Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: dtTF77vTLmxDcYLIu3dA/w+/9Xp4ZKPzvxJ9hPv/H6Y=
Subject key identifier: 2F:44:67:22:9B:D3:91:54:12:9F:B0:DB:FD:06:4B:2D:4D:D5:3B:34
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 019D37531094002E088A97D1EDE30AF15D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 0709
Signing time: Sun 29 Mar 2026 02:01:23 +0000
Manifest this update: Sun 29 Mar 2026 02:01:23 +0000
Manifest next update: Mon 30 Mar 2026 02:01:23 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: U2+shy11GjY3DpxBxQDmwSwLRUumPeMNsah/wVBdrv4=)
2: p_0XKV3exhd9uWdO5Cc3FmTs35I.roa (hash: vHzaqcFQuYBAr6NOnDqMX/4qIu/wE1PoUiKrWppcY/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:10:94:00:2e:08:8a:97:d1:ed:e3:0a:f1:5d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Mar 29 02:01:23 2026 GMT
Not After : Mar 30 02:01:23 2026 GMT
Subject: CN=2f4467229bd39154129fb0dbfd064b2d4dd53b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:35:9b:07:64:ab:b3:20:19:33:67:6b:b6:df:
f6:ef:ff:59:92:e6:ef:b3:3e:c1:47:22:6d:65:04:
92:05:00:df:76:d9:68:98:63:65:67:d0:2e:e1:3a:
72:03:fc:e4:90:77:16:ea:5a:0c:99:6d:ac:86:b9:
d5:da:23:09:8a:1f:e3:af:37:fb:49:bc:a2:93:19:
54:73:b8:a2:86:55:0f:a1:f3:29:58:78:95:0d:e6:
96:cb:a1:5c:95:a7:db:00:86:25:20:2f:d1:c9:5f:
83:96:3b:34:da:ff:e7:79:87:ce:f8:37:57:32:d1:
5a:1b:50:45:ca:09:8f:03:2e:9e:bc:5b:7a:93:0a:
7d:d3:6e:df:e8:7e:40:aa:82:a0:04:e9:6b:01:8b:
54:9f:0d:d4:00:1e:b2:a4:44:60:43:0d:6c:e6:63:
72:d0:b5:28:a4:bc:1a:0e:57:5d:91:53:cc:ce:1d:
6d:ed:01:28:b8:e0:d2:bc:4a:4f:4e:80:1a:7c:7e:
da:bf:2e:75:94:13:48:57:05:7e:d9:a1:10:48:b0:
62:05:c3:97:a1:8d:87:41:94:01:1f:fa:3c:88:bb:
18:ba:98:e9:99:78:c3:ba:75:26:2c:a6:47:db:9a:
e2:1a:4f:c4:a0:c3:e7:51:d1:16:23:83:cc:b4:fd:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:44:67:22:9B:D3:91:54:12:9F:B0:DB:FD:06:4B:2D:4D:D5:3B:34
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f2:ff:d6:81:41:e9:55:03:e6:65:ce:22:bf:e4:05:40:c4:
c1:f2:fc:cc:bd:05:14:23:d9:df:94:20:ca:1c:5c:e6:0a:93:
7a:23:e5:9a:4c:09:b2:92:0f:70:c4:51:23:8c:6f:2d:15:5d:
31:bb:b7:9a:51:d4:58:cf:c1:d3:19:26:f1:1a:ca:22:5a:a4:
b6:f8:9e:c9:6d:ad:aa:58:a9:48:77:65:61:24:8c:f4:1b:0e:
69:87:49:b2:a6:48:78:a2:7a:dc:3a:18:08:9d:92:a6:66:a0:
6b:97:5c:2f:80:dc:62:dc:b9:f2:7d:2b:2b:37:e9:65:a4:59:
61:99:36:4a:f1:00:a0:1d:6a:89:5e:12:ff:2d:0a:b4:eb:9f:
6c:7f:a5:ce:3f:0b:f5:59:66:04:93:f7:df:94:31:7c:5c:b2:
a9:90:13:d5:ca:11:e9:9b:04:1e:e4:59:85:e7:9e:e6:79:8c:
44:45:48:f5:dc:8d:e5:b1:5e:68:b4:35:c5:89:14:e5:f7:3a:
bb:04:6f:0a:34:86:c4:70:fa:88:0e:39:09:29:72:2d:0b:2d:
77:47:6a:67:2f:93:f5:18:00:3f:5d:36:63:62:52:00:27:16:
a0:66:2f:2a:f0:d7:8d:c0:69:06:9c:62:0c:d7:eb:f4:5f:6f:
71:66:84:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:48 2026 by rpki-client