
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
File: e4mF-uoIWYwFzDC4LigjBq95MxY.mft (raw, json)
Hash identifier: TVjiz6YJgbMTmOfvdYNlaFzKXc67PhwWMxxv0vW/aro=
Subject key identifier: 52:91:C5:FE:25:84:A3:50:C1:A1:73:B6:E2:37:8C:A9:13:E6:E0:D5
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 019D37F70C821F697FEDE5EF4881DEACE76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
Manifest number: 112A
Signing time: Sun 29 Mar 2026 05:00:30 +0000
Manifest this update: Sun 29 Mar 2026 05:00:30 +0000
Manifest next update: Mon 30 Mar 2026 05:00:30 +0000
Files and hashes: 1: ctypwi_YKCa3xqtYI5R6ti_6Q04.roa (hash: qrdXq0UfoxpWYAu0rvMx4Tk+4wVIHjFefJvMtTB1BXk=)
2: e4mF-uoIWYwFzDC4LigjBq95MxY.crl (hash: hYtGU8JLRHaCTeLECe+srenzRX5eVPu6QJA6/AJt94c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:0c:82:1f:69:7f:ed:e5:ef:48:81:de:ac:e7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Mar 29 05:00:30 2026 GMT
Not After : Mar 30 05:00:30 2026 GMT
Subject: CN=5291c5fe2584a350c1a173b6e2378ca913e6e0d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:da:d9:37:99:49:75:9e:ad:9d:08:e8:f8:0a:
f6:4e:85:f3:a4:ef:8a:05:de:10:dd:10:c0:22:84:
cb:eb:30:03:91:28:dc:6b:e7:02:e0:da:8d:36:74:
ad:9d:34:3b:b5:23:77:c7:be:f6:3a:b6:53:c5:84:
35:77:a7:69:b6:b3:dc:99:41:fc:5a:0d:99:fd:57:
98:61:90:56:b7:d4:90:82:f7:10:59:a4:eb:a6:b9:
3b:2d:c3:26:ec:a9:1f:bf:f6:13:3a:08:56:58:86:
64:9b:58:9d:93:da:1d:7d:55:92:be:88:7b:02:b7:
9d:21:02:e0:5c:ad:9e:a2:44:15:05:7b:60:74:58:
1b:e1:d7:ed:b8:e6:22:d8:34:58:7b:72:fd:88:09:
c0:bc:4f:a4:df:4c:f6:de:b0:f0:96:ac:76:08:bd:
3e:8c:24:58:24:32:2c:4c:4a:3b:94:a6:a5:02:18:
b1:17:61:e1:39:ca:36:ee:9d:42:dc:32:d9:ca:05:
36:70:67:2c:eb:e1:83:3a:6a:1c:cf:0e:cd:95:74:
32:ac:ac:82:b9:2a:bb:69:0f:95:59:ca:18:88:c3:
6d:e0:9a:df:1e:76:69:d9:50:a1:e4:ab:1d:d9:61:
91:99:97:60:d6:de:5b:70:98:a2:b3:ca:5e:66:6c:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:91:C5:FE:25:84:A3:50:C1:A1:73:B6:E2:37:8C:A9:13:E6:E0:D5
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ee:75:14:60:ec:00:7d:46:62:2b:5b:cb:3a:29:c1:f6:ae:
54:5e:d9:68:44:be:8e:b0:3a:b1:f0:58:95:c7:64:45:e6:65:
0d:5e:f6:9d:26:22:67:5a:65:ae:4d:d4:ee:27:2b:a3:47:4b:
90:ed:1b:a9:6d:49:8e:bb:2b:26:35:62:3a:41:1c:7e:52:f8:
23:cb:8a:42:45:56:5f:df:08:a1:d0:c9:f2:c0:30:7c:1f:e9:
67:6c:af:9f:8e:98:ef:61:ea:ad:1b:8a:16:92:6b:da:5c:03:
99:00:d4:d6:9b:e6:74:aa:ba:eb:b7:c6:95:cf:58:0f:cb:d7:
88:ed:82:89:9f:d7:aa:2b:ae:af:71:10:73:13:20:18:b4:28:
ab:98:ea:6f:4d:35:de:7b:e2:79:e4:38:d9:16:05:f6:24:08:
08:90:2c:fe:cc:1a:92:e6:b0:23:8b:9e:41:d6:09:22:7f:ed:
a4:96:0a:ed:d3:ee:aa:20:82:2e:d8:10:33:50:47:1b:97:40:
6f:88:e8:ec:a0:76:0d:17:13:80:34:65:42:4e:a7:2a:92:4f:
c5:05:76:2b:2a:23:05:67:55:22:a6:87:cb:55:ff:63:30:87:
25:6c:14:49:1a:bc:77:24:15:f4:0b:f1:29:2c:d6:64:67:42:
ed:0f:d2:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:47 2026 by rpki-client