Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
File: k4EH0RRkaaEaY-X10tfbj28717M.mft (raw, json)
Hash identifier: doge1C9Et8/COKPjNNxn7v/nxDJ49vYG9InXVjNiIA8=
Subject key identifier: DD:34:CF:B3:18:46:B0:3E:41:F8:22:3A:48:02:7F:5E:03:C2:13:85
Authority key identifier: 93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3
Certificate issuer: /CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
Certificate serial: 019D386621380249993BB9B5D53EFE42C39A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
Manifest number: 08F3
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: k4EH0RRkaaEaY-X10tfbj28717M.crl (hash: EuElwsQWc748RaeykwfZENT5YyyaP21NJvylapy10o0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:21:38:02:49:99:3b:b9:b5:d5:3e:fe:42:c3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938107d1146469a11a63e5f5d2d7db8f6f3bd7b3
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=dd34cfb31846b03e41f8223a48027f5e03c21385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:96:06:b2:23:9f:f3:94:e9:47:4b:b6:eb:
e0:a1:36:2b:1c:1d:21:bc:a2:3f:ea:fc:84:a9:52:
2d:12:58:38:ec:a5:2b:2d:64:c7:55:4a:d2:f8:5a:
e5:df:eb:9a:59:0a:2c:85:8c:de:ab:5d:22:86:07:
9f:43:90:96:3c:38:2f:cf:c6:c7:97:0b:9f:3f:0e:
c2:97:49:b7:a1:c9:f8:e9:15:11:6c:e7:a8:52:cc:
6b:34:4d:49:46:8c:e6:5f:30:af:7a:2b:71:be:0a:
45:cf:74:4f:6f:fe:fc:8d:61:61:ec:2a:3c:ec:40:
2c:93:d2:ac:ce:da:1a:fe:38:f9:9a:2c:95:67:67:
97:64:11:cc:44:17:eb:51:76:fd:d1:68:55:a8:b1:
97:51:35:4b:0e:62:2d:35:49:ec:7d:86:67:b0:4f:
71:5f:d4:8d:5a:30:99:3b:49:70:6f:40:1b:58:e2:
d7:b9:80:86:c1:49:14:9c:3c:e3:d9:90:86:ff:cc:
65:69:de:5f:91:37:b0:74:d1:1c:b4:1c:34:90:7c:
b8:34:18:e4:c0:46:76:94:2e:64:a1:6e:a1:8c:de:
e8:b1:06:81:a1:e7:b4:20:ad:80:3f:71:61:70:16:
3c:1f:3a:6a:a1:66:d7:ea:06:73:6d:ac:cc:f2:4a:
cb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:34:CF:B3:18:46:B0:3E:41:F8:22:3A:48:02:7F:5E:03:C2:13:85
X509v3 Authority Key Identifier:
keyid:93:81:07:D1:14:64:69:A1:1A:63:E5:F5:D2:D7:DB:8F:6F:3B:D7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4EH0RRkaaEaY-X10tfbj28717M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aff4a9-3c5e-4a71-b524-cbc6ccc08932/1/k4EH0RRkaaEaY-X10tfbj28717M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2a:90:f3:ea:7f:52:d2:19:46:88:16:79:ae:42:24:9a:01:
38:e6:55:8b:e2:c8:3f:96:5a:54:3d:e4:7a:aa:54:04:59:15:
87:14:21:dc:09:ae:5e:4a:c4:ee:9d:f2:f3:84:89:9a:06:b5:
bf:cf:13:fa:b3:e3:c2:f3:34:0f:d0:fb:3b:08:c6:3d:a0:7e:
2d:22:4e:0e:cc:32:6a:5c:bc:ac:a0:41:e8:d4:80:08:5d:20:
8d:7b:ff:dc:ce:1e:4d:de:d4:0a:b6:b6:65:70:87:e4:5b:d9:
1b:13:6d:e1:e3:c9:00:4a:cc:a5:36:3c:b6:6a:9a:59:75:9e:
7c:dc:5c:8a:ff:82:a9:29:ee:99:17:b5:9c:d6:dc:32:5b:8c:
75:78:ab:ba:12:fd:70:28:0f:ea:8c:ca:b1:c9:94:dd:5e:a2:
76:f5:9c:97:22:07:82:3e:1b:34:11:c5:59:20:9f:94:4c:9b:
71:e4:57:13:6e:69:cb:ee:d7:be:97:a5:6b:44:55:db:63:5f:
11:07:c7:72:b6:f0:f8:85:4e:14:65:8a:f6:c3:e5:f5:86:8c:
69:49:06:ab:f8:70:cf:9d:f4:d3:b0:aa:6f:e4:50:11:4b:18:
ce:04:e8:f5:16:47:fb:0e:97:b0:53:1b:60:97:bd:93:3f:de:
ff:cd:52:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:45 2026 by rpki-client