Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier: vS0V1Eu5L4o7n9wKYlZx3KfA9/JdbMqGX03CGtii9vE=
Subject key identifier: 14:D9:21:EA:36:E8:50:A2:88:93:23:CA:76:1F:94:27:DB:F6:0E:14
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 019D3977D5856CE174823E768F65ED10C028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 12:00:47 +0000
Manifest this update: Sun 29 Mar 2026 12:00:47 +0000
Manifest next update: Mon 30 Mar 2026 12:00:47 +0000
Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: E9S/uSp502iY869mCP5a9zSo8qO9/7mZa653K5WtJrw=)
2: vC2Im6wO7AYNQfHqhdffdSsKQVk.roa (hash: 7HPvAiJ29pt2x/rNPwngG1GyeF1UIK/JkGxi50lh27k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d5:85:6c:e1:74:82:3e:76:8f:65:ed:10:c0:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Mar 29 12:00:47 2026 GMT
Not After : Mar 30 12:00:47 2026 GMT
Subject: CN=14d921ea36e850a2889323ca761f9427dbf60e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a3:ba:b9:27:4c:d8:76:c8:de:fc:39:d4:c3:
f9:f7:4b:eb:6d:71:d0:94:50:18:bd:ab:50:a0:ec:
b7:3c:df:37:1a:2c:ac:c3:0b:fc:26:3e:6b:87:b9:
9d:fb:2d:a8:4d:86:b4:eb:0e:32:e7:c8:f6:c9:d4:
cc:bd:8d:88:97:2c:a3:3e:6b:77:1c:a3:06:91:c2:
0b:15:fe:05:94:96:cd:11:08:9e:30:3c:b4:00:5c:
90:23:8a:ed:12:a4:09:fe:ef:82:b2:35:33:2b:90:
83:15:eb:80:ba:5e:b3:c7:a6:8a:09:d0:e6:35:67:
2c:9a:c5:7b:cf:90:b8:b4:00:2e:5c:f8:17:b6:df:
13:17:a0:78:2e:db:a9:13:45:c3:69:1e:09:f9:b6:
94:52:87:cf:be:2d:cf:b7:c0:09:b7:d5:b8:1a:95:
b4:10:28:80:21:e3:b9:27:60:5c:61:6a:09:32:65:
79:80:b6:04:9d:67:2a:14:42:23:c8:e3:f8:4a:89:
48:45:fb:b1:38:fa:0b:32:a1:06:18:f7:5a:56:49:
1e:d5:38:a4:78:cc:ff:3a:c9:af:c4:0c:9e:84:ab:
73:e9:ef:63:b3:47:f5:4a:17:ed:10:35:47:13:8c:
b9:c4:24:f5:2f:ba:6c:bf:48:4a:76:c5:c8:0a:31:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D9:21:EA:36:E8:50:A2:88:93:23:CA:76:1F:94:27:DB:F6:0E:14
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:d9:3a:21:ff:2f:64:07:c4:23:06:0f:ee:da:fd:67:4d:23:
7b:65:b7:c4:44:9b:3d:0e:50:5d:6d:e6:b0:73:98:f6:b5:ee:
dc:76:fa:7d:c1:2e:1d:22:71:56:ea:51:12:ef:b4:a8:c7:7e:
4e:9b:da:09:bf:a9:80:e2:18:d5:63:b5:7a:d6:a0:a3:ee:e8:
ad:a0:da:8c:72:a4:87:05:6b:82:95:b9:a4:df:aa:39:74:17:
97:b9:46:0d:13:7c:54:40:df:dd:b8:5d:85:62:df:f2:11:46:
28:40:55:1c:3a:6b:37:59:77:7b:35:e9:9f:0b:fe:73:cb:ba:
ca:9c:3c:ed:7a:e5:d8:5c:6b:61:bf:e1:5a:0d:68:4e:87:53:
e4:29:ff:f3:d5:53:ac:d6:06:82:a2:dc:03:43:ec:80:60:63:
66:89:28:ee:5c:98:0b:50:f0:59:37:67:00:9c:d0:f7:27:cb:
eb:4f:a3:23:ff:23:dd:a2:6f:c2:a8:4f:76:c3:8f:3b:73:26:
af:d4:24:7c:4e:5c:60:ab:c6:a7:5f:15:cb:ed:d0:2d:eb:0d:
4b:39:da:28:e6:4a:d0:5e:bc:08:bb:67:96:a4:ea:ec:32:b0:
80:26:7d:5e:20:bb:fb:a9:f4:42:c2:ac:ac:88:ca:78:e4:25:
d3:c1:81:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:02 2026 by rpki-client