Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: ic4KpSRRrpaQQ0azXLIVZG9vlG+IrC4RkPheLFSF/2I=
Subject key identifier: 9D:73:A5:4F:A7:ED:CA:08:9A:E7:C1:6F:6E:DA:EB:DB:FD:00:50:00
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 019D38D3B0D5AB49DE5EB7EAAF141C2B3669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0C52
Signing time: Sun 29 Mar 2026 09:01:30 +0000
Manifest this update: Sun 29 Mar 2026 09:01:30 +0000
Manifest next update: Mon 30 Mar 2026 09:01:30 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: RBAcwvFUDCMGIDzIQ1oFIdV3h2RUbEG14xdJtumGtV0=)
2: Zfv_5cAa3ri0Ax5p2vNE36rHpnE.roa (hash: Id3c2s4Nmji3usQrf3+l5D4JNCrYHAfvKHW7XcPkXa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:b0:d5:ab:49:de:5e:b7:ea:af:14:1c:2b:36:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Mar 29 09:01:30 2026 GMT
Not After : Mar 30 09:01:30 2026 GMT
Subject: CN=9d73a54fa7edca089ae7c16f6edaebdbfd005000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:35:62:d4:71:6c:bc:6a:a9:45:f4:cf:ba:
7b:78:48:eb:47:f2:7a:cd:cb:04:dc:b6:1d:58:59:
8e:8a:f6:99:fe:cd:75:94:6a:8b:7e:63:43:f7:40:
21:7d:85:9b:2d:a1:d6:7f:7d:80:d3:5b:94:c1:80:
f7:9f:48:c4:ab:3b:94:13:15:de:44:6d:67:ce:d1:
9d:55:cb:cd:ea:e5:4b:ba:61:98:20:40:b7:9e:91:
ee:ba:c2:51:24:1d:2c:1d:39:90:0d:2e:f5:33:bd:
55:ec:92:02:e5:09:70:83:1b:07:e0:88:97:aa:4c:
71:d7:11:dd:5d:b4:9c:8a:64:65:14:a8:b0:0d:df:
02:1d:db:05:29:35:15:1d:fd:e6:bd:bc:6c:6d:31:
91:1c:76:6e:88:1d:c3:ed:c8:6f:d1:e1:a2:75:be:
c4:49:45:fa:03:e5:39:cb:de:9d:30:bd:87:4d:28:
ee:f9:93:98:21:25:ec:65:7f:4e:5a:60:ab:a2:9b:
e2:d6:93:b1:54:77:0a:51:c3:53:2e:54:64:62:41:
9f:97:84:f7:a2:4f:70:bc:3e:5e:d2:e0:90:d5:3d:
2a:ab:d2:c0:2a:49:2d:d9:31:9f:1a:3e:a8:1e:36:
b4:0a:09:5f:e1:79:6e:95:2a:e0:d5:bb:b7:01:c1:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:73:A5:4F:A7:ED:CA:08:9A:E7:C1:6F:6E:DA:EB:DB:FD:00:50:00
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:3e:f2:f0:81:9e:61:b3:a1:ab:fb:a8:be:48:db:1c:05:86:
e0:30:d6:11:07:46:7c:33:81:13:ce:5c:43:bf:66:e5:d2:ef:
ab:ce:2c:7f:e3:9f:b1:27:b7:8d:bd:38:91:8a:92:74:61:08:
b7:d7:46:8c:5d:a8:f3:db:f1:ee:1e:bb:e7:50:a7:e9:d0:f6:
a0:f1:0b:56:c1:ab:b7:96:2e:e0:82:9d:be:0d:3b:3f:4a:73:
91:68:56:19:a5:25:28:7b:20:f7:5d:e1:80:df:9f:f3:aa:0c:
c5:5c:13:9f:67:de:31:89:da:2e:e1:c5:fd:5f:6a:19:cc:2f:
57:54:5f:8d:fe:87:f3:a6:16:18:66:fe:82:ee:80:0a:70:06:
16:6c:60:10:79:5c:da:08:ab:ab:ea:ef:1b:83:b3:d9:e3:c5:
6b:2c:c6:0b:c8:96:2e:41:86:34:f5:30:7b:16:b9:54:d5:55:
93:e7:d0:9b:96:76:49:2c:97:74:eb:7c:03:32:66:ea:80:7b:
80:a7:cb:aa:cc:98:53:28:9f:eb:85:76:28:cc:1c:81:23:6f:
92:f5:bf:5d:0b:d1:04:13:18:ff:21:d6:66:4c:e5:38:84:6c:
8c:c6:42:17:de:e7:be:10:49:fb:c9:e6:db:0f:c4:b5:29:69:
27:a5:85:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:25 2026 by rpki-client