Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: /pXTqbsb/VX/th2OrGlfToN1NYYHQV6d2i5hpdulkS8=
Subject key identifier: A6:D1:BC:E7:BE:29:C9:00:66:7E:CE:AF:D5:0A:40:DC:1B:5D:2A:30
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 019D37C03E1DA174E30B2722E88B6D761A18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 1723
Signing time: Sun 29 Mar 2026 04:00:38 +0000
Manifest this update: Sun 29 Mar 2026 04:00:38 +0000
Manifest next update: Mon 30 Mar 2026 04:00:38 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: nVz1x2S2MQqsnLeRcFfRQ4JdLdyxMVVBvZeoS4JQPQY=)
2: r2j9KB_d9qlo6DM4VIzlnk-FGnA.roa (hash: EzpW7vs8EG39ibzlPvK/9rhPpBxeklGzxbYhWxFufes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:3e:1d:a1:74:e3:0b:27:22:e8:8b:6d:76:1a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Mar 29 04:00:38 2026 GMT
Not After : Mar 30 04:00:38 2026 GMT
Subject: CN=a6d1bce7be29c900667eceafd50a40dc1b5d2a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:1a:e4:40:d1:a8:b7:79:04:86:78:22:88:
e3:ef:a4:dc:c0:35:32:76:65:7d:ce:c5:70:33:d0:
36:67:b7:82:f6:39:ef:62:39:aa:89:3a:01:6c:f9:
1e:7f:da:1f:1d:f3:9a:e1:fa:e4:8d:ad:6c:3b:a6:
cb:57:52:3b:58:c6:ca:e9:81:5f:ff:a1:ce:df:97:
98:c8:dc:73:48:85:5e:57:a4:57:20:34:cb:00:01:
93:99:3e:57:9c:6a:d6:ff:19:5f:b1:2c:74:d1:db:
13:fe:99:8f:fe:1a:a5:1a:49:c1:f9:4b:fe:b1:6d:
c2:0c:2b:6c:17:c8:95:eb:09:69:e0:3f:24:a6:bf:
43:d9:3f:5f:2c:5a:dc:40:d3:d3:bd:81:70:28:94:
e7:e3:0d:81:2e:81:7e:a1:6d:4d:45:d1:b5:ee:dc:
74:3b:33:83:f9:43:9d:50:a2:ba:f4:47:a5:9f:9e:
1e:91:a2:4a:1a:ea:9c:ff:4d:bf:76:30:6a:ad:3b:
cd:ca:e2:21:55:9f:15:78:74:49:f7:08:ce:fa:73:
dc:0e:c0:8f:79:e8:a0:7c:86:68:78:c7:7e:de:4c:
ae:f7:e2:3c:19:80:18:88:97:a9:ca:90:50:91:dd:
6b:58:99:3f:ec:ff:13:6f:43:8d:25:62:a1:84:b2:
d6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D1:BC:E7:BE:29:C9:00:66:7E:CE:AF:D5:0A:40:DC:1B:5D:2A:30
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:01:01:cb:61:a3:e7:18:9a:16:e8:a3:71:17:ef:15:20:be:
79:ac:8e:91:82:70:d7:c0:f9:13:3b:7e:fd:05:32:a3:3a:85:
12:40:df:1e:e3:a7:23:00:de:c6:f2:d6:01:07:2c:c9:63:13:
d8:c0:a1:08:a6:4d:68:0a:fa:e4:7b:88:15:6d:9c:cc:07:03:
7e:c3:8e:87:52:b5:61:02:2f:45:ac:5d:df:a1:e0:99:53:85:
0a:7d:cd:d1:59:a2:10:fc:f8:40:13:19:b0:f4:e2:98:91:c9:
9d:ca:51:c2:a1:b7:14:87:69:68:c6:7b:88:d1:cc:63:c4:1b:
ce:3d:60:ac:ce:19:11:5b:2c:49:7d:ea:6e:1b:bd:49:0c:bd:
a5:ff:e5:0d:d6:4d:0b:90:0c:33:61:dc:7f:8c:0b:24:c0:e7:
5e:fb:cf:bd:d2:34:9b:35:52:2e:d5:0e:3b:c7:b8:69:13:27:
13:de:04:3a:ce:43:66:da:5b:67:a8:e9:12:62:3e:05:42:a3:
57:c8:b2:4b:ed:02:77:44:66:4c:89:e4:44:d7:06:6f:e8:df:
a7:d7:2a:5f:f6:a2:e4:2c:94:98:09:f6:74:b8:9d:97:a3:35:
40:a3:76:7e:b8:46:73:0f:28:1b:76:7d:ae:e4:ad:74:9f:32:
38:3d:78:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:57 2026 by rpki-client