Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
File: 4COOIod_cwOWQAfOPjQG9frZSWI.mft (raw, json)
Hash identifier: JqJeOPwz27fPQinVYFPye5K5TQXqEuHbPVVZE3lHcGE=
Subject key identifier: 18:52:E8:F6:7B:9D:CD:CE:C3:51:D1:A7:50:8E:04:A2:CF:EC:5D:32
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial: 019D38660F3A02BCD6002798EC9C18FE2040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:45 +0000
Manifest this update: Sun 29 Mar 2026 07:01:45 +0000
Manifest next update: Mon 30 Mar 2026 07:01:45 +0000
Files and hashes: 1: 4COOIod_cwOWQAfOPjQG9frZSWI.crl (hash: /aIiXsZ3tqwDXeya16h5PJtY23w55c86D9OITnxZgz0=)
2: MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa (hash: X0nH2HeW8oMQ0R4XVjts1kBv71dyXZYfSTlTWrarM3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0f:3a:02:bc:d6:00:27:98:ec:9c:18:fe:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
Validity
Not Before: Mar 29 07:01:45 2026 GMT
Not After : Mar 30 07:01:45 2026 GMT
Subject: CN=1852e8f67b9dcdcec351d1a7508e04a2cfec5d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9f:78:eb:47:9b:de:75:47:ac:a4:c1:7b:2e:
7e:f4:7b:bf:7d:ab:b7:9a:bb:3e:04:67:e9:1f:c3:
cd:65:7e:0b:25:a7:1b:bb:2d:1f:14:e0:18:b2:c9:
50:ef:61:6f:a8:29:5f:24:2f:88:d1:4f:06:b1:d7:
24:4b:f2:2f:27:da:f6:67:27:b5:36:4b:2a:28:87:
2b:6d:d3:c3:00:b4:fc:82:c0:44:3c:e6:3e:f2:7a:
2b:07:83:ff:9a:80:52:ae:cd:03:99:d3:39:1f:08:
2b:86:e9:77:51:d6:b7:6d:fc:93:fc:1c:fd:e3:80:
d8:64:6b:a1:c5:e2:ff:55:3a:cd:3c:21:b8:f1:f9:
ae:69:12:14:c5:dd:78:e4:8a:97:b0:d3:5e:87:76:
32:11:74:7f:83:23:f5:b4:00:41:48:25:d7:1a:1a:
df:70:e5:69:19:4b:c6:1a:68:69:f3:7a:77:1d:cf:
85:49:97:f7:ad:94:b9:9a:a9:29:96:4b:ac:e0:39:
de:2f:6c:10:f5:c2:45:20:e8:03:3a:76:46:f7:aa:
8b:9b:c9:bd:2d:43:34:0c:d3:81:29:37:68:5f:46:
05:ce:00:81:99:77:98:a4:ca:f6:d5:26:f7:af:62:
0c:b2:71:a2:95:c1:7b:f9:a8:86:9f:e5:92:26:2b:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:52:E8:F6:7B:9D:CD:CE:C3:51:D1:A7:50:8E:04:A2:CF:EC:5D:32
X509v3 Authority Key Identifier:
keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:0b:39:8b:fb:9d:b4:cf:ec:65:e4:19:d0:96:7f:4e:43:60:
f7:7f:08:0a:8e:44:4e:d1:14:82:21:d1:ce:21:15:07:99:f0:
ec:be:6b:62:78:c6:e6:c2:1d:04:02:a0:4b:79:19:9b:5e:40:
c6:87:d6:c0:d8:35:e6:16:1e:cc:7f:78:0d:d5:9a:04:95:92:
79:5f:7a:a4:cd:9c:2f:bc:59:d9:2a:43:17:b3:7c:68:98:85:
66:39:87:a6:75:99:75:31:4f:49:8c:91:64:df:a0:3b:0a:f3:
8d:09:8b:3e:a7:ee:76:38:6c:87:9c:f6:35:ec:c2:83:01:eb:
b2:70:d5:4c:f3:1f:8c:55:02:22:87:ab:65:66:5f:6a:e4:9f:
dd:06:6c:ed:53:bf:6c:29:58:7f:48:56:4b:51:8b:a6:e3:1a:
42:fd:7d:fd:9d:19:ac:a7:a9:7f:b7:6b:b9:2b:a5:60:e9:a5:
91:fd:c6:98:4f:65:93:28:62:5a:89:e0:e3:f2:52:7e:94:8d:
9d:46:e0:4d:81:0e:01:6f:f8:d7:f2:43:6b:91:b4:f1:5a:0a:
27:86:aa:24:7c:a0:4e:58:bd:c2:e6:71:d6:9d:4f:38:db:d2:
42:a9:f4:3f:5a:14:50:cf:28:df:82:b3:82:b4:78:1b:6d:cd:
61:e5:94:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:10 2026 by rpki-client