Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
File: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft (raw, json)
Hash identifier: Asffk071ug/JP6I13UUJY/XyagGHp10DA9WPB7xrF/E=
Subject key identifier: 16:B0:BC:1D:A1:21:D6:AB:4A:BD:E0:90:43:D3:2B:CE:38:21:91:CC
Authority key identifier: B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A
Certificate issuer: /CN=b785ec73dc181f9935659f58aed208532a2c2a6a
Certificate serial: 019D3A53AA199F32EE65BECAF8CDEE60F33C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
Manifest number: 041C
Signing time: Sun 29 Mar 2026 16:00:54 +0000
Manifest this update: Sun 29 Mar 2026 16:00:54 +0000
Manifest next update: Mon 30 Mar 2026 16:00:54 +0000
Files and hashes: 1: t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl (hash: eRRZgrMyAo8dqA5G5EpvJ3/XLQFBqWWYR2yco61AhFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:aa:19:9f:32:ee:65:be:ca:f8:cd:ee:60:f3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b785ec73dc181f9935659f58aed208532a2c2a6a
Validity
Not Before: Mar 29 16:00:54 2026 GMT
Not After : Mar 30 16:00:54 2026 GMT
Subject: CN=16b0bc1da121d6ab4abde09043d32bce382191cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1f:ba:41:54:40:dc:98:de:81:1f:94:b8:fc:
6a:f9:bc:cb:dd:a9:55:c5:92:74:b2:ba:f4:2d:cc:
11:97:64:ae:5e:ae:42:8f:73:12:46:77:8b:a4:95:
fb:c9:44:a1:e1:65:a2:ec:09:94:dd:88:4a:1a:47:
8f:04:9c:fb:6f:0b:eb:b7:6f:4a:cf:19:9c:c7:90:
50:74:39:2f:64:60:cf:57:58:af:59:f9:fe:7b:c0:
ae:ca:c9:21:c7:db:ca:af:d5:cf:3e:be:d9:70:9f:
e6:5d:9e:b0:d3:58:39:c1:61:a6:cb:30:32:8d:b7:
91:3e:95:41:29:3c:09:28:bb:7e:b8:31:36:d0:32:
39:6b:b5:c7:02:1a:7e:b9:11:4a:df:29:2c:ae:79:
c6:dd:1c:ba:2b:be:84:90:6e:77:c2:71:95:34:3c:
1c:0a:70:37:57:88:4c:2d:df:64:f5:e7:62:08:62:
66:ae:f6:71:f1:2a:69:a3:36:d3:c6:ad:e8:2b:82:
d0:f1:fe:89:85:8c:39:34:57:0e:52:57:e3:c6:3e:
4e:25:e7:83:9b:cd:2b:a8:f8:e9:57:56:14:fc:5e:
6e:b4:a7:10:f5:f4:e1:3b:61:a4:a6:ad:82:ba:f8:
4c:2d:1b:3f:f7:5b:01:64:1e:25:f2:f5:22:2a:33:
b1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B0:BC:1D:A1:21:D6:AB:4A:BD:E0:90:43:D3:2B:CE:38:21:91:CC
X509v3 Authority Key Identifier:
keyid:B7:85:EC:73:DC:18:1F:99:35:65:9F:58:AE:D2:08:53:2A:2C:2A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e85418-64b3-444b-913a-63c2ba4c996c/1/t4Xsc9wYH5k1ZZ9YrtIIUyosKmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ce:f7:b1:41:7f:44:ad:4c:d0:f6:8a:9c:ac:92:92:f9:d2:
06:40:4e:ad:1a:35:c4:c1:52:5e:00:62:a0:d1:a4:ec:80:d6:
0a:b5:45:4a:18:80:4b:9b:7a:f3:04:5a:8e:72:9b:6e:31:62:
ff:cf:9b:92:7e:22:5f:1f:94:66:4c:c6:ba:f9:6d:bb:ca:d4:
7e:d0:19:e5:62:89:b3:ea:0a:9d:ae:79:cb:9a:46:7f:5e:9e:
9c:01:af:26:e7:20:e8:2c:3a:40:a5:c4:83:33:f8:4e:08:83:
cd:1a:1d:eb:a6:75:a7:3c:a9:10:36:7f:1c:82:bb:06:4f:76:
58:63:b5:e6:c1:43:9d:be:5b:5b:60:5f:b9:b9:b3:78:0a:05:
d4:11:47:fd:13:0e:bc:5f:37:1c:d5:37:93:62:6a:4a:a2:94:
4d:85:34:8e:a8:1c:7e:ac:30:45:b1:13:ee:31:76:10:9c:f6:
6f:00:ac:60:1b:6a:64:26:6d:57:69:87:e5:43:53:9c:f0:51:
cb:b1:01:b3:fb:e2:e8:05:05:b7:82:6c:dc:85:54:bc:6c:f2:
4a:11:a9:0a:a8:89:e0:42:de:4a:8f:f2:41:56:3a:71:3a:e0:
f4:ad:62:78:1c:05:21:b9:cc:2a:fd:36:3f:af:f6:42:d8:ff:
83:48:6b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:32:19 2026 by rpki-client