Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
File: _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json)
Hash identifier: 9DOlkf8sNP/E1cbzhm6WjEijC6aUZ1QpvVYhhKQAl0A=
Subject key identifier: 84:E1:04:F4:A5:85:59:52:E3:63:87:A2:36:43:C5:D9:ED:D8:D7:EA
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial: 019D311943B427E3B5722E82C32E8613CD56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
Manifest number: 0948
Signing time: Fri 27 Mar 2026 21:00:32 +0000
Manifest this update: Fri 27 Mar 2026 21:00:32 +0000
Manifest next update: Sat 28 Mar 2026 21:00:32 +0000
Files and hashes: 1: 3DdHsX6it2ap4y_VnsjWCiY07Yo.roa (hash: x9mgWA78JqU1sZIpmaNa31HOdxWPBMoH6TxC+AtVICA=)
2: E1CobbzuSopIQ25v8bXg7-wkG08.roa (hash: IoeE+7y8I3rHs6C9VTnXoHgwAPKPkZzWiNKhUaIZbC0=)
3: LyZiTz1VH8kyF5AmjQaEjp0W6sE.roa (hash: AelnLJhdvd0PiZ/B/iw8zmXPaSYCUu42XLVsyGcWPKo=)
4: WeKOa0H0czOL8IIE6VOIs9H9HXM.roa (hash: HnR5cSodno/i5GR28495C4j2bGZUas8Sx3TSjsOhefE=)
5: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: k+KPFfkoGLStGsujqMr6rXLeZaZk/GaSDtrd9G0st6k=)
6: lR8if6ppIPbhohYi1ZftYsaVivM.roa (hash: tWsT29WceBlnruoO07mkklZjKl8F3YK8Bj14J12SHEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:19:43:b4:27:e3:b5:72:2e:82:c3:2e:86:13:cd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Validity
Not Before: Mar 27 21:00:32 2026 GMT
Not After : Mar 28 21:00:32 2026 GMT
Subject: CN=84e104f4a5855952e36387a23643c5d9edd8d7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d3:70:9e:1d:5a:3e:8d:d2:a0:98:ff:63:66:
bf:07:f1:7e:13:ab:07:06:33:0d:4b:e1:13:67:a6:
5d:7d:a4:7d:bb:8b:c6:76:3c:5e:c9:03:21:4e:61:
0a:d5:1e:cb:c5:b8:4f:73:18:04:10:95:20:6b:67:
80:3a:63:96:36:ee:e2:4e:13:90:cb:8f:7d:a1:41:
53:73:52:02:66:d7:bc:c3:7d:e4:81:62:15:63:43:
9d:37:4a:02:f7:28:33:29:3b:ff:97:a7:13:15:5b:
f8:a1:b9:5f:1b:5a:cf:47:1c:7e:ee:a3:31:e0:bb:
3d:7b:8c:14:07:36:48:fc:38:89:1f:38:87:52:f2:
b9:93:35:4b:44:34:29:7d:46:55:f6:7f:b9:31:5d:
2d:4e:b6:29:9d:7e:2c:06:c4:9e:f9:1d:2e:6f:36:
6e:02:6e:26:6a:3b:81:e6:38:05:a5:da:c3:cd:80:
f6:95:c3:d3:da:eb:13:4d:20:f0:5a:6b:01:8a:10:
b3:61:09:1a:27:a3:39:fa:a1:9c:4c:2e:bf:89:2e:
68:80:c1:dd:e9:84:7d:12:7c:24:60:a3:0c:1d:6e:
71:ad:7b:9a:51:50:6b:73:e4:3d:59:1a:5e:fe:28:
9d:d0:8e:f1:3b:ae:79:10:6b:83:98:1e:13:c8:ee:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:E1:04:F4:A5:85:59:52:E3:63:87:A2:36:43:C5:D9:ED:D8:D7:EA
X509v3 Authority Key Identifier:
keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:3a:d8:8b:b2:ba:2a:96:6b:d7:f3:c8:9e:ce:ba:da:eb:31:
67:cb:e1:24:fd:4d:e1:2d:d6:57:f4:43:19:33:8c:3d:ed:85:
82:d5:3e:b1:e9:fe:ac:8b:b1:99:c8:b7:84:d8:97:47:89:3b:
13:07:78:49:59:02:61:64:45:8e:c4:cb:e9:1a:5d:a7:1a:83:
d6:24:3e:94:b6:4d:a4:b0:5f:89:f3:8b:8d:15:fc:7d:49:1e:
86:a0:b1:4f:26:de:1a:84:40:61:41:cd:82:6d:dd:5d:dc:ad:
fe:98:eb:74:5c:8e:73:da:48:0e:8d:ed:ca:fb:da:21:2f:65:
48:d4:58:5f:1f:2d:80:e8:c0:8e:cc:48:38:f7:86:c5:d3:17:
6a:6a:5d:2f:0d:56:36:96:3f:81:a4:2d:aa:6e:4d:2c:e9:d9:
0d:89:1c:aa:13:d1:f2:81:04:7f:37:a8:87:d5:0a:61:69:75:
a1:77:f2:54:53:7a:ad:58:53:12:17:2e:e2:e3:71:61:97:98:
cb:01:95:eb:fa:26:34:90:9c:7a:c5:b0:be:67:97:e3:04:a5:
a4:db:bf:75:1f:de:60:67:f7:0e:46:a5:1c:8f:fa:6f:8e:a4:
ed:4e:45:14:e1:45:c4:cc:53:89:50:a2:44:c7:6a:64:9d:42:
be:38:54:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 04:09:57 2026 by rpki-client