Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
File: 4GmrbwlXKvtG6fjpoGOdgguWlCI.mft (raw, json)
Hash identifier: nHrNHjrJLohwsQ5+u4hQ1rSbtMsPCAaqm1lNQIpzoQc=
Subject key identifier: 90:1B:A3:1D:3B:C7:09:FB:41:6C:24:73:E1:8A:0B:64:1C:10:B4:F7
Authority key identifier: E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
Certificate issuer: /CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Certificate serial: 019D389C1B8499CD524D2A15DB364E7E5A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
Manifest number: 1825
Signing time: Sun 29 Mar 2026 08:00:47 +0000
Manifest this update: Sun 29 Mar 2026 08:00:47 +0000
Manifest next update: Mon 30 Mar 2026 08:00:47 +0000
Files and hashes: 1: 4GmrbwlXKvtG6fjpoGOdgguWlCI.crl (hash: k2DR4F4ZoA0t61NgBffHIBCnnXTsLDkL2I+BUKgVQFo=)
2: w9M7qFYAM8Bc_3Ry_zHFbT7tXaQ.roa (hash: S9cgU4aODgbYFlt1oo6eD08eYcxMr87FOJ/xbk/bpB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1b:84:99:cd:52:4d:2a:15:db:36:4e:7e:5a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e069ab6f09572afb46e9f8e9a0639d820b969422
Validity
Not Before: Mar 29 08:00:47 2026 GMT
Not After : Mar 30 08:00:47 2026 GMT
Subject: CN=901ba31d3bc709fb416c2473e18a0b641c10b4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:28:5e:fd:7a:ac:9c:bc:3f:8c:aa:52:a4:72:
be:11:d6:87:4f:5e:d1:0c:ff:65:8c:41:b5:33:e0:
f5:59:e5:f3:97:b8:97:f0:ea:9d:42:50:e3:ac:40:
aa:c7:01:81:c7:99:5c:78:e1:e0:bd:33:b6:c8:39:
d1:d6:3b:97:17:e2:a8:41:5c:da:b4:0b:df:cb:94:
9d:13:55:8b:70:15:87:8b:6f:4e:e3:84:8a:ea:7d:
bb:db:0d:5c:b0:43:7e:a9:51:1f:d8:98:96:4b:dd:
0c:02:cd:32:c4:7a:94:71:8a:f3:7f:8f:d7:00:f8:
1a:63:64:36:c2:5e:4f:db:1b:8c:f6:be:3e:f8:d3:
66:f8:5b:ed:c7:57:bc:7f:0b:1e:61:da:0e:36:d4:
0b:2d:fc:49:0a:26:07:24:b6:05:fa:75:82:02:81:
fb:3e:28:48:78:39:d8:d9:c5:ea:12:1e:0b:4f:8f:
12:56:6b:8d:98:92:44:dc:80:9c:da:5c:11:f6:06:
45:9e:5d:1c:43:7b:6b:5c:60:3e:1e:22:dc:05:45:
7d:d8:ed:4d:07:87:21:cb:82:0b:75:48:5d:0e:30:
a2:b2:dd:0c:34:65:99:0b:27:4a:c1:62:e7:d8:93:
03:7b:c9:1b:74:96:2d:f7:e0:1d:da:6b:86:a7:85:
1f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1B:A3:1D:3B:C7:09:FB:41:6C:24:73:E1:8A:0B:64:1C:10:B4:F7
X509v3 Authority Key Identifier:
keyid:E0:69:AB:6F:09:57:2A:FB:46:E9:F8:E9:A0:63:9D:82:0B:96:94:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GmrbwlXKvtG6fjpoGOdgguWlCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/aa5cc0-bb56-4b47-b7c1-44f41d9e1277/1/4GmrbwlXKvtG6fjpoGOdgguWlCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:54:e1:7f:2b:cc:c3:8f:1a:4d:65:e6:01:25:ec:f3:02:e9:
47:cc:49:4c:87:1e:e4:d3:9c:56:cb:1f:d4:32:09:91:1c:8e:
3a:9e:1a:36:6c:5b:b6:c3:ea:08:6c:fc:88:9f:25:7a:36:3c:
1a:f4:c4:df:4e:92:66:19:1b:7c:2b:e2:6f:48:04:1e:75:66:
7a:85:90:0e:67:c6:b9:f9:d7:50:be:72:e4:cf:cc:ea:ce:8c:
c7:1d:d5:b1:3d:3a:f6:65:ff:1b:c8:cd:2c:6c:e9:4d:dd:af:
80:25:56:a5:3d:1d:28:77:fd:c4:6c:3d:97:21:27:c9:59:55:
9d:ba:52:f8:70:a1:38:f7:89:1d:ec:6b:ee:bb:f5:7f:d3:74:
d7:92:30:5a:f7:6a:a7:b8:33:86:0d:19:9b:0f:6b:52:68:b4:
5a:33:a0:bf:c4:4f:66:cf:1d:e0:63:61:38:90:79:d2:40:b6:
ce:e1:c8:40:4c:22:4a:33:b1:1b:e8:73:6b:4b:a9:a0:88:ed:
56:23:b4:27:ce:00:10:a8:8b:32:3c:26:ac:12:25:16:4c:e1:
78:84:ee:e4:de:58:37:42:bc:bb:14:db:59:81:cf:ab:e2:bd:
39:b4:6b:73:06:76:fa:09:f7:30:c7:f0:b2:d0:4c:b1:d0:13:
16:bd:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:40 2026 by rpki-client