Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
File: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft (raw, json)
Hash identifier: mjQgbOFjpSa5KaMabXJdhQ5K6xcAx9iPBCOYvUCBIiY=
Subject key identifier: 76:C1:9C:1A:7E:EB:33:01:87:A7:04:D1:7E:15:ED:79:2B:E9:71:CC
Authority key identifier: E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
Certificate issuer: /CN=e312f441382d5ba1d80df459bd46c0a31590e72f
Certificate serial: 019D389C3B15BFB23CC92975E44C40904A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
Manifest number: 042C
Signing time: Sun 29 Mar 2026 08:00:55 +0000
Manifest this update: Sun 29 Mar 2026 08:00:55 +0000
Manifest next update: Mon 30 Mar 2026 08:00:55 +0000
Files and hashes: 1: 4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl (hash: bxYDly+RPaPJ8H868HEBhSOsiu8b/KxKTJqtew+7Bzo=)
2: FqEPqAF1w4Xbi11RnoaKy9R4Z40.roa (hash: GRwxJaIJLS4eVDlQIIx4t+X6+buzHRZw5GpMOZnwve4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3b:15:bf:b2:3c:c9:29:75:e4:4c:40:90:4a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e312f441382d5ba1d80df459bd46c0a31590e72f
Validity
Not Before: Mar 29 08:00:55 2026 GMT
Not After : Mar 30 08:00:55 2026 GMT
Subject: CN=76c19c1a7eeb330187a704d17e15ed792be971cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7d:6c:b3:aa:97:3f:5b:64:bd:5a:2f:73:20:
ea:cc:98:af:80:14:dd:59:66:bd:e3:08:29:db:a6:
bb:6b:23:00:77:39:51:27:38:4a:df:6c:73:6c:aa:
b3:02:77:fa:a5:48:3c:38:42:1c:b9:75:83:6a:2f:
b7:f2:c6:f8:f5:5b:df:a4:fa:3c:47:2a:b5:f1:db:
45:3c:7f:a6:45:73:cf:cb:10:05:73:65:be:25:c6:
53:f9:d8:c6:26:dd:58:27:00:16:2e:ed:ee:78:ca:
5b:95:64:0d:34:e0:40:be:25:05:c0:7d:3f:23:a1:
45:4e:16:ad:69:03:46:bc:fa:8b:0d:05:1d:8d:86:
f0:0a:e1:a4:20:71:89:69:9f:73:55:07:b7:bf:c8:
c9:9e:52:f3:0c:ac:4a:33:b6:80:79:ef:2c:06:df:
0b:41:6a:93:ab:eb:38:b4:d6:4d:2a:39:f3:40:39:
92:c1:c6:9a:97:1e:30:39:df:bf:d8:18:89:75:0e:
92:7b:49:0b:71:37:64:df:69:20:ad:c1:74:ba:2e:
0e:9c:be:e8:31:de:e8:32:91:97:41:51:56:ac:7a:
e1:cc:36:e4:8e:5a:94:9b:14:9d:5a:18:46:7e:39:
ac:48:e5:35:f5:2e:fa:b7:c9:51:a0:56:ec:c9:22:
39:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:C1:9C:1A:7E:EB:33:01:87:A7:04:D1:7E:15:ED:79:2B:E9:71:CC
X509v3 Authority Key Identifier:
keyid:E3:12:F4:41:38:2D:5B:A1:D8:0D:F4:59:BD:46:C0:A3:15:90:E7:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/1162e7-4f74-4e69-ba99-b80efbd68bfd/1/4xL0QTgtW6HYDfRZvUbAoxWQ5y8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:6e:24:ed:e8:cc:28:69:53:25:cc:87:54:f3:26:5a:04:f1:
e0:08:e5:5a:a8:7f:b3:75:de:07:41:b9:36:4f:6c:17:21:9e:
4d:11:c0:53:4d:44:db:16:bf:e5:4b:e3:9f:87:e1:ab:a2:9b:
f8:c0:f8:de:4a:38:1e:41:d0:1a:83:96:ba:be:a0:e3:71:a4:
e4:cb:b7:91:0c:db:2d:56:68:eb:a0:ee:77:03:95:54:a6:fd:
b6:47:61:1d:d6:80:1c:53:64:54:15:e0:47:3e:5a:c4:11:7f:
9c:c2:62:a3:c6:c3:c9:76:86:b5:4a:da:a7:ac:2e:f8:a0:5f:
38:3d:58:7a:9d:b7:db:5c:f5:19:34:bd:7f:77:3c:da:55:a8:
9b:ad:09:20:d0:7c:d7:6f:f1:14:cd:31:25:3c:33:30:88:f6:
e4:35:5e:26:19:10:0f:0e:12:b3:f5:1d:c7:b5:27:46:62:9b:
ae:aa:96:77:c2:b9:ca:a7:59:be:f5:09:61:e8:33:20:7c:25:
b4:55:2a:af:06:14:8b:40:b4:c3:65:82:c8:ef:62:09:26:c0:
fa:f6:91:c7:54:f9:a5:00:04:52:fe:56:cb:92:4b:cb:30:4b:
35:34:c5:81:e4:aa:cb:cd:87:5d:eb:f1:76:8b:3c:ba:c3:01:
e1:44:30:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:30 2026 by rpki-client