Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
File: 4koyJ4zntMsgXfzK14YBSjsK4yM.mft (raw, json)
Hash identifier: QDDXOEG7Yaobl9HxPsFnlfpPycfjwrMntwAE4l8ABTw=
Subject key identifier: C0:CF:FB:C5:A4:71:CE:8B:6A:B3:B8:AC:2D:4B:A5:7B:06:42:54:B8
Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
Certificate issuer: /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Certificate serial: 019D389BDE012FD01206B877DD8C77E85055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
Manifest number: 1028
Signing time: Sun 29 Mar 2026 08:00:32 +0000
Manifest this update: Sun 29 Mar 2026 08:00:32 +0000
Manifest next update: Mon 30 Mar 2026 08:00:32 +0000
Files and hashes: 1: 4koyJ4zntMsgXfzK14YBSjsK4yM.crl (hash: gpexzDqal4+221C91KrdOtt12Niy8a8xojSo8ixmyUQ=)
2: QZoElNh2G2nwMP88BsRDda3tDUQ.roa (hash: Z+CRbrBSzZz6HmMemjR2fLmNJfImRQn2RnMbj7m1gdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:de:01:2f:d0:12:06:b8:77:dd:8c:77:e8:50:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Validity
Not Before: Mar 29 08:00:32 2026 GMT
Not After : Mar 30 08:00:32 2026 GMT
Subject: CN=c0cffbc5a471ce8b6ab3b8ac2d4ba57b064254b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:68:46:36:3b:2e:50:f4:50:1d:98:12:53:
df:f9:37:7d:3d:ba:a9:47:0a:64:2b:e4:28:c9:5b:
4b:1a:0f:2a:c3:ab:07:a4:26:ab:ad:00:af:fa:85:
fc:97:5c:0f:b6:3b:21:e8:e8:bf:69:9a:59:c2:3f:
47:c1:3c:5f:4c:f0:e1:22:50:c5:07:a4:9c:5f:84:
48:c2:1b:f5:bf:8b:a8:42:9b:de:44:ee:b6:1b:4a:
45:50:37:f4:13:1f:b4:cb:2a:3b:82:a7:1f:f2:1c:
f2:2d:b0:10:ff:55:bc:58:98:4b:d0:0c:d8:b0:4d:
3d:a7:87:3b:f5:a8:f5:9f:87:60:5c:6c:11:f8:4a:
94:97:66:b1:40:17:42:4b:5d:96:82:fd:e3:d9:d3:
2a:43:83:72:32:e9:8c:74:27:1e:e2:7f:58:72:76:
47:4c:fb:cf:d7:90:7c:8d:a6:44:4c:19:f1:85:e2:
25:0a:0a:8c:8e:b2:5a:17:f0:56:a8:5b:d1:f7:96:
d3:54:e3:af:cc:7c:09:1e:b0:a5:f7:06:22:be:91:
aa:18:24:cc:52:40:d7:b1:33:eb:97:2c:0a:c8:2e:
75:c7:96:fa:af:02:70:eb:f1:9c:09:5a:e6:88:37:
b4:51:5d:3d:cf:82:c1:cf:7f:d9:9d:bd:51:bf:b2:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CF:FB:C5:A4:71:CE:8B:6A:B3:B8:AC:2D:4B:A5:7B:06:42:54:B8
X509v3 Authority Key Identifier:
keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e0:8a:5f:d0:96:d1:28:57:cd:a7:26:13:b5:6d:fb:15:b3:
02:bd:61:84:25:8d:9a:af:8c:4f:9c:84:5c:43:a9:44:56:94:
cf:60:a5:61:cb:6d:09:ee:99:f1:b5:ce:56:e8:75:5e:7b:7f:
d9:2a:07:40:b2:a9:ea:20:cc:1e:40:ab:97:d0:f1:3a:d1:8d:
30:50:0c:8d:52:b9:6a:9f:d5:c1:d4:0b:2e:55:1d:3b:94:35:
f6:c0:c0:ab:f8:6e:0d:f9:3d:c4:17:7e:d1:19:c9:ff:a1:ce:
4a:f7:4d:e0:13:ef:bc:26:44:a7:7a:fb:ed:c0:f2:03:01:ba:
24:58:00:5b:62:75:3a:de:dd:fb:ed:1c:58:25:1c:db:dc:d8:
2e:63:b3:16:17:3d:bd:fe:95:7f:20:71:40:7e:3b:63:dd:0b:
7a:a3:d9:ce:8b:99:92:63:be:42:56:75:2f:6c:12:04:b0:a3:
33:b2:fa:c6:94:0c:2d:cb:68:40:da:e1:3b:8d:93:0e:1a:cb:
b4:34:ff:e2:0c:23:a9:16:2d:17:3d:f4:17:92:53:34:f4:85:
99:46:4a:98:14:03:1e:a8:d6:73:35:f6:37:79:7a:f2:a6:9b:
53:90:f3:08:85:5a:5d:84:82:c1:54:2d:91:98:95:c4:b3:8c:
0b:9c:ec:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:03 2026 by rpki-client