Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json)
Hash identifier: jtiR8iQAp3FDjCZpex+uXSkxFvekQJ6gZWezX8+PzRs=
Subject key identifier: AF:9A:DB:15:7C:E0:E1:98:80:62:2B:75:6C:0D:B1:18:0E:3C:6A:48
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial: 019CF04C858DC75EFE754E2C3508721BF931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
Manifest number: 1523
Signing time: Sun 15 Mar 2026 07:01:12 +0000
Manifest this update: Sun 15 Mar 2026 07:01:12 +0000
Manifest next update: Mon 16 Mar 2026 07:01:12 +0000
Files and hashes: 1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: NDblc9HRHA0u/7+TB8dbNU3cIdOcPJJ22Zk7KTfRKJY=)
2: fJgYZ4ej2JhPoX-SwafXWVTllE4.roa (hash: oBfl5sq0NvI5C3NZdb3K0ESRoAncOv9TLGKLm+7rmlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:4c:85:8d:c7:5e:fe:75:4e:2c:35:08:72:1b:f9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Validity
Not Before: Mar 15 07:01:12 2026 GMT
Not After : Mar 16 07:01:12 2026 GMT
Subject: CN=af9adb157ce0e19880622b756c0db1180e3c6a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:4b:cf:dd:06:5d:17:4c:98:81:f9:20:0e:
72:64:02:b7:c4:b1:5e:d2:be:ba:d3:0e:ac:61:e3:
55:c5:9e:d4:21:78:0a:db:5b:c6:9a:13:19:8d:23:
57:0c:13:c6:8f:75:69:ef:d5:c9:fa:79:c2:9d:3b:
d7:13:bc:fd:6d:48:f0:b9:ca:52:25:c6:8e:2a:11:
cd:29:e7:5a:fa:de:ac:e0:f9:f6:07:8c:29:66:c9:
10:cc:b3:4b:7e:91:91:5d:83:1c:5b:76:04:a2:da:
ba:08:fa:7e:3c:fc:58:f2:83:35:e7:a4:cd:6b:31:
93:b9:79:b0:71:5e:ec:da:9b:3c:6f:3b:6f:44:18:
f3:f8:32:2d:d3:e3:bd:16:e3:15:8f:2e:8d:a2:5b:
6c:cf:3c:15:89:93:97:17:b4:da:30:4a:b7:23:27:
54:c0:2d:5b:f4:60:45:cd:a0:fa:9a:b4:99:d6:0c:
91:00:1c:5e:cf:6f:d3:c5:2e:db:66:a6:d0:81:d7:
38:b7:14:5d:72:93:7d:90:3d:41:a4:0a:56:97:5f:
7f:67:43:73:10:db:28:ec:3d:39:0a:bc:e1:f9:f5:
a4:a9:29:d8:c8:68:55:50:77:09:36:5d:df:ca:01:
09:69:0f:3a:4d:26:14:ad:8c:12:0b:f5:55:4e:2a:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9A:DB:15:7C:E0:E1:98:80:62:2B:75:6C:0D:B1:18:0E:3C:6A:48
X509v3 Authority Key Identifier:
keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:14:57:7a:dc:6a:8b:d8:00:22:2b:03:42:51:45:1f:3a:4f:
87:45:b3:ec:e7:b0:e3:3b:00:8c:f5:36:28:5f:48:8c:c8:8d:
5a:b0:a7:99:3b:10:2d:04:d9:4a:9b:5f:4c:ce:59:03:0f:2c:
62:fa:5c:d4:50:38:ba:43:70:6d:49:c3:f0:a6:4e:d8:19:92:
af:70:01:54:5f:f6:04:06:54:89:6a:12:19:bd:80:db:0d:4c:
c0:79:e6:cb:b2:93:24:27:ac:ac:d3:d7:44:0a:02:cf:e0:98:
9c:e2:f1:53:b6:0f:75:b1:b1:19:a6:3e:5c:79:51:64:18:3a:
32:18:0b:24:45:82:30:8b:fb:4f:c8:93:20:01:33:4f:ab:9a:
88:62:07:4b:cf:57:10:22:7a:43:ad:8e:0b:e1:c6:c1:f6:f6:
02:6f:2e:bd:41:35:e4:6d:6a:42:16:8d:fc:10:3c:32:b9:63:
3e:65:85:c0:46:a0:fd:d7:fa:63:45:66:06:b2:6d:60:c1:fb:
57:5e:69:4e:75:cb:86:e9:31:9a:6d:e4:d3:ff:8d:3b:8c:b5:
d5:a7:85:79:47:b6:f2:8e:1e:32:63:ef:43:6d:7a:d4:c3:2a:
ea:df:3a:79:a7:09:c2:67:24:f7:fe:5f:f7:b2:3b:43:78:d2:
19:53:4c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 16:41:19 2026 by rpki-client