Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
File: 4HG570GlOChYzZ7vmKf7nRJqpK4.mft (raw, json)
Hash identifier: EYX5FBwbEh34WNFsCwCKlC6wdCLca0FgRQGOtZwqFeA=
Subject key identifier: FD:1D:F3:C4:13:93:5D:8D:E1:74:B2:35:A2:57:6B:7A:A6:71:75:34
Authority key identifier: E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
Certificate issuer: /CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Certificate serial: 019D39E5E92997C7A0B41A903FCF725CEF3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
Manifest number: 05B9
Signing time: Sun 29 Mar 2026 14:01:01 +0000
Manifest this update: Sun 29 Mar 2026 14:01:01 +0000
Manifest next update: Mon 30 Mar 2026 14:01:01 +0000
Files and hashes: 1: 4HG570GlOChYzZ7vmKf7nRJqpK4.crl (hash: 2TmYaJC0BRCcw6bXcISPj94tVbQsxexp7KOwH7kjg0o=)
2: JqYIovUOhpMaXbCswunFuuxrXZA.roa (hash: pzyg9bet0YZqCdKyQjx/ZoPH6pBnBtJrgE7rSpscrOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:e9:29:97:c7:a0:b4:1a:90:3f:cf:72:5c:ef:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Validity
Not Before: Mar 29 14:01:01 2026 GMT
Not After : Mar 30 14:01:01 2026 GMT
Subject: CN=fd1df3c413935d8de174b235a2576b7aa6717534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:82:84:70:ca:6e:8d:77:f7:03:4d:eb:54:47:
6b:4e:52:67:41:aa:23:13:dc:a1:ac:df:8e:3f:6c:
6e:7f:a1:a6:2f:f2:9b:ef:d4:70:ba:6e:5e:45:94:
fa:64:d8:6a:07:60:3d:5d:b7:c2:bd:a5:24:da:19:
cd:09:b0:d7:52:8b:4f:a2:07:7d:4e:6a:e6:0f:ee:
9c:fa:70:f2:54:9d:a2:82:0c:8d:4a:ba:9d:11:7d:
ce:89:1e:1b:51:22:e4:e5:d2:77:48:d3:ed:43:2f:
ab:db:5c:91:c5:e6:f8:d2:67:64:cd:77:5e:4f:9c:
c8:5d:7a:ac:09:86:d9:c9:a7:6d:8b:a9:3f:d1:c5:
09:18:ed:e4:4f:d8:1b:e6:e3:df:fd:5b:3e:4d:26:
c4:ec:0a:a6:d6:ff:82:d3:97:08:54:d9:4c:ad:98:
1f:f6:e7:21:72:11:52:fc:ab:6a:fe:35:e3:a9:09:
b9:61:cc:c1:ee:95:db:a2:52:e8:98:95:9f:33:78:
2f:76:7d:fe:8b:cd:e0:54:b5:5e:6f:10:72:8e:52:
ee:c1:e9:a4:ea:10:c1:0a:c0:17:1f:15:63:b7:16:
3e:91:5d:2e:35:9a:b2:72:c7:0e:e4:5d:6a:fb:51:
bc:af:dc:42:66:57:9e:2b:d1:e8:ee:67:bc:02:b7:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1D:F3:C4:13:93:5D:8D:E1:74:B2:35:A2:57:6B:7A:A6:71:75:34
X509v3 Authority Key Identifier:
keyid:E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:78:60:ea:c4:f4:28:b8:66:ed:f3:24:5b:50:ac:46:6d:ae:
46:31:2b:2c:1a:ec:52:2e:05:e9:ab:bb:5e:ec:82:fa:71:1e:
7f:49:95:e4:5c:30:3e:cf:a3:75:30:53:47:61:d1:3f:49:28:
87:a9:81:64:ae:21:2b:06:92:3e:5e:9b:d9:22:da:22:93:12:
a6:61:06:6e:93:ad:a9:92:71:e5:55:d7:ab:d5:25:b2:0a:b3:
e6:90:a8:0c:32:b1:22:f0:32:6b:3e:cc:ff:5a:28:49:23:a4:
a1:d2:a3:a9:41:06:f2:fc:57:1d:b0:f9:2b:5f:64:e1:0c:0f:
5a:26:1e:61:be:79:66:0f:c3:be:98:30:dd:ab:99:59:02:8b:
05:dc:72:dc:60:0c:06:af:15:0e:6f:68:9d:8b:ed:91:0c:d5:
32:1b:32:d3:c9:ab:b7:34:3b:bc:73:ee:bf:2f:65:ec:e5:6a:
25:31:bc:c0:64:eb:5e:26:e0:e5:c3:0c:2d:a1:54:a5:11:d3:
f3:15:d3:14:27:71:37:2a:24:b0:f8:85:a5:7d:bc:5e:5e:77:
bd:f5:66:64:34:ba:93:0a:e1:1e:f6:ee:07:3a:d2:d7:ef:82:
69:1d:a3:bf:48:11:54:34:9c:d6:6d:92:a7:07:11:97:84:3d:
7c:8e:1f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:57:47 2026 by rpki-client