Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: /1/NCzEzy8EpvfLQv6sW7n6rJZ3ISJ7NTm18xwWuCVQ=
Subject key identifier: A3:5D:21:A0:A4:2F:42:6C:BC:A4:D3:1B:CC:B2:BD:74:EF:8A:9D:3A
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 019D37F7877B433F7D254BC86FACCA43E1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:01:02 +0000
Manifest this update: Sun 29 Mar 2026 05:01:02 +0000
Manifest next update: Mon 30 Mar 2026 05:01:02 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: NujsJL7bQeL9mYUTSkJXAHvkYONW6+TSPQqDpRUXjXw=)
2: J1Zd6j9Lcwtys2PuV4W0VrM-mt4.roa (hash: 0QTHJDhGxK5m6zxqs1yz2ztZUhs7s6VuZHp2XlfhZqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:87:7b:43:3f:7d:25:4b:c8:6f:ac:ca:43:e1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Mar 29 05:01:02 2026 GMT
Not After : Mar 30 05:01:02 2026 GMT
Subject: CN=a35d21a0a42f426cbca4d31bccb2bd74ef8a9d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5f:36:7c:d7:9a:db:0c:2b:73:1d:56:ac:50:
94:e1:f4:88:54:d7:c1:26:ad:20:b9:86:26:cb:75:
4f:11:68:77:3a:c5:73:91:20:6b:a4:7a:ac:5e:7b:
0e:b2:ef:17:2f:50:24:db:b3:f2:e7:72:ae:22:52:
c2:83:c9:0e:e2:4e:09:54:39:40:5e:36:89:a5:b5:
67:39:75:2e:a2:ae:2f:e6:87:b5:b8:d3:e0:04:5d:
e7:cb:b9:e4:cc:f4:20:78:77:e9:a0:06:85:89:cf:
10:67:11:9c:c9:39:7c:fa:52:9f:03:f9:76:5b:c5:
dc:c8:61:87:a5:93:89:e5:90:55:dc:4c:bd:e4:7e:
8a:33:72:8b:48:37:83:7a:e2:5a:9c:ac:ec:cd:a9:
4b:d5:50:5f:a7:c1:36:b9:4b:27:ee:13:5d:a7:a0:
0c:88:96:b7:2f:c8:df:f9:6d:4c:63:e9:4b:b7:c8:
d4:7e:43:54:31:eb:78:00:94:9a:83:c9:90:fa:2c:
19:c3:06:93:b4:5b:33:91:e1:ad:19:fe:98:60:83:
cd:19:49:34:05:d4:9a:e5:d8:f8:45:e9:84:19:d5:
03:3c:8e:71:de:fa:ac:07:b7:39:fb:a6:00:17:0c:
eb:78:7c:49:f5:76:d8:42:11:b6:34:f5:c7:6d:75:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5D:21:A0:A4:2F:42:6C:BC:A4:D3:1B:CC:B2:BD:74:EF:8A:9D:3A
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fa:9b:d6:e1:89:0a:fe:f9:94:e6:6e:29:4a:bf:41:a9:b4:
ef:fd:c7:56:ab:65:1b:19:6d:ef:d5:1f:b3:10:f6:ea:25:84:
92:a1:55:e4:46:bd:18:33:90:06:da:e1:b0:1a:0f:7c:a8:99:
35:61:5e:46:df:61:43:7e:c7:8a:c5:4b:09:b5:5c:30:64:5f:
30:81:8b:da:5d:36:4a:99:51:92:7b:e7:e8:32:44:12:14:f7:
8e:fe:78:02:9e:42:57:ae:a3:92:0c:f3:d5:82:0f:3c:46:5a:
ef:a1:11:98:11:2d:dc:fd:00:85:fc:f3:fb:69:ce:d7:52:1e:
d1:5e:f9:50:66:08:33:c1:bd:c3:36:74:eb:9f:7d:fc:c8:d4:
00:61:3a:62:95:b3:47:60:31:72:5f:c8:a0:94:4a:e0:04:bd:
91:9d:8e:2e:63:ea:e7:43:66:73:13:08:f3:7c:2b:2b:54:10:
aa:6a:8a:20:c1:e9:0e:90:33:a5:d5:06:24:a4:37:16:92:ca:
d4:9b:57:db:41:74:a4:59:52:44:82:51:ae:f4:08:e4:e0:2d:
ba:aa:b7:6b:2b:7a:37:06:1f:f4:5e:47:36:11:2d:d1:60:65:
05:f4:7a:b7:dc:2f:ea:39:dd:2f:cf:a0:38:98:e9:41:67:1d:
84:31:78:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:33 2026 by rpki-client