Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
File: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft (raw, json)
Hash identifier: KV/ERlOo1wtr2hlAO5nID75F6EpI/2GRCib8kiWvJ6k=
Subject key identifier: A6:26:C5:61:66:D9:04:24:9D:C2:4B:4E:78:05:AC:5C:C1:60:1A:88
Authority key identifier: E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
Certificate issuer: /CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Certificate serial: 019D4243C5A85DCB0DF2A3A4C512FF187ED8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
Manifest number: 1896
Signing time: Tue 31 Mar 2026 05:00:30 +0000
Manifest this update: Tue 31 Mar 2026 05:00:30 +0000
Manifest next update: Wed 01 Apr 2026 05:00:30 +0000
Files and hashes: 1: 28-UkpXxAzZbO8vuIBQRnkr5eRE.roa (hash: YFs8JOoUa4SUku2tRg5QnVz5rp4j/Pv7WxhvaMnlFHg=)
2: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl (hash: BC4lbzKRdd5y5Feetr30S+Mc+LQm/WbZMG3NdeHipC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 31 Mar 2026 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:43:c5:a8:5d:cb:0d:f2:a3:a4:c5:12:ff:18:7e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Validity
Not Before: Mar 31 05:00:30 2026 GMT
Not After : Apr 1 05:00:30 2026 GMT
Subject: CN=a626c56166d904249dc24b4e7805ac5cc1601a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1e:82:68:81:cd:62:2e:0d:13:41:c0:f8:e0:
61:cb:a4:9f:ce:82:58:3f:aa:ca:5b:d4:2b:c5:aa:
9d:17:c2:14:03:dc:f4:e4:97:b3:62:68:00:4d:e3:
de:2d:8a:df:85:6b:dc:d4:3b:c2:df:68:11:08:e0:
bd:1b:54:41:2e:4b:c5:11:e2:a3:08:c3:a1:fd:cc:
35:64:a3:88:6e:11:33:b5:20:a1:59:23:46:7f:1c:
be:8c:e3:13:0e:10:c2:e6:48:be:a8:15:9d:fa:11:
27:01:f0:5a:8a:b7:c5:00:de:4d:70:2b:be:1f:6e:
da:12:ed:0e:2c:c3:bf:d8:be:4b:40:1d:1d:37:27:
d3:a7:2e:be:a7:c5:75:d6:a9:a2:07:77:1e:bd:be:
e0:25:f2:63:a6:af:4d:21:31:04:f6:65:8d:3a:6c:
00:d5:71:4a:65:68:da:7f:1c:ab:61:7d:78:2a:28:
57:fc:af:33:62:89:f3:04:21:88:c8:0c:d1:1b:07:
76:53:a4:15:7a:35:e5:dc:5d:6a:d5:ba:54:02:a8:
9e:97:46:94:11:7f:ff:2f:4f:87:f1:46:4f:f5:a0:
7e:64:cf:47:06:ce:c7:a0:68:b1:55:0b:41:88:a7:
53:79:b6:66:37:84:05:10:1e:ee:87:6d:dd:ad:99:
43:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:26:C5:61:66:D9:04:24:9D:C2:4B:4E:78:05:AC:5C:C1:60:1A:88
X509v3 Authority Key Identifier:
keyid:E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b1:b5:be:ee:71:6a:d5:e5:82:ea:a5:23:5e:2c:12:99:bc:
ff:ff:1a:ca:11:30:08:be:2c:f1:df:67:63:39:35:6c:2a:75:
c3:fb:8c:cf:dc:7b:26:10:37:42:8c:9e:1d:83:e8:20:35:e4:
44:a5:60:f3:81:10:7a:e1:3d:80:fe:a6:18:16:19:98:55:64:
46:e8:2f:32:9b:76:fc:ac:ed:60:bd:e8:85:98:b5:09:87:d8:
7f:ce:90:63:fc:cc:39:02:24:0b:20:85:19:24:4a:82:97:eb:
b0:8a:19:4b:43:48:b4:cf:1c:3a:18:be:56:c3:1c:04:11:38:
8a:06:67:11:b6:52:bd:6f:40:94:b7:63:15:60:bb:c6:dd:46:
4d:ec:43:99:a0:87:00:cb:7d:06:c2:ac:b2:b0:62:e0:93:10:
7a:8c:f9:e2:32:4c:f1:1b:19:aa:80:6b:92:a7:46:7e:00:e3:
02:86:30:a0:d1:cb:df:65:fd:80:0a:75:73:ca:8e:56:8f:bd:
c9:65:e5:7c:b2:44:ba:73:9b:f8:d0:2d:e0:37:cd:ac:c6:48:
99:f4:6c:c4:80:39:03:c6:db:04:80:1f:cd:bf:61:3c:23:b2:
0c:65:ac:0e:54:d8:fe:ad:09:bc:b6:06:59:19:f5:d4:2f:86:
a2:f3:e0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 09:17:37 2026 by rpki-client