Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier: zLUEBdLkxv9YFFoH6DZnU0pp6IHTVYVd2Eo3DDNk6/s=
Subject key identifier: A3:F2:CA:9C:9F:6F:AA:14:20:3B:33:BC:16:E2:04:D1:16:CA:EA:50
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial: 019D378909E8C48C432832B0360EDC9F1EAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number: 0564
Signing time: Sun 29 Mar 2026 03:00:20 +0000
Manifest this update: Sun 29 Mar 2026 03:00:20 +0000
Manifest next update: Mon 30 Mar 2026 03:00:20 +0000
Files and hashes: 1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: byi8qI1asBZSoK3h+c4g2WJnVB0Zvea49cXZBJhVQCo=)
2: kAQRnXnn1bepnTjDte_6dOnnntw.roa (hash: fvCT2Eh+lUDVebIFnLuZITE86ooUogC2tmwd5l7+wO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:09:e8:c4:8c:43:28:32:b0:36:0e:dc:9f:1e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Validity
Not Before: Mar 29 03:00:20 2026 GMT
Not After : Mar 30 03:00:20 2026 GMT
Subject: CN=a3f2ca9c9f6faa14203b33bc16e204d116caea50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:63:5a:ad:40:67:71:ea:b3:75:ab:23:52:d9:
3e:50:7a:09:fb:c8:8d:c3:6e:4d:eb:d8:d0:66:a6:
ca:cc:a5:12:50:2c:82:6a:a4:af:8f:6c:92:29:20:
50:64:0d:35:5d:51:46:77:ce:d6:96:be:e3:07:15:
ef:31:fb:22:de:71:2a:16:fc:b9:30:18:77:64:8d:
7f:9b:b9:6f:48:a6:40:ab:8c:0b:1f:5e:8d:0f:8e:
c4:71:cf:4b:03:50:6a:e8:00:10:b5:ef:91:fe:47:
f7:8c:56:43:ae:b0:03:43:2a:40:18:b9:89:8c:7a:
d9:fe:fd:80:15:5f:83:7f:06:0f:70:db:f5:48:19:
22:9f:71:bb:08:32:3a:cf:0d:cb:82:99:66:d0:43:
79:59:bf:79:8d:d4:cb:11:4f:c7:9e:5a:c4:66:9c:
d3:ac:8a:89:1a:c9:59:78:7d:08:b5:73:b4:66:69:
e2:c2:46:b6:e7:14:be:35:6c:28:18:24:ca:43:5f:
e0:55:1a:8f:c2:a3:26:5b:d7:3b:94:b2:8e:71:41:
1a:13:82:85:7b:18:66:b6:36:d9:44:51:0b:10:7b:
2e:4a:2e:6e:c3:89:d7:f4:2e:c8:9a:7a:0b:05:ea:
df:e0:1d:4d:44:c3:06:ae:5f:13:da:65:dc:56:31:
3d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F2:CA:9C:9F:6F:AA:14:20:3B:33:BC:16:E2:04:D1:16:CA:EA:50
X509v3 Authority Key Identifier:
keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:59:f7:3c:00:bd:5f:50:45:fd:0a:49:27:58:d9:d7:a2:5c:
d1:b7:38:ba:50:9b:de:c8:48:27:d5:97:d9:9f:7b:90:22:61:
0c:95:cb:c7:a8:62:6b:ff:fe:3f:b6:f6:d4:8b:a1:49:99:e9:
1d:08:c4:6c:cf:43:87:99:50:6b:9f:6f:9b:28:22:1d:5e:14:
a1:41:32:5b:33:1e:21:aa:87:ff:52:0b:f7:37:1f:e2:bd:f2:
aa:57:b3:50:ee:77:8f:c4:15:2b:af:1f:9e:11:81:98:47:c7:
96:69:f2:52:cc:c3:92:24:32:a9:9f:5f:aa:5a:a6:ec:7b:9f:
e0:d9:22:bd:6e:3d:bd:3c:6b:ed:44:ef:00:2a:ef:f5:2a:fc:
de:e7:dd:c4:ad:af:ca:47:26:1f:f7:29:1f:a6:4b:a6:6a:21:
83:20:58:26:1b:87:a1:2e:8b:21:ca:a1:44:89:f3:85:3a:63:
4e:66:0d:a8:c8:41:89:49:e5:fd:a1:b0:bb:c0:e4:a3:f5:65:
cc:c1:ac:aa:0f:c0:f6:bb:ae:00:54:5b:3a:47:bf:8e:08:1d:
0c:02:11:54:10:a3:a9:c6:38:51:68:5b:76:e3:a5:5b:8d:e5:
08:52:57:0b:6a:f9:cf:a1:d0:da:27:f9:be:a9:98:fe:f9:a7:
0b:8e:7c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:33 2026 by rpki-client