Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
File: x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft (raw, json)
Hash identifier: DUzuvwh/B6ZbIaaL5lZw7g/MWo9d57/Mqn5dyC+Ud3Q=
Subject key identifier: 3F:4F:1C:BD:88:A6:10:90:B9:04:5D:82:35:74:2B:DF:49:BA:D3:5A
Authority key identifier: C7:87:2D:A0:32:25:1B:AE:0D:E5:10:AC:5E:A6:15:7E:4E:4E:86:8A
Certificate issuer: /CN=c7872da032251bae0de510ac5ea6157e4e4e868a
Certificate serial: 019D37C0032D7C1D2A5FFA8D97D801B47005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
Manifest number: 01F7
Signing time: Sun 29 Mar 2026 04:00:23 +0000
Manifest this update: Sun 29 Mar 2026 04:00:23 +0000
Manifest next update: Mon 30 Mar 2026 04:00:23 +0000
Files and hashes: 1: QQUsq5_bxMpaX0AgXCyLCGuNTIo.roa (hash: Buoj/gVa9VpkIZHwN4cu0QEoROO7EbtKc1cRDJ64dfw=)
2: x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl (hash: vGDMWGkh3GW3wmAeQ8HgRchw1/sCzN5Os2ceJfdssuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:03:2d:7c:1d:2a:5f:fa:8d:97:d8:01:b4:70:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7872da032251bae0de510ac5ea6157e4e4e868a
Validity
Not Before: Mar 29 04:00:23 2026 GMT
Not After : Mar 30 04:00:23 2026 GMT
Subject: CN=3f4f1cbd88a61090b9045d8235742bdf49bad35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:50:2c:59:03:ac:a2:ce:f2:72:4e:01:54:
6c:76:01:72:33:1b:65:48:e1:af:8a:fd:e4:06:0b:
28:45:71:df:00:8b:6e:70:2c:41:88:00:02:25:1d:
06:31:80:87:7f:25:ca:8d:3f:0f:ec:46:7e:70:9d:
64:cb:4b:3b:d5:cb:c0:f7:ac:4c:30:bb:26:44:cd:
e1:74:2b:70:44:77:76:bd:08:e0:fc:30:7b:5b:3c:
20:a2:e9:b6:52:3e:b7:46:d5:16:d2:56:bd:46:db:
96:c2:fb:00:7b:a6:d9:8b:31:9a:06:a6:7c:a7:ed:
7a:10:99:1b:46:96:79:1c:9a:cf:bf:ef:0f:38:a1:
ec:54:4f:44:4a:16:d6:6a:e6:de:cf:8c:83:5a:52:
69:59:68:9e:1a:8f:02:7e:a9:a3:2b:ed:31:bd:66:
41:56:86:7c:2d:0a:f9:7a:24:a2:d5:15:73:98:9d:
bf:30:97:42:95:be:c0:fa:b3:5f:26:de:2b:08:32:
9d:40:97:5a:85:f7:ea:3e:32:a3:8a:32:58:47:22:
23:f7:68:3c:7e:23:62:85:44:0f:3e:1e:c3:5d:a9:
78:ee:af:1b:51:64:8b:96:f7:2d:c3:76:76:3d:c5:
e8:0c:ad:52:f1:3b:18:a3:54:4e:2c:56:dc:92:d5:
08:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4F:1C:BD:88:A6:10:90:B9:04:5D:82:35:74:2B:DF:49:BA:D3:5A
X509v3 Authority Key Identifier:
keyid:C7:87:2D:A0:32:25:1B:AE:0D:E5:10:AC:5E:A6:15:7E:4E:4E:86:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:69:23:c0:7f:c2:c7:70:dc:15:ca:ed:a2:87:a0:58:a2:2b:
69:70:8b:bd:d2:59:2a:cb:8c:aa:03:41:25:7f:9f:1c:33:c1:
99:2d:5a:69:9e:76:fe:25:e6:9b:4d:f0:98:d1:97:7a:47:fa:
94:da:f1:ac:17:56:14:09:12:c6:5e:45:f2:ef:9f:76:8c:fb:
25:53:fc:78:73:a8:f2:dc:da:23:cc:60:b8:f1:6b:94:f2:b8:
e3:47:4f:1a:51:db:cb:c6:ba:62:68:ad:28:54:27:0a:f5:11:
64:98:86:4f:eb:57:9d:1f:36:ee:05:ab:c3:30:65:22:75:4f:
1a:46:79:01:ab:32:07:dc:4c:42:6e:1e:c3:97:62:eb:3e:a8:
f0:76:07:bd:4b:88:57:e0:00:c7:e7:70:92:09:f4:cb:cf:6e:
9a:2c:1d:2e:68:bb:f4:ae:05:40:c9:7d:31:b2:16:85:f5:81:
01:e1:4b:ae:c3:00:27:3e:d0:26:71:98:4b:d6:e2:9c:1d:b3:
bb:75:d3:91:87:95:57:0c:87:b5:70:65:41:c6:ca:1b:9f:7a:
c5:ca:ac:06:5c:07:6a:0f:d3:7c:b6:5f:4c:d4:0e:9f:a1:cc:
0f:7b:f0:33:37:2c:3a:1a:2d:d3:28:a1:d5:d6:5b:c5:e8:a1:
db:df:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:22 2026 by rpki-client