Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
File: if4_e4M8MGAut5hY5-r67VVPTFs.mft (raw, json)
Hash identifier: NOiB1LMF5L2pQ/uKWQSgP791bZCCQfrWzjKSVz+P8qE=
Subject key identifier: AD:1D:0A:DE:5D:E7:B7:AE:5F:C1:D1:C0:C4:23:B1:9D:48:DD:F6:3D
Authority key identifier: 89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
Certificate issuer: /CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Certificate serial: 019D38D30C96BD095E35AEC8883665C35042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
Manifest number: 0AEB
Signing time: Sun 29 Mar 2026 09:00:48 +0000
Manifest this update: Sun 29 Mar 2026 09:00:48 +0000
Manifest next update: Mon 30 Mar 2026 09:00:48 +0000
Files and hashes: 1: if4_e4M8MGAut5hY5-r67VVPTFs.crl (hash: mf2tnuylcHH+qmeiYa8yUaGz1QiHaviW1LPojQ0X9W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:0c:96:bd:09:5e:35:ae:c8:88:36:65:c3:50:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89fe3f7b833c30602eb79858e7eafaed554f4c5b
Validity
Not Before: Mar 29 09:00:48 2026 GMT
Not After : Mar 30 09:00:48 2026 GMT
Subject: CN=ad1d0ade5de7b7ae5fc1d1c0c423b19d48ddf63d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ee:67:45:cd:fd:a7:df:cd:37:25:60:1b:75:
a2:af:ec:89:aa:a4:c3:57:54:cb:87:d3:c6:a3:a9:
39:03:41:02:43:f1:62:c8:d4:09:15:e4:14:b5:5c:
e1:57:39:6d:ea:4c:d7:65:1f:1f:74:69:7f:78:1e:
b0:24:6e:f7:b4:90:45:ad:4b:a7:c5:be:82:cd:ed:
63:72:96:be:e6:85:da:76:8a:b5:27:cb:c0:90:01:
7a:c8:ae:95:c0:96:65:25:fe:d9:d3:2e:f8:d4:d8:
14:f9:09:a0:ae:5f:e3:52:59:bb:36:10:29:e4:ec:
95:14:65:c7:e4:06:3e:d4:48:a0:fa:95:af:d9:03:
cf:bc:d1:b9:f9:de:42:e5:e6:bd:ac:6b:2f:a2:72:
a3:d8:73:0f:89:ec:90:fc:91:6d:99:cc:ca:39:84:
59:4a:0c:3c:95:32:f2:18:8a:34:01:92:ca:c7:c4:
23:81:bd:16:f5:cc:6d:10:5d:00:9c:cf:29:21:44:
66:02:4e:c9:d7:b6:7f:77:3f:57:85:e5:ec:e8:c7:
c5:fa:c7:f5:75:07:ba:6c:82:bf:9a:1d:4a:69:62:
4e:be:87:b5:b3:02:ff:b6:b8:03:7d:9a:c3:67:a1:
06:ff:c5:4c:42:6f:28:5d:41:2c:5f:de:03:ed:1e:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1D:0A:DE:5D:E7:B7:AE:5F:C1:D1:C0:C4:23:B1:9D:48:DD:F6:3D
X509v3 Authority Key Identifier:
keyid:89:FE:3F:7B:83:3C:30:60:2E:B7:98:58:E7:EA:FA:ED:55:4F:4C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/if4_e4M8MGAut5hY5-r67VVPTFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b689fd-b13e-4332-9eb7-65cb63afce5e/1/if4_e4M8MGAut5hY5-r67VVPTFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:a3:a4:69:94:26:29:b9:00:10:d0:79:c0:28:8a:bd:96:3e:
fa:70:4f:49:03:28:16:c8:6f:33:a0:0f:b7:9c:2e:4e:32:66:
ca:f6:c9:18:4c:23:0d:a6:a1:6a:bc:15:f2:93:ef:97:ea:32:
1b:39:b3:9d:47:a3:d4:b3:5d:87:7a:f2:c3:eb:36:19:1d:e4:
ff:62:6b:91:ef:35:d1:f2:a7:4b:c5:f1:4f:29:34:6b:cc:c6:
07:02:3b:b5:f0:78:69:77:0c:49:89:6b:33:27:d0:1e:37:cf:
c5:40:e4:05:9a:0c:b9:d0:2b:f6:1e:10:a3:5a:1d:26:c0:3f:
72:e2:58:3c:86:cd:57:d0:05:c9:11:f0:99:ae:58:3d:a2:a8:
28:2e:d3:59:92:27:37:9a:bc:67:9c:04:cf:c5:18:ee:c0:dd:
8d:f8:38:92:10:57:2a:10:53:52:2c:a9:0b:96:19:5a:52:76:
b3:6d:55:1b:4c:90:4b:5f:ad:92:0a:cb:ba:18:aa:d6:ea:ed:
28:02:85:0d:1b:b6:06:83:78:f4:b9:36:7e:ed:0c:59:f6:b1:
75:14:25:d9:db:c0:ef:3c:5f:9a:ad:06:60:89:29:a7:65:ca:
49:0f:b7:b9:b2:8c:11:c0:c6:2d:7b:10:de:ba:e8:95:5d:95:
e9:e1:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:02 2026 by rpki-client