Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
File: 4VaISXYX6PCmBpCvqz75TBGrbXI.mft (raw, json)
Hash identifier: Pn0RrCF2pVPeTI2LF+AEQ3Rnh0jOE94Q/zoiqPhL6Zo=
Subject key identifier: D6:57:DD:40:39:8A:DE:BF:97:6C:D3:A9:A2:61:38:F8:0C:11:4D:86
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Certificate issuer: /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial: 019D37C1313B5D0DEFE61C0323F464D77506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
Manifest number: 034D
Signing time: Sun 29 Mar 2026 04:01:41 +0000
Manifest this update: Sun 29 Mar 2026 04:01:41 +0000
Manifest next update: Mon 30 Mar 2026 04:01:41 +0000
Files and hashes: 1: 4VaISXYX6PCmBpCvqz75TBGrbXI.crl (hash: noyTx032CHlF8HJHG17oS6Nl4LuJsUfC8s5c2SX/1dk=)
2: Ycg5CHfQUVLtZxBBEajvZgdPLH4.asa (hash: C4h/41NakJ4AYiwVFglYi/Zm34hQAwe8DrOUagPNUVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:31:3b:5d:0d:ef:e6:1c:03:23:f4:64:d7:75:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Validity
Not Before: Mar 29 04:01:41 2026 GMT
Not After : Mar 30 04:01:41 2026 GMT
Subject: CN=d657dd40398adebf976cd3a9a26138f80c114d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3c:75:4c:d6:eb:39:67:af:5a:58:a2:9f:e5:
6e:0b:54:dd:7c:ff:3b:53:ef:32:df:b4:0b:f9:7c:
1a:42:97:89:4e:6d:d8:4a:45:fb:a9:70:d6:ac:5a:
71:78:b9:34:f7:49:ef:fa:ec:d7:0e:4e:49:f7:44:
1a:d6:6c:54:c3:66:20:a2:e8:30:6d:3f:9e:e4:8e:
8a:d9:f9:7a:39:85:52:62:d6:7e:2d:0c:2f:b6:66:
f9:c5:96:0b:30:e4:72:94:fe:e8:41:a9:64:3a:95:
90:16:b3:4e:8a:2f:d7:20:eb:55:b2:57:5d:10:55:
c5:45:15:12:17:c1:66:c6:2d:8f:63:96:e5:10:f5:
9b:50:ea:b4:f5:2d:dc:cb:1e:5b:ce:f8:0a:a0:21:
40:14:71:88:09:08:58:c3:9e:3d:a2:c1:f2:a6:d0:
40:ca:c9:61:81:e0:1b:cf:b5:6f:79:06:29:b0:33:
c9:98:94:b4:ea:ae:87:88:d0:5f:ce:74:5c:cd:93:
98:cb:56:bd:2d:3e:9f:5c:66:5f:ad:c8:56:3a:ca:
62:c0:35:00:62:2f:e6:e9:96:47:9d:af:96:d6:3b:
f6:5b:29:11:f8:a7:45:db:0b:cd:38:e6:11:7c:76:
7d:99:89:f6:77:70:8b:53:a0:34:5b:7a:fa:4d:39:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:57:DD:40:39:8A:DE:BF:97:6C:D3:A9:A2:61:38:F8:0C:11:4D:86
X509v3 Authority Key Identifier:
keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:b1:bb:05:43:ef:a9:fd:77:25:4b:bf:6a:bb:04:d7:77:5a:
d6:87:a1:90:53:62:6d:41:e9:da:3f:da:59:dc:d2:a1:b6:f2:
56:0b:2d:1a:07:a0:8b:c3:1c:7c:91:a1:a2:14:94:b1:de:ef:
8c:15:63:84:c0:3a:5a:59:79:55:1c:2c:d0:ee:7a:32:76:77:
45:8f:05:b9:76:11:f4:23:51:ce:17:41:e0:60:f8:0e:1e:eb:
af:82:5b:56:0e:b5:a7:2b:75:fc:64:3f:b9:7a:c4:b2:a5:ac:
6d:c9:5b:76:fa:1a:9f:07:ca:83:54:23:8d:bb:55:d1:79:ab:
92:41:ff:93:77:c9:d4:bb:c3:8f:58:4b:d9:33:a6:92:56:0f:
83:fe:17:3c:fb:0a:bf:9d:a9:52:33:71:eb:4e:c0:04:2f:7a:
da:5b:1e:02:0b:fd:32:71:ae:23:53:91:80:0f:97:35:85:0c:
61:a8:22:45:a8:32:56:b7:2d:7d:5b:b9:66:fc:cd:90:b0:29:
2c:b7:54:f3:5d:28:83:52:47:8a:de:16:d3:2a:29:95:fd:45:
74:5d:7e:f1:0d:31:1c:56:d7:75:8b:c7:94:b4:d9:7e:e5:46:
3d:f8:7c:4d:67:40:84:3b:25:c5:5c:d0:63:a7:68:94:e1:8b:
73:45:03:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:28 2026 by rpki-client