Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File: 4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier: sYeWbXUmmeKwedhRxsgkfqWBDBWSkOX7thSxJAVUvDQ=
Subject key identifier: 19:B7:00:C8:2A:69:F2:77:D7:F9:29:A8:8A:F0:F3:AB:22:B4:16:B5
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 019D37893DD7C3C9F3AF96BE9E42B8954268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number: 07B5
Signing time: Sun 29 Mar 2026 03:00:34 +0000
Manifest this update: Sun 29 Mar 2026 03:00:34 +0000
Manifest next update: Mon 30 Mar 2026 03:00:34 +0000
Files and hashes: 1: 22Qs5ZZUH-o_UxeMTTaGlozw9ck.roa (hash: dzmFhhN9JFvpfi1wur97KqUtYf7OFbub2fPBQrwEANI=)
2: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: GMfh8Ax2HHDYLtoOQhBkheW3p5+dVLKpptceaijwloU=)
3: OOmJ-RkbduxK-k7822kHHTnwfho.roa (hash: Zhhmx3+Bddmr+hDQFTAMK3LPfl5DC3igpcEZIPBCFZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:3d:d7:c3:c9:f3:af:96:be:9e:42:b8:95:42:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Mar 29 03:00:34 2026 GMT
Not After : Mar 30 03:00:34 2026 GMT
Subject: CN=19b700c82a69f277d7f929a88af0f3ab22b416b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:78:51:8d:00:85:7a:9b:ad:5e:53:18:83:
5d:73:33:1b:34:f0:95:e8:20:6d:3e:35:2b:4b:52:
c1:c9:a9:6e:23:49:b8:9a:38:4c:65:8f:42:b5:f2:
05:19:b1:1d:55:3d:4d:93:b7:87:ae:c0:80:0d:75:
46:94:f9:3b:23:13:47:4e:3c:fb:ac:3e:3d:2b:79:
65:20:50:a0:d6:cf:79:34:d5:88:93:46:e7:b1:3b:
e1:d9:6f:e0:d9:2b:f1:7f:dd:58:d1:49:69:31:bc:
6d:61:0d:5d:b1:f6:d5:c1:b5:2a:1d:fd:26:3e:9a:
5a:65:82:d5:a6:95:db:46:a6:df:4c:64:e0:42:59:
6e:0e:13:f0:e9:00:97:ed:56:94:54:2a:bb:82:b9:
21:fe:27:70:aa:db:ea:df:f8:44:82:72:9a:bc:f9:
72:2b:fe:12:92:f0:31:07:2c:90:08:1b:bd:e5:4a:
4b:72:ff:71:fe:aa:56:ea:57:c0:ee:e8:4a:a5:d0:
39:f5:d8:05:1c:22:a4:cb:10:03:5a:5e:58:64:23:
d4:3a:6e:21:24:6b:cc:65:5a:ca:61:c4:74:ed:6f:
6a:c2:b9:7b:1d:9d:9a:f5:15:f9:f8:f7:68:b3:d3:
d9:58:49:54:6f:99:dd:47:04:6b:75:55:68:03:dc:
3f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B7:00:C8:2A:69:F2:77:D7:F9:29:A8:8A:F0:F3:AB:22:B4:16:B5
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:29:65:8c:a2:b1:65:ec:5f:bb:fc:7c:3c:6f:50:da:a3:1f:
51:3f:0d:6c:3a:be:76:db:74:c7:71:1b:6a:67:78:c6:80:94:
94:76:8a:76:0f:2f:40:37:d9:39:5c:40:9b:08:e5:8f:b2:8c:
3d:6c:2d:c0:11:bc:d9:ac:a7:62:00:7c:50:73:77:20:c6:ea:
e7:dd:79:70:fe:49:1d:83:e9:25:61:8b:ab:bf:76:ec:e6:9b:
6d:36:74:5d:21:a8:aa:bc:8e:1a:73:0e:50:29:f0:e3:35:8f:
de:08:83:6b:17:3b:39:19:95:3d:82:af:2b:57:02:c1:ee:af:
9c:59:ff:75:1a:58:2d:28:87:35:78:b1:8e:cc:73:e9:07:91:
f5:ec:5d:8a:3c:dc:df:3c:33:2e:fb:51:e5:6b:16:36:8e:ee:
95:c3:12:9a:84:5f:4e:a2:58:a5:59:c1:98:14:b0:cd:d6:97:
27:58:f4:49:03:66:78:22:2b:e9:46:2e:ca:26:48:73:40:7a:
43:7a:19:7b:17:32:27:3b:78:50:a5:b3:53:80:39:4f:d2:d9:
33:4d:9a:07:c7:e8:ca:92:b9:cf:d5:e4:48:cf:83:e7:73:0d:
86:7c:74:24:24:8c:5e:6c:f1:14:eb:e9:ac:57:b3:21:91:6a:
cc:73:b9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:05 2026 by rpki-client