Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
File: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json)
Hash identifier: TcdwL5go/jM0allMV2xkctnocTLOgY0zLNKCIykfSv0=
Subject key identifier: 09:B3:39:9A:A9:B7:F4:B4:B6:45:48:07:D0:93:02:C9:0A:71:4A:94
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial: 019D37C056650EDA2418363BF9A4160D8E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
Manifest number: 05AA
Signing time: Sun 29 Mar 2026 04:00:45 +0000
Manifest this update: Sun 29 Mar 2026 04:00:45 +0000
Manifest next update: Mon 30 Mar 2026 04:00:45 +0000
Files and hashes: 1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: xSnRDZbE1Fx02OHmNp3OLK4PQedqaCEUD7WsOztvEvQ=)
2: mX8HnTFvLthfSZ2ZAzBIL5WiGxo.roa (hash: JasekT6eOU4dUWNEwUdVF7G0JwY0SRq9zwzctkh7yh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:56:65:0e:da:24:18:36:3b:f9:a4:16:0d:8e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Validity
Not Before: Mar 29 04:00:45 2026 GMT
Not After : Mar 30 04:00:45 2026 GMT
Subject: CN=09b3399aa9b7f4b4b6454807d09302c90a714a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7e:d7:a7:fe:47:66:23:12:94:e4:53:3a:32:
6f:94:24:59:4c:65:90:7f:cc:b0:c7:25:af:aa:c9:
3c:b4:9f:aa:7d:4e:3b:cd:4a:c0:44:e8:5b:2d:bb:
00:0d:33:b7:e1:7c:f5:26:7e:9e:f5:ef:6c:5f:c0:
48:a7:9f:16:81:1c:a4:1d:63:92:aa:11:20:2a:17:
b8:2b:9a:fd:18:7b:7f:54:d5:fe:97:a4:e8:01:79:
ba:27:d8:31:b9:e4:9c:eb:1f:85:9d:9d:0e:cd:02:
bb:3c:a6:a0:2a:e0:00:39:c4:b0:64:2d:ae:5c:b9:
44:b3:08:7f:0f:3b:73:1c:da:03:cc:76:49:79:11:
d0:32:79:a6:68:6e:6c:5f:fc:19:a3:05:08:50:4d:
40:23:9f:9f:47:f3:f0:34:1e:df:f8:1e:63:62:fc:
25:8c:28:88:f2:7d:fe:cd:3b:b1:0d:90:9e:8f:24:
ba:2b:c8:7a:5a:95:3e:83:48:eb:71:30:85:e6:0d:
5b:c9:e5:de:8a:80:64:7f:01:e9:ec:2e:64:87:9c:
7c:2c:c3:2c:30:50:8f:00:d9:bb:63:e3:14:fa:b0:
5e:2e:75:22:e3:91:9d:eb:b7:37:41:fb:db:36:68:
9e:61:06:f1:41:3c:ea:27:69:a7:34:4c:1b:ce:70:
69:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B3:39:9A:A9:B7:F4:B4:B6:45:48:07:D0:93:02:C9:0A:71:4A:94
X509v3 Authority Key Identifier:
keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:02:2a:1c:88:eb:e5:77:52:8f:28:2d:21:60:d0:ac:f1:e6:
e1:5e:9e:ad:16:14:56:49:6c:cb:6e:75:db:9f:56:b2:f1:70:
a8:6b:47:d5:3d:3f:50:f4:7d:ac:cd:00:f5:38:2d:bd:5e:11:
29:ed:0f:dc:91:33:f2:52:2b:6a:17:85:0e:57:14:1a:86:90:
84:f0:ca:52:e1:52:df:af:9c:4a:b4:f2:61:b5:f5:03:04:a2:
a9:35:fe:d4:b8:e4:3b:be:91:44:0c:c6:94:27:b0:b5:10:d0:
f5:20:65:9b:d8:69:a7:32:70:bc:62:32:b0:12:6b:98:18:2a:
ab:84:3b:d4:3d:c5:bb:10:2d:29:50:3e:a2:2a:57:73:8b:4b:
e1:3b:8b:21:78:28:ec:9f:96:1f:a8:16:fe:e1:37:00:38:c6:
54:c3:03:63:3d:2d:8e:87:17:b3:a6:6c:e0:00:46:cc:02:25:
1b:1a:4f:a9:0c:d3:88:9a:ac:c6:75:57:19:a9:29:49:a4:13:
98:03:5c:71:e8:29:13:a9:5f:67:b5:07:04:66:d9:4b:c6:02:
bd:0f:65:1d:8d:7b:54:e3:fd:03:59:f0:5d:04:bf:85:b9:9b:
39:92:85:17:da:cf:75:c0:80:0a:3a:ac:a6:16:ae:43:d0:6e:
3e:48:cf:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:44 2026 by rpki-client