2026 02:01:23 +0000
Manifest this update: Mon 02 Mar 2026 02:01:23 +0000
Manifest next update: Tue 03 Mar 2026 02:01:23 +0000
Files and hashes: 1: 2mbNbpusYk6iw7nI_ZoVXkx25Kk.roa (hash: jECrA0GxGXQNN5tkvnTh0W3htAuhM6FaT6MhUte5d2Q=)
2: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: FWI2ER4w6o6TuVmpq7PK5wv5sA2ERRueVQRxrBOFFoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:5c:11:31:2c:0c:03:8d:47:ee:84:ae:bd:14:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Mar 2 02:01:23 2026 GMT
Not After : Mar 3 02:01:23 2026 GMT
Subject: CN=05fbff5e1ab97fa2b3ead1d72edc6679de34d19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2b:9b:4c:01:76:6c:b3:61:54:93:46:cd:86:
2e:25:f1:29:9d:72:ff:61:cf:88:5c:16:49:09:99:
38:02:a7:cc:31:a6:02:db:9c:e6:12:1d:e9:fe:45:
69:1e:70:fe:06:4c:a4:f3:95:71:b2:de:55:76:8f:
a4:88:4f:88:8b:4b:99:ab:d8:b8:bd:a1:1f:51:22:
71:3f:fa:20:26:3b:91:71:34:24:49:17:d6:d0:79:
e8:83:21:b1:d6:dc:33:48:19:2c:ab:22:05:b8:b4:
ad:5e:02:48:c4:6b:a2:2e:33:85:68:67:ad:ee:d1:
84:37:ad:82:20:5a:68:81:a9:b6:e1:e4:f2:9e:5c:
30:05:67:20:ab:9f:3a:71:29:41:7c:ee:e8:b1:d3:
d4:71:d0:9a:0f:d2:ce:ad:e8:aa:fd:4d:cf:fb:66:
cc:04:57:df:b5:6b:19:00:37:ae:0e:ec:6e:46:40:
97:ae:a0:58:61:25:96:0d:89:08:c8:26:b3:e1:02:
fc:98:28:af:1f:99:79:95:04:f4:53:8f:9b:a6:fc:
cb:59:be:6c:3b:42:86:9e:82:ac:cb:a7:5a:80:f9:
52:42:55:0f:bc:d7:e2:e3:00:b3:bf:05:b1:31:de:
fe:0d:38:80:8b:87:2f:a8:cb:44:ad:3b:33:32:45:
fd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FB:FF:5E:1A:B9:7F:A2:B3:EA:D1:D7:2E:DC:66:79:DE:34:D1:9A
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:95:09:4a:d2:7e:b8:af:f6:93:48:55:41:7b:c3:36:c3:3f:
07:17:e0:db:72:9f:c5:01:56:6d:99:9d:3f:d1:b5:2a:be:c6:
f2:df:1f:48:0e:53:2f:cd:7d:43:61:4f:9b:6f:e1:fc:a4:4a:
80:0d:a5:ec:fa:d5:66:8c:fa:25:b1:d4:d6:2a:c4:ef:a2:94:
9b:8c:cd:54:c0:01:2e:35:a6:2b:10:58:1b:85:86:e3:f4:6a:
65:96:19:2b:f5:f3:e8:ac:99:7e:ab:f8:fe:f6:42:4c:72:49:
19:44:12:f7:31:45:dd:5f:dc:95:66:fa:51:8c:14:32:25:53:
46:ea:0b:5d:e8:6a:6d:6a:79:15:13:2f:e8:cb:2e:fc:a4:c4:
62:59:db:35:a9:61:58:a9:9a:ef:72:3c:16:2f:de:1e:97:20:
5b:de:7c:9c:74:14:31:8a:24:84:d8:24:8e:c7:79:95:f8:6b:
34:15:78:73:53:44:f2:da:aa:65:7c:d2:eb:83:db:0b:4a:f8:
3d:d4:42:60:50:8c:f5:02:9f:38:03:1f:4f:8f:1a:b7:a6:ca:
bf:32:95:57:95:e4:d7:46:de:2b:01:f8:67:ed:be:1a:28:a5:
ed:76:85:f6:c8:35:39:6e:25:db:e7:94:c5:4c:df:82:49:77:
b1:23:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:29 2026 by rpki-client