Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
File: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft (raw, json)
Hash identifier: lQSXRC3bpkBGef7rmwwwT7n796+UL8yec+StCxdxTtQ=
Subject key identifier: 87:91:D4:FA:C5:0F:CE:EA:A4:17:D5:FB:B3:17:47:8F:75:C5:01:24
Authority key identifier: E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
Certificate issuer: /CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Certificate serial: 019CE59125B91F1E1F9EB9F57A335AC278A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
Manifest number: 09
Signing time: Fri 13 Mar 2026 05:00:20 +0000
Manifest this update: Fri 13 Mar 2026 05:00:20 +0000
Manifest next update: Sat 14 Mar 2026 05:00:20 +0000
Files and hashes: 1: 4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl (hash: lpTjbjV0ZXs5e3iAQX47xdi/yNP1Pp7h2rrWSAlA9XQ=)
2: x9acHITrBbqOx2e9ypYS952QsxQ.roa (hash: b6zhtsIkjF/mT1JMxCSolgKQVZ0ngXMbV1MvghbUubE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:91:25:b9:1f:1e:1f:9e:b9:f5:7a:33:5a:c2:78:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24d7158bdfd463c391f16cbeb0b709e41a6fc96
Validity
Not Before: Mar 13 05:00:20 2026 GMT
Not After : Mar 14 05:00:20 2026 GMT
Subject: CN=8791d4fac50fceeaa417d5fbb317478f75c50124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:72:4f:c8:ac:4b:e1:b7:30:09:d3:3e:c8:96:
28:c4:70:37:a8:d3:49:da:11:50:54:7b:de:d7:9a:
ad:94:bb:6e:90:f5:64:f1:ca:a5:f9:bf:25:f1:24:
60:69:ae:94:ea:aa:da:33:d9:18:60:1a:3c:4f:ec:
8c:25:4b:af:d2:3d:05:e2:52:00:83:ee:38:97:13:
0b:45:9f:ad:ca:f8:67:90:04:b7:3f:42:b7:00:02:
cc:29:f2:ee:5f:0a:d5:2d:98:c6:51:b3:2b:35:e5:
e3:79:53:6b:0b:47:80:3c:ba:40:81:25:f1:da:d1:
c4:f2:91:98:3d:c7:48:f8:06:ad:9e:c2:6d:34:80:
a0:42:b3:93:70:c6:9f:45:c5:50:73:9a:83:be:bf:
1c:60:39:4a:aa:f0:97:a0:9a:de:9c:9d:9a:52:3b:
66:b7:7a:b4:8a:29:11:19:00:ca:c0:bb:f3:75:d6:
3b:ac:d7:01:7d:fc:39:7a:4b:df:cd:e8:a7:11:b6:
29:48:42:0b:c4:73:3d:8b:12:01:0d:77:4b:bc:da:
70:fa:1b:45:82:75:29:3b:5f:66:ad:d0:7b:74:34:
4d:a2:2d:42:ff:a6:56:00:4f:c9:4e:00:f4:00:e3:
1e:6b:77:8a:f1:83:75:9e:f8:2b:af:e1:70:41:6d:
73:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:91:D4:FA:C5:0F:CE:EA:A4:17:D5:FB:B3:17:47:8F:75:C5:01:24
X509v3 Authority Key Identifier:
keyid:E2:4D:71:58:BD:FD:46:3C:39:1F:16:CB:EB:0B:70:9E:41:A6:FC:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4k1xWL39Rjw5HxbL6wtwnkGm_JY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/6d5131-d194-4605-a267-84485cfa48c8/1/4k1xWL39Rjw5HxbL6wtwnkGm_JY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4e:43:84:97:e7:0d:59:9e:c3:ab:55:c6:47:9e:f1:5e:79:
22:60:53:b8:d4:63:a0:29:80:04:41:0b:b9:b7:da:ba:3e:2f:
f2:31:99:8a:b4:cb:c2:2e:5b:30:8f:de:2c:16:70:db:57:b3:
a0:95:37:d6:ed:47:41:86:84:ab:3d:dd:67:ac:85:a3:3e:45:
77:8a:61:8c:7f:85:e6:ea:f5:af:d8:a6:d3:81:52:e3:9c:6b:
51:db:c8:fb:bf:91:da:67:50:17:66:8b:12:72:0e:70:37:78:
df:f9:39:10:8e:a9:21:67:41:20:32:59:ac:90:1a:02:b4:4e:
68:b3:93:f5:f1:11:dd:38:9b:98:00:9e:34:2c:d9:27:21:78:
9d:63:86:c1:4b:d0:2d:e9:9d:bf:9b:85:0b:a3:ef:c5:d9:65:
c3:ef:5f:69:58:7a:ca:bd:f8:14:c0:f3:6d:94:4c:31:6f:1e:
fb:06:7a:1d:22:ce:b1:98:cc:b1:b2:01:1d:5b:76:30:0c:bb:
88:cc:f6:b6:8a:29:00:f2:55:b4:31:7f:74:f3:c2:b6:91:a8:
88:4c:d7:f5:0b:f6:f8:47:93:79:69:70:e2:a8:04:34:b3:94:
c1:5e:32:af:5a:e3:fe:98:85:b2:e0:60:17:9b:48:0b:59:77:
84:ed:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:59:13 2026 by rpki-client