Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File: 4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier: ZmpJq8IsGVEMCZBXgKcTKZgVwWNPQsu5KGZAzq/VzfU=
Subject key identifier: AA:0D:2A:1B:37:48:86:E4:A0:84:5F:E8:3B:17:CD:09:C2:CC:65:EA
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer: /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial: 019CBF965ACAF8406390D52EF2CE2DB9837F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number: 0EE7
Signing time: Thu 05 Mar 2026 20:00:27 +0000
Manifest this update: Thu 05 Mar 2026 20:00:27 +0000
Manifest next update: Fri 06 Mar 2026 20:00:27 +0000
Files and hashes: 1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: igr2WK0zwYpvPBU82F7fumYOr8Ab2Ci9Hdim5KBBUtM=)
2: DXNfK9iDbAyacvGKo8OhC8gh6Ws.roa (hash: ie8rWldwV9B67n5/EffGRxDtlu39UUHKQ/tSe/j67xQ=)
3: OD1vu1xvYZtuVSOWeWsoiRek5JE.roa (hash: wh893NwS229KIBxcphoahE5rVlzAGosMJTAhq3iAiRg=)
4: kpJpjf8DEZUzbeocou67-xPbGzs.roa (hash: 6kfdp9N3WAjBikoQRDTNTZ1g1ptesnrFillaOS+4UCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bf:96:5a:ca:f8:40:63:90:d5:2e:f2:ce:2d:b9:83:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
Validity
Not Before: Mar 5 20:00:27 2026 GMT
Not After : Mar 6 20:00:27 2026 GMT
Subject: CN=aa0d2a1b374886e4a0845fe83b17cd09c2cc65ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:3a:0b:38:18:c0:7a:f3:52:59:79:3e:5a:
00:18:7b:4e:9a:ff:dd:97:b1:db:37:cd:92:c4:57:
7c:20:2a:7d:96:e4:21:da:b8:a3:dd:6f:67:59:b3:
e3:2d:2d:6f:e2:8a:82:e4:3c:2f:cb:e0:84:28:e0:
9d:71:ac:ed:42:8f:94:73:a0:8f:cb:60:1c:97:fe:
ec:43:35:5a:c0:ab:c7:63:a8:d3:3c:93:0f:8f:7b:
20:57:95:6c:02:0b:d2:6b:71:6a:ee:81:89:89:ea:
a8:b0:e9:b4:e4:4c:4f:c2:1f:00:60:d4:c5:28:7d:
28:ce:57:76:23:f1:e8:f1:a8:3b:40:49:66:c3:ae:
4f:af:14:7a:28:a1:03:ee:7d:a3:74:44:08:3b:10:
12:23:33:7d:06:fe:96:11:48:33:52:1a:ef:53:af:
22:c3:12:a9:5a:2b:f7:b6:18:92:51:00:fb:60:bb:
ac:b6:e9:47:5e:4b:68:f1:62:f0:c3:6b:25:5b:69:
30:18:59:e5:7b:70:be:28:d8:ec:6e:67:12:47:4d:
6f:71:50:e5:e9:ed:75:31:c3:5f:6d:4d:b9:dc:ec:
74:8b:5e:66:bf:87:a4:92:6d:49:99:ae:19:d3:72:
15:e1:38:51:72:63:e2:13:ad:70:41:dc:b9:d3:3a:
b8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0D:2A:1B:37:48:86:E4:A0:84:5F:E8:3B:17:CD:09:C2:CC:65:EA
X509v3 Authority Key Identifier:
keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:f1:da:c9:02:bf:4e:02:25:16:3a:0d:e2:3d:f2:6b:4d:b2:
d1:34:a5:d4:61:fc:cc:89:f5:68:41:de:5a:43:57:d3:07:5c:
23:f1:5a:c1:48:ab:f8:64:f1:22:22:66:82:da:18:3e:c7:5e:
c1:07:4f:e2:4d:16:0e:4f:12:86:cc:25:98:64:1a:0b:39:aa:
15:e5:ed:d2:e7:20:9e:18:a3:a8:50:2a:8a:56:df:14:c1:9a:
1a:a5:82:1e:a8:3d:88:42:f2:d9:e4:4c:d2:00:fc:d8:19:56:
0a:64:27:f0:1a:09:02:4b:f3:42:c7:94:bf:8d:5f:93:e1:ed:
f0:9b:4a:7d:04:a3:f1:9d:c2:f2:fb:07:79:02:e9:aa:34:23:
d7:f2:41:1a:9f:23:43:f7:55:0b:a8:ae:54:9f:fb:48:ad:41:
b0:c2:5b:21:91:eb:30:91:09:a0:f1:af:0a:5b:a0:4d:4b:91:
af:1d:a1:2f:3d:e8:c2:55:0e:d5:9e:2e:06:d1:4b:e2:2e:e1:
5c:ba:4f:41:b9:ee:1c:48:4f:78:51:02:4e:93:8c:14:3c:8a:
97:33:4c:38:b8:d5:8d:7f:fd:8d:e8:fb:e1:2d:a6:19:d3:f0:
80:d0:7b:44:66:50:95:37:71:f0:b1:6a:95:ca:26:30:ca:22:
d2:22:c8:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 22:04:31 2026 by rpki-client