Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
File: 4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft (raw, json)
Hash identifier: w/2LIZN6RptFJU4a0C7qi4yFZFzc/qW3SWD3pZ33BAQ=
Subject key identifier: B2:A6:7B:BC:02:FB:D8:05:73:DE:56:66:EA:1D:EC:5B:62:AC:6B:94
Authority key identifier: E0:B0:EC:99:26:89:6B:A1:25:BE:8F:A4:AE:BE:EA:8F:D3:09:B8:B4
Certificate issuer: /CN=e0b0ec9926896ba125be8fa4aebeea8fd309b8b4
Certificate serial: 019D3977BC2D0DF0E37B208B0C4280C4C349
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
Manifest number: 0169
Signing time: Sun 29 Mar 2026 12:00:41 +0000
Manifest this update: Sun 29 Mar 2026 12:00:41 +0000
Manifest next update: Mon 30 Mar 2026 12:00:41 +0000
Files and hashes: 1: 4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl (hash: X0opEtolciTrj0ZK4XU5L6SjfJyrpPQPWB8qKoCdI/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:bc:2d:0d:f0:e3:7b:20:8b:0c:42:80:c4:c3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b0ec9926896ba125be8fa4aebeea8fd309b8b4
Validity
Not Before: Mar 29 12:00:41 2026 GMT
Not After : Mar 30 12:00:41 2026 GMT
Subject: CN=b2a67bbc02fbd80573de5666ea1dec5b62ac6b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:1e:53:be:aa:ff:7b:c8:14:be:2a:b7:fc:
c4:a4:d5:6f:fc:9a:49:a7:bf:17:d9:d1:b0:27:34:
03:16:97:b1:88:8b:a0:46:e5:f4:f5:0e:45:f2:16:
c1:66:de:9e:27:86:06:07:24:d3:37:dd:88:78:ae:
c2:8f:e0:70:82:dd:02:b7:f1:d2:8d:36:8a:7e:e9:
1c:60:84:15:0b:7d:ed:ef:2e:8b:d0:63:e8:84:0b:
51:db:90:e8:06:7a:9c:17:16:1a:c4:48:fc:07:58:
1e:b2:cb:d5:22:8c:9d:79:4c:4e:c6:57:3c:56:e5:
26:8b:48:f4:20:88:f5:13:1f:71:62:da:ec:26:dd:
ed:c5:b5:c8:38:bd:8a:49:83:f1:95:b0:fe:ee:d3:
f3:76:dc:2e:f4:01:03:2f:b0:7a:da:e6:14:89:61:
5b:b7:27:ae:7f:a4:e4:88:b9:80:53:f6:5e:ba:6f:
e8:c9:dc:a8:3c:6a:cb:55:73:8f:85:f1:01:ba:59:
f6:31:07:91:dc:a5:3a:72:41:c0:be:13:3e:6b:3f:
9a:4f:db:11:3b:d6:ca:c7:8a:69:6d:49:10:34:2d:
c9:25:86:51:99:da:51:65:d3:ab:5a:64:27:82:f1:
4e:db:8e:aa:4c:9d:4d:16:60:29:82:0a:6f:16:99:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A6:7B:BC:02:FB:D8:05:73:DE:56:66:EA:1D:EC:5B:62:AC:6B:94
X509v3 Authority Key Identifier:
keyid:E0:B0:EC:99:26:89:6B:A1:25:BE:8F:A4:AE:BE:EA:8F:D3:09:B8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LDsmSaJa6Elvo-krr7qj9MJuLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5d5c3a-63c0-42ca-884b-b0707a7d61a1/1/4LDsmSaJa6Elvo-krr7qj9MJuLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:66:da:12:93:54:43:c2:5f:d0:57:da:20:95:9e:6b:86:b1:
79:96:a4:3f:11:65:52:96:0d:08:12:92:de:f7:56:45:85:1d:
ad:73:d5:99:50:09:9d:0f:30:f5:2e:14:1e:a1:7e:bf:e2:e3:
9a:cc:f8:a6:8e:2f:55:e6:9d:b1:8b:f6:02:af:47:f3:b1:28:
24:b3:aa:d7:06:9e:55:75:f1:47:70:97:06:7b:82:21:a5:89:
07:a5:cd:6d:0c:c3:f8:0c:8d:57:5e:ca:3f:da:cd:1e:e0:7f:
a7:51:0b:ca:6d:aa:e7:a7:77:93:7a:b1:28:c1:89:8c:f9:82:
0e:3a:05:99:f9:ce:d8:2b:d5:e4:b4:a9:88:8e:ac:e2:91:d4:
30:9a:19:ea:d5:2f:66:e2:a5:92:35:50:ba:93:59:cb:19:0a:
c2:98:b1:d6:a9:d6:f3:79:18:fd:2e:f5:a6:4b:9d:f6:47:e7:
2c:00:3e:67:90:4b:29:d7:b3:05:c9:6e:61:55:7e:fd:6e:1d:
22:58:ff:2b:22:78:42:c4:85:f1:8f:90:ed:8e:c7:41:2b:8d:
d2:d3:42:7e:25:e6:52:b4:17:69:e6:4c:d4:1f:e3:1e:6c:ee:
2c:f9:92:ad:f1:2c:ed:66:85:bd:f3:d9:d3:d8:a7:85:8b:8a:
e6:85:9f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:47:54 2026 by rpki-client