Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
File: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft (raw, json)
Hash identifier: X+nt6VsfwcnaHsifaedhyxSJdYH3n7AA4+LJY0JU1CM=
Subject key identifier: AE:5A:C2:EC:17:C0:87:28:6A:B8:BE:9C:9A:CD:5E:92:37:6F:A1:26
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Certificate issuer: /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial: 019CABD948078580E0E9F8BEDBF427972DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
Manifest number: 1115
Signing time: Mon 02 Mar 2026 00:01:09 +0000
Manifest this update: Mon 02 Mar 2026 00:01:09 +0000
Manifest next update: Tue 03 Mar 2026 00:01:09 +0000
Files and hashes: 1: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl (hash: pYLhQm1hWDIQojdQoaYlnsLm+2mnCMR1P8qQemC0Odo=)
2: DN7ZfyoDKyJXUkj1EC6pJ1I4DkQ.roa (hash: bY5wbQ98GBM8x3W74YxZg+qztKUip/POgTeTbjHHMZI=)
3: p6fcvhDFcw8Oq1fwe3BO8PpHz3U.roa (hash: 9OCWuqN8cdwaFpWbH6S/GLnMMyvjYjVk46dDsDdpR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:48:07:85:80:e0:e9:f8:be:db:f4:27:97:2d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
Validity
Not Before: Mar 2 00:01:09 2026 GMT
Not After : Mar 3 00:01:09 2026 GMT
Subject: CN=ae5ac2ec17c087286ab8be9c9acd5e92376fa126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:83:db:0a:a9:51:17:18:3b:b7:3f:3a:2f:
6f:7f:ba:87:a2:5e:1d:24:41:f7:0d:23:6d:6d:7a:
03:43:b0:19:ab:20:08:76:3a:0d:5b:1c:e7:79:90:
65:76:f5:4b:8a:e4:e0:35:21:8b:55:73:b2:b0:a5:
ad:a0:47:52:ff:78:b7:65:e6:0f:e0:46:fe:5c:5e:
09:f8:99:7d:15:3a:48:a3:00:11:18:6e:d5:bd:be:
50:1a:04:13:3c:45:e2:ff:47:7b:77:22:f6:98:71:
33:e4:fc:0b:6b:62:5e:a4:d9:fa:3c:af:d1:5a:40:
9d:4d:d2:ac:d3:0c:bf:f9:8f:73:3e:d5:01:c5:ed:
0f:9c:f3:ee:57:be:84:e5:f3:a4:44:f6:15:24:3e:
57:8f:6a:e2:b5:d1:de:19:2b:36:8a:19:cf:29:6f:
b8:4c:d6:38:6f:55:e3:38:c9:cb:d8:69:64:81:ba:
32:c4:59:a4:68:84:8d:8e:14:eb:60:83:72:be:47:
30:a3:39:60:b8:07:ac:1b:c9:e2:25:69:39:66:32:
0b:c6:70:2b:40:f7:54:6b:fd:a6:99:d0:db:4a:30:
7f:23:69:56:10:e4:60:48:a7:f1:36:34:c8:6a:aa:
65:48:30:7a:a1:4c:03:31:20:92:90:89:35:25:b4:
42:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5A:C2:EC:17:C0:87:28:6A:B8:BE:9C:9A:CD:5E:92:37:6F:A1:26
X509v3 Authority Key Identifier:
keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:ad:06:28:e5:7a:76:45:c2:32:70:24:46:4f:52:bb:bd:54:
ab:29:ad:70:70:b0:da:d4:a2:ac:0b:1e:56:81:2d:49:66:f1:
4c:6f:1c:95:cb:81:0a:0b:4d:07:24:3e:3b:61:c8:5c:90:78:
09:2a:4a:de:1c:f0:ca:6e:f6:ba:9c:96:e9:f9:c5:cc:4f:71:
f6:d4:d7:d7:2d:34:58:9f:01:fb:e0:bb:ff:2f:2d:31:f1:19:
6b:24:3c:25:74:1d:30:d6:aa:9f:b7:21:8f:5f:22:84:fd:92:
8c:56:b5:f0:02:17:30:8e:f6:55:38:5d:6b:2f:b7:37:23:ad:
12:0d:04:8f:25:9c:7a:63:a4:f2:9a:22:b7:e2:3d:4e:83:e2:
6a:73:00:a9:d4:15:d0:5a:c7:e6:68:6e:1e:fd:cc:20:17:72:
14:2e:91:10:f3:62:ff:86:23:fa:b6:8b:0e:f2:63:a5:72:86:
ac:8c:cf:0e:1a:76:ba:ba:28:3e:c3:d7:c2:6b:48:0d:1c:0a:
31:7e:0c:63:be:e5:31:62:96:ce:2a:9f:c7:41:a8:d4:72:85:
8a:5e:83:62:9e:22:fd:00:80:1e:f5:3b:44:d7:3b:19:d9:ab:
b1:76:b8:62:ac:94:65:3d:65:9b:e4:42:95:f8:45:22:38:98:
d2:9b:85:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:38 2026 by rpki-client