Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File: V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier: OiihbubJHukLQWFPx7AmwR0nTEtGe0s4/Kb4sQTfShs=
Subject key identifier: 4C:2A:11:B6:8D:0C:69:C3:FF:55:10:97:DB:73:AA:A5:CB:35:69:EB
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer: /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial: 019DD1640B14BAE72AA66B3FA4BA8A87827C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number: 044F
Signing time: Tue 28 Apr 2026 00:01:27 +0000
Manifest this update: Tue 28 Apr 2026 00:01:27 +0000
Manifest next update: Wed 29 Apr 2026 00:01:27 +0000
Files and hashes: 1: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: MnXwLMbBmsIhRLTqtNx9S2PBnvjlZdwfkVEBf6ht4dw=)
2: X4f6FdUM7-oxmTPyJDPnSjOJQjc.roa (hash: G+8NGrdkwPv6Os9FA75QeRzjamvnyvobATUloFoNoiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 00:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d1:64:0b:14:ba:e7:2a:a6:6b:3f:a4:ba:8a:87:82:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Validity
Not Before: Apr 28 00:01:27 2026 GMT
Not After : Apr 29 00:01:27 2026 GMT
Subject: CN=4c2a11b68d0c69c3ff551097db73aaa5cb3569eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c9:0c:09:38:fb:8d:13:9c:93:0c:ed:66:fb:
5e:ec:32:02:e4:ad:97:39:f4:d3:d3:61:e6:5d:50:
83:09:bc:bc:28:65:63:f1:68:84:4c:e6:69:7d:30:
0d:32:9b:09:16:84:da:0d:e4:a2:99:a9:dc:c0:03:
da:f6:4a:16:45:09:2e:02:8a:7f:74:35:03:c0:90:
fb:bb:05:08:05:a9:ba:49:b9:8c:be:e0:3b:c4:b4:
ba:f5:64:25:c4:74:16:27:06:da:69:74:f0:cd:f1:
52:87:3a:8d:c2:79:b9:1e:fa:da:94:e4:16:5b:f4:
34:ef:54:54:c3:c5:b9:f9:ca:87:b2:e8:96:27:ff:
44:0e:30:6e:ec:c0:c5:c5:a3:15:8c:39:2d:d4:be:
8a:a3:70:f6:1e:41:31:87:50:ad:fe:83:08:9d:f7:
27:20:46:c5:87:0e:f0:77:4c:6e:92:4c:a6:b9:9f:
9c:d1:5a:9d:14:8a:71:7a:83:86:75:8a:b1:7e:80:
ca:7e:4b:16:e0:0e:e5:22:98:f0:58:be:1e:29:1a:
51:d8:b5:ba:a8:cb:7e:9a:01:f7:0f:33:8b:a5:2c:
c4:46:5a:75:c5:2b:ec:7b:b4:40:80:c2:60:17:52:
08:d9:f5:b1:f4:62:cf:e5:fe:77:e7:e1:67:ba:1f:
e1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:2A:11:B6:8D:0C:69:C3:FF:55:10:97:DB:73:AA:A5:CB:35:69:EB
X509v3 Authority Key Identifier:
keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b5:80:23:31:79:bc:df:84:87:30:bc:56:69:12:63:b7:8a:
ac:c6:a5:95:53:60:f0:f7:77:19:09:4e:b4:1d:ef:02:18:3f:
de:ad:99:cb:55:85:61:73:b5:04:21:cc:67:41:95:1c:0c:03:
47:90:da:1e:3e:f7:a8:55:94:70:a0:89:28:c5:be:2d:5a:99:
83:64:cb:80:f1:c4:b9:79:43:ac:3e:12:28:f1:4e:f1:57:fe:
48:5d:68:38:21:98:30:a1:d9:83:2c:6c:5d:c9:58:4c:2b:e6:
60:4b:52:a4:79:67:49:5f:b0:49:c4:a2:e5:8c:61:1e:26:85:
7b:16:be:bd:8b:d6:55:7d:e7:bc:6d:5e:d8:a1:9c:4f:7c:51:
a3:14:ed:87:69:57:5e:6d:62:e7:23:93:f4:90:b2:65:a4:f9:
4d:28:79:e7:38:f2:53:3f:77:4b:c5:3a:1a:bc:1b:86:ae:0c:
7c:f1:e3:24:5c:8f:14:34:a0:a7:7e:43:dd:b5:b5:f1:4c:a0:
d0:a8:21:b4:48:53:70:eb:2e:3a:90:3f:fb:1f:54:f8:1d:cb:
aa:be:fe:ce:d8:03:64:c5:80:31:b8:0b:1e:b5:6d:9f:50:e6:
8c:57:2a:e3:f0:5b:79:f0:aa:15:ff:4c:cd:74:76:ce:ec:45:
1e:98:5b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 08:28:10 2026 by rpki-client