Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: +5MPieHJ4bOvNUV1GhyD5gLAS/Sr3Txg75q+0Ms/wuw=
Subject key identifier: 42:4E:F6:07:AF:0E:36:04:7F:7D:6F:A4:BF:BE:B5:56:ED:A3:25:C8
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 019D389BAC3D94F63EB8ED0D0EBE130507B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 0A14
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: CisVJVFbZMpLVl24kkeuwcDuCMQ0wKo2ng5ZOpflBSk=)
2: YWMzYYdq1V4GAPZh68WrmEyhVfI.roa (hash: L4cChRKUEEfDnkwJCOfQ9K/LTDSkENg728c4ezgiFqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ac:3d:94:f6:3e:b8:ed:0d:0e:be:13:05:07:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=424ef607af0e36047f7d6fa4bfbeb556eda325c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:06:74:36:30:2c:f3:c6:52:1f:f0:77:0f:4d:
96:93:ef:d8:02:e6:bb:b2:81:a8:82:6d:f4:36:85:
d9:6b:c6:9f:67:a0:d2:20:c9:c2:7c:fe:e2:6f:0a:
1d:bf:b6:e3:ec:e8:4f:f9:eb:9e:c8:c1:2c:43:7c:
e4:04:20:c3:1b:47:c9:45:97:3a:7f:4b:81:f4:6a:
2e:fc:cb:43:94:2d:7c:8b:16:e6:96:43:df:b3:a4:
cf:4c:08:77:39:85:5b:f5:5b:0c:cb:5a:52:df:bf:
47:2e:c2:9b:c9:cd:ef:0b:5a:27:5a:26:e0:22:3f:
b1:50:bd:5a:7e:6d:3f:12:93:11:bc:05:30:1f:ca:
91:1b:00:22:fe:9c:74:5c:0f:ed:31:68:54:9b:c1:
52:03:49:34:04:47:83:20:82:7d:d5:73:c0:f8:20:
ca:e9:48:cc:a8:39:60:b2:ca:56:9b:8e:b4:b7:d9:
27:c2:d4:41:0a:c3:31:62:bd:1e:37:41:37:9b:1c:
28:3d:55:30:05:4a:e9:9c:53:fc:80:16:50:20:ab:
ef:9c:39:fa:e7:fa:d2:60:27:77:29:3c:e6:85:98:
56:84:64:50:5f:5c:09:08:d2:db:8c:74:44:d1:11:
87:70:3e:bc:bf:2f:e9:35:3c:8d:e3:b0:d9:4c:31:
0b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4E:F6:07:AF:0E:36:04:7F:7D:6F:A4:BF:BE:B5:56:ED:A3:25:C8
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:04:ab:13:3a:c7:d4:01:78:bc:53:12:f6:ec:4d:55:7e:2e:
ec:c9:ee:06:83:9a:21:95:a5:c2:0a:db:01:53:cd:2a:f1:b7:
a7:c5:c8:95:5c:af:50:89:e9:8a:62:44:fa:e7:0b:26:d2:de:
9a:60:e6:77:18:2f:a5:72:22:4b:88:4b:84:ba:89:66:0b:b1:
57:19:15:d5:fd:31:28:80:a0:27:bb:ee:3e:e8:5b:93:d7:6d:
e7:e1:b9:99:dd:f8:5b:cb:6f:ef:f3:48:16:3f:69:e3:73:4a:
9b:79:6c:29:5e:33:0a:2f:17:8f:af:bd:88:51:90:a3:a8:1c:
37:59:55:be:78:fe:b6:f7:8a:db:78:4a:d6:f3:77:8c:66:27:
31:8d:2e:a1:a0:cf:13:bc:35:1c:9f:be:f7:ef:62:cd:51:77:
b7:9e:16:9d:b1:a7:7f:11:64:aa:d2:cd:4a:e1:b4:13:82:2a:
28:3b:cb:2d:7c:90:24:08:52:46:49:57:c6:93:33:50:d1:65:
60:2f:68:03:2e:72:fe:76:85:4b:bd:c5:aa:16:15:76:77:03:
14:b7:66:dd:1d:d6:98:bd:50:33:11:ed:a3:98:f4:97:fd:f3:
0f:fa:cd:8b:b6:2c:34:4b:3c:66:81:d0:ef:39:5c:98:9d:5f:
09:14:b6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:41 2026 by rpki-client