Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
File: 4bUJZyudmYtGScw3aoKYeeb-rKc.mft (raw, json)
Hash identifier: ttP5aIirCvTniOA6m/x+5M4FZ8On7qgy+3Ze/bpzBQc=
Subject key identifier: AB:F4:78:0F:57:68:F8:C7:AF:C5:1F:96:09:29:BF:68:D0:B9:B9:D8
Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
Certificate issuer: /CN=e1b509672b9d998b4649cc376a829879e6feaca7
Certificate serial: 019D38D32C43E53A7AC5986954E5E1FF58D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
Manifest number: 078C
Signing time: Sun 29 Mar 2026 09:00:56 +0000
Manifest this update: Sun 29 Mar 2026 09:00:56 +0000
Manifest next update: Mon 30 Mar 2026 09:00:56 +0000
Files and hashes: 1: 0SKx4uHIUqJCwzbuDVDzDNGPsb8.roa (hash: mtyUt15yu+f0GpFvD8FnDUSV4lO4SlvX/nIEW6w5cbU=)
2: 4bUJZyudmYtGScw3aoKYeeb-rKc.crl (hash: OoozL8HerPFvle5rh5nEHZQty+28fNfPBtVTxK1OeRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:2c:43:e5:3a:7a:c5:98:69:54:e5:e1:ff:58:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7
Validity
Not Before: Mar 29 09:00:56 2026 GMT
Not After : Mar 30 09:00:56 2026 GMT
Subject: CN=abf4780f5768f8c7afc51f960929bf68d0b9b9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0c:70:d2:87:e0:e0:98:44:1c:36:04:fb:45:
e4:a3:c3:18:33:dc:00:81:2f:6e:49:36:6f:0e:d4:
b8:d2:ec:97:44:18:b0:f3:d7:7c:f6:6d:22:14:e0:
40:38:c0:94:08:88:a0:6f:55:b7:24:9f:dc:e6:47:
6a:9c:8f:1a:af:a6:2b:b6:9b:02:51:3b:34:d3:d5:
50:3b:34:69:31:42:22:80:d9:31:45:10:50:3f:17:
37:81:44:57:c6:e0:e6:1d:68:71:c0:06:7b:42:d5:
70:e5:70:8b:96:78:73:4c:71:77:bd:31:df:7e:78:
87:09:49:1b:2f:5d:73:e7:28:24:9a:a3:a9:e7:c8:
b2:1d:1b:0c:e4:c3:84:82:55:4f:02:d3:33:58:6f:
ff:25:3f:d6:84:7d:f4:91:aa:d1:14:cd:d7:29:12:
f7:bc:b3:84:24:1d:2a:6b:6f:0e:70:50:e3:94:84:
13:96:6e:2a:85:08:69:59:45:bd:54:9a:5e:0a:a4:
e0:16:17:5e:f2:e2:e7:6c:bb:9b:5c:80:24:53:30:
16:de:36:b3:71:da:e3:c9:51:b0:f5:d0:2e:4f:5a:
2a:78:80:3b:85:98:84:ed:5e:2a:42:a9:54:3a:3c:
d3:98:73:a5:90:72:e9:a8:64:09:06:10:da:2b:55:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F4:78:0F:57:68:F8:C7:AF:C5:1F:96:09:29:BF:68:D0:B9:B9:D8
X509v3 Authority Key Identifier:
keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3e:67:6c:f9:77:ee:91:7a:85:7f:b7:aa:c4:75:b3:96:5d:
9c:0b:18:9b:95:6b:55:ff:b8:bf:03:b3:a5:74:cf:19:30:4e:
32:9a:cf:3a:e0:76:f9:ec:c5:bc:1f:fb:97:59:fb:27:75:ed:
ef:4d:1c:ff:f1:bf:f6:92:6b:9f:b1:10:87:58:bf:48:ca:5e:
b3:97:fe:7e:25:74:26:a1:d1:b3:8f:10:16:37:ee:ed:8d:b7:
3b:1e:28:45:c7:5c:17:9a:20:e7:ec:66:2b:fb:a3:25:c6:a7:
e8:6e:58:e5:f7:32:f8:75:be:77:c0:a7:19:ca:64:d5:3e:ea:
41:06:f1:b3:49:f2:d6:aa:e8:d3:1b:60:2d:d9:22:0d:d0:e6:
da:a2:f7:c2:d7:13:00:66:fd:8e:3a:bf:f1:0f:1b:16:74:7f:
f4:9b:c2:5c:66:ef:72:64:c4:90:eb:83:33:1f:d2:46:a7:57:
3a:b9:47:e0:f6:a0:2a:74:66:7d:9e:51:25:50:1b:f9:a7:49:
23:64:15:e2:f0:94:85:80:80:15:2f:03:84:7c:79:84:d7:a5:
2c:86:6c:f6:00:ea:10:d0:69:94:4f:32:92:d9:2b:99:66:72:
12:75:f1:2e:c8:0b:03:ec:26:b7:df:fd:b8:73:25:a2:68:5d:
df:61:3c:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:42 2026 by rpki-client