Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: iAOa9qKfb7BpcGI6kGR6pJWqLdfvZfE+JOG5TsYvGfs=
Subject key identifier: AA:89:EE:B6:0D:D5:69:15:E7:F4:25:9E:9F:EC:6B:56:A6:66:CD:88
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 019D37522650DEB5AA778A247C3BCA4605C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 02:00:23 +0000
Manifest this update: Sun 29 Mar 2026 02:00:23 +0000
Manifest next update: Mon 30 Mar 2026 02:00:23 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: rc84TA/xWIZP3hPoGRq/5Woyg21qTrWutNDMKw0PR5c=)
2: j6eYXTGIPK6gsz2syCvMaVTG-yE.roa (hash: 91e+kynlaPtGnq7c6oIlywSzsBYw97PzDquhkqe4ygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:26:50:de:b5:aa:77:8a:24:7c:3b:ca:46:05:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Mar 29 02:00:23 2026 GMT
Not After : Mar 30 02:00:23 2026 GMT
Subject: CN=aa89eeb60dd56915e7f4259e9fec6b56a666cd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:7f:e6:31:3c:17:1f:5e:0e:f7:47:e1:80:f3:
9d:81:83:68:c7:e6:8a:7d:d5:c4:42:3d:08:c3:e3:
60:a6:c3:f3:3d:e9:33:4b:c4:3a:6b:bf:31:8a:fa:
4a:f1:05:6d:ad:e6:f1:b5:f0:d7:70:ac:eb:2f:de:
13:c2:99:83:10:8a:2a:9f:9f:08:a9:52:4f:dd:16:
ff:c2:e4:2f:8e:12:cf:12:a5:27:d2:0b:df:cf:3f:
e3:60:6b:19:7a:39:a4:d8:b0:78:50:2a:cd:f9:96:
41:f6:b3:26:c7:8d:1d:20:cb:18:1e:37:16:36:b0:
f3:07:71:8d:72:c2:be:f6:92:0a:6b:a4:62:c7:bc:
8d:85:e9:19:88:bf:4a:fc:21:e8:48:69:22:a8:2e:
81:8a:28:84:51:39:f3:b3:bd:45:e4:dc:4d:01:72:
a1:f8:26:ff:d1:40:95:72:ef:66:3a:ab:05:39:40:
79:dc:d6:18:df:5e:96:f7:05:fd:2d:5e:73:88:c7:
45:8d:b7:53:09:52:3c:08:32:bc:30:64:7c:fa:2c:
42:89:ea:0a:33:92:7b:90:0a:c9:f4:18:e2:06:88:
98:d1:83:bb:51:49:68:99:03:46:d7:3f:1d:1a:a7:
6c:69:5f:c8:9b:49:93:73:89:df:9d:2a:b0:ac:de:
3a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:89:EE:B6:0D:D5:69:15:E7:F4:25:9E:9F:EC:6B:56:A6:66:CD:88
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:42:ea:22:90:9b:48:d9:a7:dd:ec:07:1a:a7:13:25:42:72:
0b:88:39:78:ff:42:68:3c:34:73:1c:99:55:0a:68:df:56:67:
0a:35:b4:50:54:9c:4c:81:e4:f4:7e:22:20:3c:47:9e:cd:b2:
3f:a2:a8:2d:bf:28:19:95:17:b2:31:74:0e:2e:d3:7c:f0:4f:
ad:c7:8e:81:f7:18:55:f4:88:65:f5:0e:bb:da:6e:1e:98:0d:
bc:49:15:6a:9c:55:d7:c5:f9:bb:ac:37:ff:40:ce:f3:46:e6:
5a:8e:b4:03:e7:1d:3d:ed:b8:9d:ad:3c:de:58:a2:92:1c:93:
84:de:0f:f9:82:ac:68:23:ec:67:65:fe:35:75:57:4d:bf:ec:
7e:f9:dc:2e:58:9b:9a:46:a8:15:48:0b:ae:60:13:c0:a9:c5:
2a:73:74:c9:a0:73:08:94:a1:5a:07:f1:08:67:55:6c:1e:b8:
a7:d8:2d:78:c2:f5:0a:38:e2:89:d7:a1:60:b1:ea:46:94:54:
7e:f4:fb:08:59:28:19:21:c8:62:d2:2b:88:2a:19:9c:20:04:
a5:30:a7:51:50:9c:de:45:a1:e6:95:1b:20:e6:91:26:74:04:
2c:ff:f0:1a:ce:cc:7f:ad:f7:4f:36:52:b8:19:61:67:3c:e0:
7c:61:3f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:54 2026 by rpki-client