Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
File: sRI3DKJgErTR0BVM73IwvYmluV0.mft (raw, json)
Hash identifier: w+iQ3P6xbswLHDp0fyOxsYvgP7Uc8796GizM21J2CRI=
Subject key identifier: 4C:49:07:34:73:AF:45:AE:9F:16:36:39:FF:18:6C:06:28:72:28:46
Authority key identifier: B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
Certificate issuer: /CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Certificate serial: 019D3A543CAA895D73C207690F44BC905057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
Manifest number: 4E
Signing time: Sun 29 Mar 2026 16:01:32 +0000
Manifest this update: Sun 29 Mar 2026 16:01:32 +0000
Manifest next update: Mon 30 Mar 2026 16:01:32 +0000
Files and hashes: 1: JQHbkZiCoz_ArYL3K_jRaitcYso.roa (hash: LSS9szWjmAex/d/OuZRvWyhXy/Z+aR2BRiVKGpC62GY=)
2: sRI3DKJgErTR0BVM73IwvYmluV0.crl (hash: ICE3z9Jhqto3qTrFABu5Or1xT+eWRFyjVAL06PONl/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:3c:aa:89:5d:73:c2:07:69:0f:44:bc:90:50:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Validity
Not Before: Mar 29 16:01:32 2026 GMT
Not After : Mar 30 16:01:32 2026 GMT
Subject: CN=4c49073473af45ae9f163639ff186c0628722846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6c:4e:d9:c0:5e:5d:f8:e0:bd:ac:eb:fc:a2:
55:ac:e4:44:6a:d9:a8:12:a1:44:fd:ea:b7:32:fe:
d0:d0:18:ed:e0:11:3a:1b:6e:79:be:de:2b:a7:34:
98:73:ef:45:fa:e2:94:9e:da:f4:f9:84:e1:85:fc:
21:4f:0b:66:91:8f:1d:47:fa:ac:12:03:79:94:59:
32:20:6c:89:57:97:71:7b:7b:99:c6:58:fe:3c:0d:
98:dc:35:a7:bb:04:f8:43:a9:16:88:f9:3b:61:27:
6c:89:f9:03:75:8c:20:5a:86:e5:52:b9:4c:fb:90:
a2:96:85:38:7d:b4:2f:0d:83:af:17:44:91:50:e5:
39:4e:7e:06:46:c1:8b:58:99:c5:35:16:57:b8:b6:
11:00:5e:92:bd:b8:05:e8:13:3b:3f:eb:fa:cd:99:
28:37:90:01:e0:05:3c:37:df:56:9f:75:3c:f2:74:
8d:d7:5c:f5:11:bc:3d:d6:90:97:45:3f:c9:e0:74:
0b:ec:6e:8f:17:30:f3:3f:c1:0c:ef:a7:7b:b2:aa:
cb:35:26:27:3f:cc:e3:ef:5f:0d:1d:94:93:f0:b3:
0a:51:3b:96:7a:e3:e0:40:08:48:68:9d:34:6f:27:
4c:11:a8:44:7a:40:29:82:b7:0f:4f:c6:39:95:fb:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:49:07:34:73:AF:45:AE:9F:16:36:39:FF:18:6C:06:28:72:28:46
X509v3 Authority Key Identifier:
keyid:B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:db:42:a7:71:f6:16:86:4d:d3:b4:ea:35:d1:44:93:dc:f7:
c0:a9:b2:1b:f5:91:66:1f:4b:c9:02:4b:83:c2:43:7f:26:5c:
b4:d8:65:53:98:b2:f5:e8:ce:0b:e4:3f:5e:88:ff:08:01:7c:
dc:8b:94:44:6e:db:8c:91:d3:97:3f:0c:0c:bc:32:96:47:b2:
0a:a6:cf:54:41:17:81:9d:ca:74:c8:67:61:21:11:6f:91:ab:
ef:51:2a:3f:4b:e4:04:2e:7b:6e:11:fc:51:7b:50:e4:a5:c1:
08:03:ab:b7:b8:99:c9:70:03:39:f3:6c:ba:bb:d6:25:d8:e9:
ef:9a:0e:ae:f4:e1:1d:db:f8:f3:af:6d:a1:bb:1f:8f:1b:95:
fc:f8:52:74:bc:ad:ae:bb:c0:3b:1d:20:9e:d2:4d:13:8b:a7:
73:b3:19:1e:a7:9b:48:9e:9a:d1:4a:9d:7f:f4:ca:e9:29:69:
45:76:7c:dd:70:3f:92:b2:ea:96:67:99:11:b5:96:ef:04:14:
fe:e1:a2:0c:24:63:f4:e0:74:b4:d8:f5:e0:d7:99:84:cc:96:
f3:c7:76:37:8f:45:33:c0:1d:47:30:85:cb:8d:c9:97:1e:bc:
b8:5f:7f:bb:42:e2:52:90:7a:36:cd:5f:e3:12:1c:a4:39:ce:
fe:eb:64:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:14:30 2026 by rpki-client