Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: 5NV7+SGAFX5cwW5o6Q/2LHavfDdDKY3BaMXfscPwdbg=
Subject key identifier: F4:90:C8:B9:7B:A5:6B:E1:16:B6:B4:D2:66:BF:15:36:68:00:C0:9A
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 019D3977ADF1AA96D126F37E4F5E1D448B11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 12:00:37 +0000
Manifest this update: Sun 29 Mar 2026 12:00:37 +0000
Manifest next update: Mon 30 Mar 2026 12:00:37 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: 19tic7rojXBpDMUH5iBTwdYB+PBXwEN1IM/wR+idU6w=)
2: FtpP7jqiRqsaewteqUCm2wyEXLM.roa (hash: MK0f39W8byL9gsiBPX02BzYZlhRpLBc93Ceao7rPOjg=)
3: hdmcNwLCjDXPBKKvWGbOncZxqck.roa (hash: kfdHlxSK8jc9HQk0SWqjLa4vIJVnr/xdG0pMDu9+AHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:ad:f1:aa:96:d1:26:f3:7e:4f:5e:1d:44:8b:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Mar 29 12:00:37 2026 GMT
Not After : Mar 30 12:00:37 2026 GMT
Subject: CN=f490c8b97ba56be116b6b4d266bf15366800c09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:45:32:19:00:4f:36:95:2a:24:02:d0:67:b1:
32:28:3c:eb:3d:14:e6:aa:e7:bf:3f:00:50:56:ff:
06:d5:91:47:e4:6e:c3:f0:13:a5:1f:91:50:62:a8:
d6:b4:16:1a:04:95:bb:d1:39:3a:73:ed:7f:03:2c:
58:d0:c3:cb:76:cf:4a:be:3a:c4:39:4b:27:d1:cf:
2f:49:99:a4:b6:d2:83:b6:43:bd:9d:7c:c6:4e:ab:
3c:a8:40:25:f1:7f:af:85:8c:84:15:f7:71:07:15:
bc:f7:56:fa:17:75:99:9c:2d:ce:1d:0d:76:7f:bb:
a8:a1:43:82:d4:46:d3:4d:ea:f7:b4:ad:41:be:15:
c6:b1:fc:cf:fc:04:0b:59:b9:f3:24:1c:9f:04:75:
f0:c9:30:a4:a2:c7:7a:83:68:8b:68:dc:a0:fc:81:
bc:d6:0a:80:9a:23:a2:f6:b7:99:3a:da:4b:15:26:
6b:cd:b9:7e:5a:32:df:d7:07:49:b5:b6:a7:4a:13:
90:18:83:24:d8:53:70:82:94:d7:e6:d1:d3:3a:4d:
c4:06:7d:73:0c:dd:e6:27:4c:5e:28:34:f6:2b:85:
b2:4c:c2:86:09:77:24:75:df:39:b0:8a:70:8e:f2:
61:92:cb:14:d7:1d:23:33:f7:f0:8e:5a:1a:f8:83:
aa:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:90:C8:B9:7B:A5:6B:E1:16:B6:B4:D2:66:BF:15:36:68:00:C0:9A
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:68:67:a4:f8:c5:b5:11:c0:23:41:aa:27:ca:c7:cf:84:86:
84:5e:43:c8:ae:c6:09:fc:79:95:2b:f1:14:d4:4e:e5:2e:4c:
c3:5b:4b:91:d3:40:7a:56:c1:c9:93:0e:f2:07:be:cc:89:cf:
86:53:09:35:b7:26:d4:13:0e:4d:f2:1e:ba:1f:41:53:34:29:
f2:4a:cd:c9:1e:b2:9c:8f:d2:69:7e:eb:6a:5b:bf:29:e9:84:
81:5f:91:92:91:2d:4d:83:9e:44:11:7c:f6:79:46:62:f0:7a:
2d:73:ef:a3:a1:da:28:61:6d:19:f7:7d:31:26:aa:dc:9e:56:
28:6d:c4:a2:29:47:87:da:e8:e2:f2:db:68:a0:d8:6a:f6:7e:
2c:53:40:6b:43:dd:c6:8e:4e:b3:e2:f8:03:55:d1:b3:ab:89:
f4:e8:a6:d3:a4:45:5b:31:72:7c:5a:fa:4f:58:ca:8d:6d:b4:
98:00:a8:75:f2:e9:cf:33:dd:5b:2f:f7:9b:ca:b1:cd:28:2d:
a1:c8:44:e6:69:7b:18:88:0e:43:74:fa:76:8d:a0:25:14:35:
f1:50:02:80:63:45:1a:f0:29:59:90:9e:cf:eb:2f:20:80:8b:
53:8b:d5:b2:21:e6:60:ef:e9:c2:ce:ab:93:09:ff:99:99:ad:
06:4c:f9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:59 2026 by rpki-client