Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File: 4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier: p8cAZayeCRGkIfQfocguZelrGauO0Divp/gIhG+0b9s=
Subject key identifier: BD:74:4B:24:C8:37:4D:22:24:B6:72:03:E1:A0:8E:D9:69:21:4C:FF
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer: /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial: 019D3977FA3B6EE834D3B5F5B555507C1D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 12:00:57 +0000
Manifest this update: Sun 29 Mar 2026 12:00:57 +0000
Manifest next update: Mon 30 Mar 2026 12:00:57 +0000
Files and hashes: 1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: sZHxw9J/U4hQstkH9KuVOYSJxPyFsXhySJDQYqjxQlc=)
2: FvV4UNNN1I3u5_f_mw8uvFShvcA.roa (hash: qoCza9pR6RXvspT8eRTV0uWK0mL3e+fmf3gOpC7a0Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:fa:3b:6e:e8:34:d3:b5:f5:b5:55:50:7c:1d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
Validity
Not Before: Mar 29 12:00:57 2026 GMT
Not After : Mar 30 12:00:57 2026 GMT
Subject: CN=bd744b24c8374d2224b67203e1a08ed969214cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ea:06:ec:e3:15:ad:11:20:20:99:35:a7:a0:
f0:8c:ce:4b:60:f4:e6:56:53:39:a8:be:b2:e8:e4:
bf:d7:c7:a6:32:a0:a6:8f:22:7d:e5:2f:da:2d:21:
94:a6:b3:1a:08:5b:c4:99:22:fa:55:58:f8:76:eb:
e9:65:b8:1f:1d:4c:cc:28:fd:c4:55:19:13:3f:0b:
fe:b2:c4:a4:17:fb:17:85:96:6c:3b:73:fd:02:bd:
13:d9:ce:8f:10:1a:ff:90:6d:4a:80:31:db:fd:e4:
0c:a6:95:22:54:c6:2a:c8:9b:d6:f0:f5:49:0a:0b:
f5:d2:89:a0:86:57:0d:24:c3:7e:a2:a3:ac:63:b1:
28:a6:5d:bc:3a:7d:6a:33:9d:ff:b1:44:f7:03:1c:
9a:14:9e:d0:1e:d6:82:94:6a:1c:ed:4f:5a:af:88:
28:d4:47:a0:eb:ba:3c:99:5f:18:31:77:57:0d:b9:
72:34:3c:65:fb:b1:6b:80:16:af:41:9d:83:3c:58:
19:29:29:bc:58:7f:27:8c:c6:48:18:69:a7:81:23:
d7:25:62:bb:3a:c2:f6:f3:cf:dc:13:51:07:e3:cf:
0e:8d:d2:74:6d:b0:f4:ee:32:9f:60:e5:f9:d0:d7:
29:37:97:05:20:e5:7f:7e:1f:db:df:64:51:2c:2f:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:74:4B:24:C8:37:4D:22:24:B6:72:03:E1:A0:8E:D9:69:21:4C:FF
X509v3 Authority Key Identifier:
keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:45:11:b4:c5:39:1f:aa:50:c9:af:fb:84:02:f6:35:61:54:
8c:eb:24:de:20:90:df:24:18:cf:ea:a6:2b:f2:11:f3:0a:2e:
8b:f1:52:cc:85:21:d9:f6:b0:fa:8c:13:3e:9e:0f:64:9f:a5:
70:32:fd:3b:9a:05:2d:92:51:9c:51:7e:7a:a9:04:6f:3d:b9:
97:c0:42:a7:c9:1b:48:41:84:5e:1d:24:1c:ac:9e:65:51:81:
3d:40:f0:ac:d1:42:1c:be:83:cc:d6:9b:9d:a9:35:9c:96:f0:
7b:38:74:d5:9b:7a:20:bc:c5:b6:7a:8c:37:96:b8:15:c6:a0:
59:4b:e7:6c:93:fa:70:c7:fa:24:00:bb:d3:d5:9c:76:90:58:
bb:1b:01:a3:cd:98:43:6f:30:6b:1f:14:71:57:89:06:9a:dc:
37:c7:44:42:d5:52:06:cc:d6:ea:b3:fc:aa:4c:86:6d:d8:ca:
d3:ea:aa:55:fd:40:48:50:d5:17:13:3a:ec:e6:c2:a6:a1:70:
f6:de:05:24:c0:d9:38:a8:d1:c3:7f:4f:d5:01:bd:c7:6f:6a:
58:8f:24:e5:93:5a:3b:7f:7c:cf:d0:dd:10:f7:e4:f0:36:ff:
82:7a:ca:30:8c:ca:98:d2:5b:24:af:48:19:d3:77:df:a7:55:
77:1e:a6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:39:09 2026 by rpki-client