Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
File: s4-3-dr7t_J8ZSqEbTf7nimODho.mft (raw, json)
Hash identifier: 6AElk5GQePfy/aZm71eE5lUnIT2giDdkGgvOaqZAt10=
Subject key identifier: 19:2E:59:40:CB:87:DF:4D:3B:48:A5:38:6A:3C:81:B3:13:36:5A:6F
Authority key identifier: B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A
Certificate issuer: /CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a
Certificate serial: 019D38661A2D9E3FB978E31C770B9130BD44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
Manifest number: 0306
Signing time: Sun 29 Mar 2026 07:01:48 +0000
Manifest this update: Sun 29 Mar 2026 07:01:48 +0000
Manifest next update: Mon 30 Mar 2026 07:01:48 +0000
Files and hashes: 1: s4-3-dr7t_J8ZSqEbTf7nimODho.crl (hash: jYpyKSOGN5zowe+JwRy1++gZly1gMnry8JrD7F0uQxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1a:2d:9e:3f:b9:78:e3:1c:77:0b:91:30:bd:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38fb7f9dafbb7f27c652a846d37fb9e298e0e1a
Validity
Not Before: Mar 29 07:01:48 2026 GMT
Not After : Mar 30 07:01:48 2026 GMT
Subject: CN=192e5940cb87df4d3b48a5386a3c81b313365a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c5:5a:8b:83:b2:6e:d0:21:06:2c:cf:6e:a7:
8d:04:ad:ef:71:85:6a:07:f8:96:e9:93:61:17:3d:
db:d3:ae:29:12:02:7a:30:31:63:b2:1e:fc:ea:93:
03:1a:c6:52:f1:b9:f9:41:c8:85:12:d8:ed:37:ff:
ed:33:ee:b3:03:63:f8:0b:6e:b0:87:e0:10:ef:b0:
3f:cc:d1:cd:4a:7d:a4:4c:92:9e:81:4f:1a:f7:55:
55:cb:aa:9c:42:a7:ce:de:02:15:7b:15:d5:f1:ea:
54:e0:83:9d:fa:c0:a9:75:00:a5:47:55:20:e1:78:
9d:7c:e4:6f:30:34:9c:de:41:1e:ce:af:62:84:14:
62:07:b1:29:94:b5:7f:2c:da:d1:af:ad:57:cc:96:
96:30:1e:3a:9c:25:9b:fb:92:7d:0f:92:1e:88:03:
da:e1:f2:38:31:9b:24:22:45:50:ed:e8:e5:fa:9a:
30:f8:a3:a1:93:01:84:28:14:2a:1e:af:23:a8:8c:
9b:67:c8:60:37:e9:1d:23:36:a6:19:cf:ca:06:75:
55:7e:5a:6e:0f:12:66:6f:da:98:7c:f0:a5:bb:a3:
dd:80:3f:a4:3c:54:db:5d:fe:e4:4c:d6:87:36:8c:
c9:1b:61:62:82:41:6a:f3:9a:f0:58:bb:70:cc:69:
15:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:2E:59:40:CB:87:DF:4D:3B:48:A5:38:6A:3C:81:B3:13:36:5A:6F
X509v3 Authority Key Identifier:
keyid:B3:8F:B7:F9:DA:FB:B7:F2:7C:65:2A:84:6D:37:FB:9E:29:8E:0E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4-3-dr7t_J8ZSqEbTf7nimODho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a6c6ee-4260-4f11-b218-dc1afb0f7f19/1/s4-3-dr7t_J8ZSqEbTf7nimODho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:a2:4a:eb:bd:2b:e6:3c:73:4e:60:4f:e5:81:09:89:f9:cd:
00:03:45:8b:fb:55:d3:04:63:ab:2c:dc:eb:83:dc:bf:fa:4f:
30:cb:22:86:ab:b8:da:65:15:fa:2a:3b:29:b7:33:44:5f:0e:
6f:83:c8:2b:d4:1a:d7:91:3b:4e:7e:d8:69:de:b6:f7:69:73:
83:ca:85:c1:e0:1e:43:a9:62:05:c1:48:01:dc:09:15:49:40:
e5:3f:01:d2:14:2c:f3:21:e2:35:95:df:ff:c9:1e:ef:4c:04:
c8:97:c5:a3:e5:f8:1c:89:8a:6c:5e:73:58:36:a8:ff:1e:ab:
cf:a4:5c:82:d3:de:06:2c:2b:ce:f4:75:f2:c3:e3:e3:9f:71:
6f:17:9a:a9:21:5e:a7:b6:93:37:99:70:a0:13:21:9d:c6:39:
57:2c:3b:e8:43:e4:a5:0d:06:4e:a0:ae:6f:50:63:2b:f8:a9:
b1:1b:d3:9c:57:a5:27:d2:82:ff:b0:65:10:4c:c2:49:a8:f5:
ae:55:74:46:f2:bd:bd:59:f7:25:8a:1e:02:bf:04:9f:c6:03:
94:2b:db:ac:11:55:5c:b6:f9:c4:34:6c:69:2a:8a:0c:1e:d7:
bf:86:f6:d7:a9:88:99:fd:ff:3a:4d:4d:b3:7e:c4:26:68:f8:
ac:2b:4d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:39 2026 by rpki-client