Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier: MUS+cvezi3ShZBEiW/wjtBDLkLg8Ju831XSrSOW6/vA=
Subject key identifier: B5:00:8A:A2:AF:7A:EE:48:EA:56:20:82:0D:93:87:3A:C6:7F:3C:D1
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial: 019D38D36F69DFE02003840B7A9AB734E259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number: 09BC
Signing time: Sun 29 Mar 2026 09:01:13 +0000
Manifest this update: Sun 29 Mar 2026 09:01:13 +0000
Manifest next update: Mon 30 Mar 2026 09:01:13 +0000
Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: KFLXGmLG32WZA2hnYiw3xDa526wg/xCDY4oWkS/5o7I=)
2: MPWn9lYh7Ig78eg1IuFu_hQVgcY.roa (hash: iyM+MzYg4hUTkqmFv32rNevlyEv/xOwD98IypdwiHXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:6f:69:df:e0:20:03:84:0b:7a:9a:b7:34:e2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Validity
Not Before: Mar 29 09:01:13 2026 GMT
Not After : Mar 30 09:01:13 2026 GMT
Subject: CN=b5008aa2af7aee48ea5620820d93873ac67f3cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:2d:15:dc:f1:e5:66:9f:36:71:c9:ed:57:
3f:b7:e3:ac:92:d1:a2:53:7f:37:29:58:8b:fa:42:
1c:24:81:11:4a:6b:33:10:07:1d:ca:ae:4d:e8:fa:
c5:ee:cd:64:25:19:26:30:4b:b9:e4:3b:42:b9:7f:
a8:79:ff:70:f4:e1:7f:e9:96:49:30:4e:85:48:87:
82:0b:9a:60:e6:39:f7:9d:50:cd:2c:cd:2c:b6:00:
d5:8b:dd:60:c8:b2:93:0b:02:88:ef:55:6b:05:15:
41:0c:ac:f3:94:56:54:8d:25:4d:7b:3d:1a:58:ed:
63:77:97:07:d0:c7:93:fc:de:36:c7:f9:9d:bc:a1:
04:4f:8d:19:9a:ce:f6:2f:2b:cd:58:42:1f:62:7c:
e8:ee:56:4e:b8:cd:b1:8d:60:a0:5b:e0:b2:71:7e:
d7:ef:60:f8:c8:a5:8f:bc:61:71:c8:eb:d8:7f:5f:
89:2e:a2:e2:5a:16:96:32:c6:0f:e7:47:bb:0d:4d:
1d:52:ed:3a:0b:9a:e6:34:a6:b7:6f:78:70:f1:8f:
e2:cd:2c:da:0f:3f:d5:d2:99:ac:81:61:39:3f:a2:
8b:d3:35:84:a6:6c:6c:fb:6e:92:3f:dd:43:f4:6b:
5b:77:cb:d9:12:d1:a5:18:96:fc:50:7c:1a:b2:f6:
04:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:00:8A:A2:AF:7A:EE:48:EA:56:20:82:0D:93:87:3A:C6:7F:3C:D1
X509v3 Authority Key Identifier:
keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e9:9d:c3:88:0d:6a:db:00:e1:fe:02:7f:ee:1c:6b:05:6f:77:
2b:2c:f3:18:53:ba:98:ac:ab:4e:5e:22:a0:80:54:2f:b8:95:
86:26:e6:c9:e6:18:f2:28:f5:c8:dc:5c:41:cb:24:ea:29:12:
7c:4a:e1:af:e7:e6:69:b3:b1:a0:15:30:f1:cf:21:13:7c:94:
e2:97:9e:83:b3:55:10:f3:e7:47:f1:30:75:10:f3:e3:99:ce:
9b:f5:e7:39:28:e3:ef:04:a3:2f:06:87:6a:01:72:32:f7:49:
43:4d:01:ad:0b:68:e7:de:47:82:1f:57:cc:03:6f:67:0c:0f:
91:f4:d8:97:bc:4a:a8:38:7f:ff:cd:b2:ee:13:a6:9c:7d:bc:
40:77:1c:9d:d1:02:b8:8b:3c:33:62:42:1d:62:4a:63:6a:5b:
60:4b:0c:70:ad:a8:86:c3:c1:71:0e:ef:02:b2:67:83:69:1b:
6f:94:4f:6a:fb:10:32:4b:be:a0:c9:60:ae:bd:4a:85:6d:8d:
aa:b3:02:76:76:61:79:ba:c2:e6:79:91:eb:7b:53:74:4a:28:
1f:57:4a:ae:3a:0d:36:e2:f0:09:c2:6e:38:58:a7:1c:c7:35:
3c:47:60:2c:d5:02:92:0c:cc:d4:b8:45:51:dc:05:46:fe:23:
3a:c9:7b:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:37 2026 by rpki-client