
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
File: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft (raw, json)
Hash identifier: 6Zvte+lVUVq0kmBBxKCtOD/x6qRusgKasSD0bI3eypc=
Subject key identifier: 27:02:95:34:A4:5C:20:AD:10:BA:71:FD:4D:6A:D0:C5:7B:E9:1E:DC
Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
Certificate issuer: /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Certificate serial: 019D382E7CA6D290F053F17B8CFEC13CD3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
Manifest number: 13FD
Signing time: Sun 29 Mar 2026 06:01:03 +0000
Manifest this update: Sun 29 Mar 2026 06:01:03 +0000
Manifest next update: Mon 30 Mar 2026 06:01:03 +0000
Files and hashes: 1: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl (hash: 9ZOtGdisC8zNadJVw06k4jM8+vkqnVS4svMtKydJdho=)
2: eE7il2_XdwS5_JtxMq2pvAz1LIU.roa (hash: wpN1KIlOzEFCJRu+ipfs4OChRIy+MI7uehA6+KAIz84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:7c:a6:d2:90:f0:53:f1:7b:8c:fe:c1:3c:d3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Validity
Not Before: Mar 29 06:01:03 2026 GMT
Not After : Mar 30 06:01:03 2026 GMT
Subject: CN=27029534a45c20ad10ba71fd4d6ad0c57be91edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3b:97:e3:9c:1c:fc:ba:82:ac:d0:8a:cf:cd:
04:74:3c:63:b8:eb:37:08:50:5f:a3:3f:04:c7:1e:
57:28:ec:29:b5:b6:07:38:fc:ec:38:dd:d9:85:39:
0b:48:c3:9a:ea:4e:18:81:e5:6a:1d:9e:b8:89:6e:
1e:cb:c9:f4:ef:e7:a4:de:88:9a:3d:0b:96:4a:67:
e0:07:5a:98:29:a7:28:73:56:59:d8:bf:b9:20:f2:
31:30:29:fa:d9:e9:a3:e5:69:f3:b3:71:03:f8:00:
d8:20:1d:ed:4d:a5:24:11:40:a1:6a:07:74:79:1b:
b0:10:77:d0:2f:40:ef:1a:c8:62:95:b8:0f:b9:6f:
2d:70:6f:5e:68:ff:94:e0:f7:1a:fa:fd:16:71:9f:
c6:de:b2:5c:24:2c:06:4f:8e:49:77:2c:82:55:00:
cc:73:4e:d6:36:b0:98:a1:95:e8:60:ec:ec:00:2a:
b7:a6:55:ca:43:ef:a3:28:ec:4e:48:1e:01:84:ae:
e7:ec:18:7e:1f:69:25:4a:29:ad:33:48:c0:94:86:
21:17:e5:82:c3:21:bd:39:2f:85:b5:14:ba:17:ef:
4a:df:90:2b:22:c0:23:7b:9e:42:4a:63:4b:13:be:
60:15:ea:27:ed:48:00:e9:ca:bc:20:5a:65:76:40:
f0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:02:95:34:A4:5C:20:AD:10:BA:71:FD:4D:6A:D0:C5:7B:E9:1E:DC
X509v3 Authority Key Identifier:
keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:9f:68:50:7d:b0:b5:7f:68:97:76:5e:18:55:74:a7:1e:ca:
3f:eb:a3:c1:3c:a8:f2:30:11:e9:5a:98:5c:b8:4c:25:b5:4e:
3c:7e:5d:72:79:cc:95:69:2e:c5:cf:72:15:0a:52:91:28:1e:
4a:51:07:95:95:2c:72:e9:f6:1e:a9:ad:4e:09:2b:90:e7:a6:
3e:41:b4:62:c8:21:89:fa:86:df:df:8c:21:2e:9d:fc:07:98:
bc:3c:1f:7d:9e:cd:cb:ab:87:d9:2e:ed:a9:29:b1:63:43:4d:
ab:55:81:f0:3a:99:e6:e3:1d:7a:e4:b5:ef:6a:59:ed:54:c2:
31:a1:4b:9c:d3:ae:97:c2:f1:5b:e4:cb:72:6b:93:4f:2f:62:
83:1a:d5:f4:7a:30:60:5d:0a:c5:3d:c3:7d:e5:c9:1e:52:d1:
1a:a2:96:3c:30:65:38:9b:71:55:da:9a:1a:ad:7d:c6:e2:03:
ff:7f:54:a2:62:ba:9f:4e:aa:ec:36:b6:0a:98:0d:08:a1:3c:
9d:e8:62:e8:66:92:b4:89:93:6c:72:10:be:0d:6b:3b:4b:0d:
6a:ba:b7:0e:93:43:ee:9f:9b:2f:dd:b6:67:76:0e:0f:7d:c9:
03:1d:b4:31:55:88:d6:52:84:2e:d6:b9:d1:07:ee:ba:9f:02:
17:d8:f0:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:51 2026 by rpki-client