Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: HdEakocKVhFtYiF7lxPti1QgXH+9mkTgqq2tP5mhRTs=
Subject key identifier: CD:E9:09:6C:63:A0:79:B0:CC:61:BB:EF:FC:1E:48:4F:BE:EC:3B:EA
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 019D38D349B40E7F35F75529BB0941F088F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 0B5B
Signing time: Sun 29 Mar 2026 09:01:04 +0000
Manifest this update: Sun 29 Mar 2026 09:01:04 +0000
Manifest next update: Mon 30 Mar 2026 09:01:04 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: dNS3mGGYM967lxKveQEm49l+Bfas95pe7ny6Qyn3QKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:49:b4:0e:7f:35:f7:55:29:bb:09:41:f0:88:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Mar 29 09:01:04 2026 GMT
Not After : Mar 30 09:01:04 2026 GMT
Subject: CN=cde9096c63a079b0cc61bbeffc1e484fbeec3bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e9:d4:f5:61:87:4c:01:e0:c3:17:5a:24:96:
fc:ab:01:b0:12:8e:50:ff:78:41:12:f8:bd:da:1a:
5c:f3:1d:6e:58:3f:bd:0d:98:d2:2f:5a:5a:85:53:
1b:ac:ab:05:34:3c:da:8d:cc:ab:a2:83:52:30:54:
28:e6:4f:fe:8e:ff:e8:2e:d7:0e:6a:58:f1:29:76:
30:97:9a:fe:34:80:c6:45:ec:77:a8:93:56:43:6f:
c8:92:65:45:8e:49:da:02:4b:cd:51:ca:50:11:34:
4b:dd:df:6c:35:88:10:7b:51:33:07:1f:45:b3:a9:
96:22:0f:ea:dd:5f:bc:5e:cb:a9:8b:b0:96:87:9e:
f5:d5:54:cc:74:06:4d:a9:1c:ee:a5:32:66:42:d3:
3a:6d:d9:cf:21:09:d1:62:c9:78:8a:80:b5:b9:9f:
58:56:8f:8f:a2:c3:ce:b5:8c:2f:81:2d:af:49:4c:
ed:ff:50:13:59:ed:9c:61:44:9b:86:e5:bb:da:06:
ed:ec:29:58:ae:6a:e6:23:1b:d7:61:5f:21:cc:7d:
d3:fd:6f:33:32:b3:0f:7e:0c:fd:dd:e3:90:eb:54:
4d:06:d1:6b:99:b6:1e:a9:f2:c0:3a:ac:ae:be:10:
b4:a6:b7:15:ad:a6:a9:af:4c:e6:d6:80:5a:ce:b6:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E9:09:6C:63:A0:79:B0:CC:61:BB:EF:FC:1E:48:4F:BE:EC:3B:EA
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:84:90:bd:21:cd:0d:3f:e1:3b:1c:c6:02:1f:2e:8a:6b:f2:
e6:4f:09:c4:80:c0:7b:ee:21:8a:db:5b:25:69:a8:5c:0a:75:
21:aa:64:9d:a6:b7:d9:3e:cf:84:70:e5:93:fb:0e:f8:b1:06:
ea:4e:c4:64:5b:33:04:27:40:23:10:88:88:82:f5:32:ac:68:
1d:7d:75:80:71:ea:60:d0:98:b0:7b:db:b9:72:4c:24:1f:81:
6d:94:71:9e:f2:96:46:6b:65:79:d6:f8:32:e7:5c:00:d4:71:
85:ae:8d:c3:6e:cb:34:7e:db:cc:b0:9a:ad:ac:d5:35:5f:fd:
20:d8:2b:48:ad:91:5a:c1:be:09:ef:79:0b:de:e2:78:4c:56:
8a:71:59:be:79:5c:71:2a:c7:4e:91:17:31:4e:29:34:70:01:
d7:81:7f:ed:83:bc:29:f4:07:d3:ce:85:bd:70:8e:50:e1:1f:
47:c3:19:05:95:a5:49:ea:94:e8:8a:e3:22:df:35:f3:0a:3c:
fa:15:54:7a:22:0c:02:83:88:ed:12:55:98:a0:15:87:6f:2c:
fd:05:4b:c3:5d:7c:56:50:39:5a:c2:7b:61:74:5e:c7:24:86:
2e:20:c1:a2:94:ac:3b:96:fd:56:57:ac:c1:ed:59:b9:f6:de:
51:fd:d7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:52 2026 by rpki-client