Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
File: 4TbBQNV8BgOYHZBG1McqrcZJe48.mft (raw, json)
Hash identifier: 0F4bB0snIudYJLBzJI38egK+mQt6YASzw98coWoR+88=
Subject key identifier: 75:59:03:AD:21:58:BB:A7:A5:06:86:E6:D0:F1:09:30:8C:A5:41:03
Authority key identifier: E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F
Certificate issuer: /CN=e136c140d57c0603981d9046d4c72aadc6497b8f
Certificate serial: 019D37C036A0A3010AC8DA9EDA39390A117D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
Manifest number: 1E
Signing time: Sun 29 Mar 2026 04:00:36 +0000
Manifest this update: Sun 29 Mar 2026 04:00:36 +0000
Manifest next update: Mon 30 Mar 2026 04:00:36 +0000
Files and hashes: 1: 4TbBQNV8BgOYHZBG1McqrcZJe48.crl (hash: MC0+dYAqJhz0vdobrvdgmBI5aM4QDNRT1KA6InOFc5Q=)
2: flO6XJpnIFOsdZyjDNefmOQ-G_w.asa (hash: MR9nPjOlXBd3N+fXKFHrapKtNEWrnTEaOnHmqRgXcfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:36:a0:a3:01:0a:c8:da:9e:da:39:39:0a:11:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e136c140d57c0603981d9046d4c72aadc6497b8f
Validity
Not Before: Mar 29 04:00:36 2026 GMT
Not After : Mar 30 04:00:36 2026 GMT
Subject: CN=755903ad2158bba7a50686e6d0f109308ca54103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6a:7a:59:0b:94:fc:ff:9c:cf:f0:be:49:a2:
e0:d2:1e:2f:5e:49:82:a0:78:7b:09:e7:29:6a:13:
d1:ce:f8:b9:30:28:25:1a:13:2f:93:4d:8a:e3:22:
83:52:fd:6e:4b:fc:5b:a1:ee:01:23:32:51:0a:bc:
86:73:2b:bc:fd:46:c9:48:61:e2:1a:73:fc:3f:99:
5c:f6:14:84:27:5d:18:58:00:54:4a:59:86:bb:ce:
67:c0:d2:31:48:5f:99:05:79:04:7a:ea:98:13:1d:
8e:69:d6:ba:7b:3c:cf:3f:86:d4:9e:08:34:e9:8b:
ee:e0:f5:55:16:d4:3c:1e:27:7f:9f:e1:85:e9:4c:
70:57:5c:97:21:b3:99:17:6d:23:ce:f7:05:d3:75:
1e:a6:77:f8:99:10:0f:2f:4f:23:64:0c:8b:d8:ed:
87:61:2e:0a:fa:30:cf:ca:3a:2e:0f:18:b3:86:ca:
aa:d9:3b:fe:30:6b:0b:0e:b1:5e:7c:6a:ab:c6:fa:
02:36:5b:c5:e7:99:e7:97:cb:a2:7d:6d:23:e6:56:
bb:1f:fc:cb:38:d7:a8:ad:2b:9f:a8:ee:59:f9:ff:
54:15:08:fe:02:23:1f:47:53:29:1c:0d:78:d5:5a:
12:ac:bf:04:16:c2:55:60:cd:81:03:bf:d9:14:8b:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:59:03:AD:21:58:BB:A7:A5:06:86:E6:D0:F1:09:30:8C:A5:41:03
X509v3 Authority Key Identifier:
keyid:E1:36:C1:40:D5:7C:06:03:98:1D:90:46:D4:C7:2A:AD:C6:49:7B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TbBQNV8BgOYHZBG1McqrcZJe48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e0b493-c0dd-4502-a658-800a0754f843/1/4TbBQNV8BgOYHZBG1McqrcZJe48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:0c:a1:37:46:1f:8e:c0:b1:8c:3d:43:c9:da:17:98:e9:e6:
79:73:61:1f:62:74:d1:b1:d2:d9:c2:77:eb:56:7b:80:26:2e:
38:76:ed:30:08:e6:30:b0:9b:a4:a7:7d:31:3a:d1:6a:eb:6e:
cd:cf:41:d0:ba:1c:b9:f5:b8:ed:74:65:dd:23:4b:41:b5:cf:
f8:40:40:32:36:f9:54:6e:64:d6:10:3e:d7:6f:e7:1c:a5:e0:
e7:c2:ad:92:76:a9:20:e6:14:0f:1b:a6:fe:fc:f6:15:c9:59:
f8:a7:34:05:e0:8d:0b:cf:85:d6:43:16:48:a7:37:0d:ce:eb:
92:cd:fd:1f:7e:04:fe:e0:3f:e8:0d:4b:be:88:c8:28:5f:5c:
08:4c:98:74:78:99:02:9e:78:84:ab:fe:9d:19:34:2a:80:4d:
5d:c4:8e:06:72:69:cb:96:e9:bb:04:cb:95:bd:f8:ea:df:f9:
53:d1:b2:26:b9:80:f6:ca:e2:c5:30:eb:af:9c:bf:1f:aa:41:
c2:24:be:4e:cf:d1:ac:5c:40:67:3d:ac:e7:ec:fa:ca:70:f3:
21:8b:af:9d:ea:6c:65:04:6d:b8:25:c7:43:90:3b:80:c4:29:
21:3b:fc:0d:59:d9:3d:c2:23:d0:89:f4:da:fe:db:11:e9:07:
a8:a2:98:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:28:08 2026 by rpki-client