Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier: qzokdt4cFI6Dk1bf2QPp1NFgD5lQvN9upDPqRS5m7Qo=
Subject key identifier: E9:0F:C2:D3:48:62:7E:F8:23:06:ED:76:CF:32:51:ED:96:E1:CD:E2
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 019D37C0E8FD42B42A6BD6500C778E925BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 04:01:22 +0000
Manifest this update: Sun 29 Mar 2026 04:01:22 +0000
Manifest next update: Mon 30 Mar 2026 04:01:22 +0000
Files and hashes: 1: 1-No8JnCXoZmNvwGOuPwKrmYYJ6c.roa (hash: 2kZ069SCXyvjYNeKIO+pvEFPTW/9AX8f/8u5tWS3u3U=)
2: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: kpsRiT+ZJg2HYlWRgzn3EhfSqsVl4HmcepXpTh32NKA=)
3: BW5S5s1xvxdYeismlznCSfBL2yI.roa (hash: EtWeWpCD+suUmysPule/ohTEye/jj6Q4dBOVaR6L3gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:e8:fd:42:b4:2a:6b:d6:50:0c:77:8e:92:5b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Mar 29 04:01:22 2026 GMT
Not After : Mar 30 04:01:22 2026 GMT
Subject: CN=e90fc2d348627ef82306ed76cf3251ed96e1cde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:15:d6:34:80:41:e2:2b:24:e0:fe:ad:d0:b6:
68:fb:b4:73:ce:e7:f8:06:9f:89:a7:38:51:a0:87:
7f:40:4a:00:53:9a:63:f3:ff:89:18:76:a1:04:91:
4c:b8:64:67:9f:c7:1e:4a:d1:f0:8b:35:1e:52:96:
3e:06:2b:2e:ff:01:6f:6f:71:42:94:1f:11:48:00:
4b:96:df:27:d2:19:89:b3:32:0c:62:be:5e:f3:b9:
0b:e8:d8:0a:77:55:37:6c:a5:94:51:ee:13:13:e4:
8d:8e:c8:0d:8f:eb:04:3b:48:c7:6d:e1:8b:36:a8:
71:54:19:b7:32:62:2c:e0:7d:c2:b1:06:b4:8f:50:
2c:fa:2e:b0:23:37:da:ba:0d:b0:21:84:54:78:c4:
b1:1e:8a:b5:d8:c2:37:4d:96:ef:19:3f:73:10:a1:
b6:ac:d0:66:f5:aa:6d:65:fe:62:65:bf:2c:c7:69:
17:29:29:68:56:48:55:e2:42:5d:ca:18:c6:1b:f3:
0e:82:67:27:d0:6f:cc:ff:cd:b9:66:70:62:97:d8:
06:b9:d2:33:5b:bd:61:7c:1a:42:19:27:ed:70:64:
47:6a:de:5e:7d:98:f3:bf:43:30:8a:66:cb:de:41:
5c:e3:8c:d5:d1:4e:12:07:cd:2a:03:44:bc:e0:d3:
5d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0F:C2:D3:48:62:7E:F8:23:06:ED:76:CF:32:51:ED:96:E1:CD:E2
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:62:a8:31:4b:e2:64:b6:15:31:fd:30:69:db:54:a7:f2:b9:
ad:d4:91:15:fd:db:f4:5a:50:01:43:7e:0e:0d:83:92:2f:74:
7f:48:63:08:cb:17:0b:b0:c3:af:63:3a:c6:46:c1:9a:bf:aa:
83:a2:11:78:01:b9:7d:34:0b:4e:a5:49:31:4a:f9:ac:e8:24:
a1:aa:38:31:76:47:7e:65:bd:55:fe:2a:f1:4e:48:8a:da:31:
51:cb:03:15:d0:85:cd:90:0c:33:fb:88:00:fb:51:4a:8f:e7:
d0:42:97:47:32:a8:93:0c:a1:ca:7a:db:9d:c9:e5:c5:07:14:
6c:2a:9a:7c:1b:d2:25:eb:2d:bf:da:76:8c:dd:71:65:ef:a8:
58:89:5c:bd:2f:0a:e7:90:db:d3:46:26:60:52:37:eb:58:a5:
fb:95:46:f5:03:2c:d7:10:32:b9:3e:60:cd:3c:b3:5a:4b:72:
1b:73:28:73:19:f4:b4:60:26:91:cf:a0:87:b3:33:b3:00:83:
2a:b5:fa:5b:86:bf:53:fc:ee:50:61:c9:57:b4:e8:b1:ff:37:
e5:e6:19:4e:23:4f:17:36:10:c7:f9:45:d2:85:19:c1:2a:50:
b6:a5:08:ba:74:80:97:c8:85:f9:7a:e8:5e:bd:7a:1f:fa:1a:
d0:d0:a8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:00:54 2026 by rpki-client