Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
File: _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json)
Hash identifier: CZsXuR8W2kydLcNq5A6cqSv7cwMqr0qvGf4XmvDjNi8=
Subject key identifier: 84:63:65:0D:83:C7:C6:A7:B1:1C:28:BF:46:31:E7:D9:67:11:88:FE
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Certificate issuer: /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial: 019D3941AD2B04AB77EC30E6509B5CA84657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
Manifest number: 1820
Signing time: Sun 29 Mar 2026 11:01:38 +0000
Manifest this update: Sun 29 Mar 2026 11:01:38 +0000
Manifest next update: Mon 30 Mar 2026 11:01:38 +0000
Files and hashes: 1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: zWzJwfKt2AeFufq1NLqU+O7nc0zCf8eQrvzXl+y6t/I=)
2: ebTSPPyg-VVW95sh4YIFTx9KFNM.roa (hash: fvczqgkgOmhs5e7zYAZCGPaXspjsXrHeEw67/C/U03I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:ad:2b:04:ab:77:ec:30:e6:50:9b:5c:a8:46:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Validity
Not Before: Mar 29 11:01:38 2026 GMT
Not After : Mar 30 11:01:38 2026 GMT
Subject: CN=8463650d83c7c6a7b11c28bf4631e7d9671188fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:e6:3e:73:b3:09:8a:5b:53:86:1b:a5:d6:
c6:07:13:9b:dc:c9:68:60:ce:63:cc:5e:54:b0:53:
2e:5f:38:28:91:ca:0c:36:4b:7c:4e:6a:c8:b4:ed:
f3:00:32:f8:79:83:bf:6d:25:2c:0c:bb:9f:45:63:
7b:68:ef:a0:91:15:14:62:b3:f0:74:0c:e4:a1:9c:
cf:b2:30:24:5b:76:56:b8:48:46:ac:42:63:7c:c4:
96:0b:89:c1:3f:50:a4:91:b3:67:4e:ab:c1:21:17:
78:62:42:72:31:3b:84:a0:15:6f:27:85:bd:ec:b5:
37:28:6b:9f:7e:1a:4e:20:61:56:7b:3a:9f:5e:05:
48:21:a7:ec:e7:41:24:4d:ef:0c:56:06:9e:28:d9:
85:03:c9:d2:39:8e:cb:81:2f:92:af:b3:c2:eb:12:
dd:bd:f9:ab:60:4d:d1:6a:64:63:11:a5:4a:49:42:
94:12:62:47:8e:2c:1e:46:9c:ce:ff:06:e3:76:02:
fa:d3:49:bd:e1:ce:6f:b2:67:4b:5d:0b:ff:f4:55:
7d:65:7a:82:8f:4f:66:0b:2d:7b:ad:ee:0d:3d:3e:
42:fb:1e:45:c9:1b:18:92:4e:50:2b:ab:4a:ae:67:
d9:19:4c:4e:b0:56:b3:21:fa:68:f5:a3:52:5a:37:
02:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:63:65:0D:83:C7:C6:A7:B1:1C:28:BF:46:31:E7:D9:67:11:88:FE
X509v3 Authority Key Identifier:
keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ea:45:bb:7a:ec:c2:a2:a8:1f:46:77:07:49:c1:e0:88:e5:
ab:93:88:18:a1:b0:46:08:8d:46:1c:a0:91:0c:32:ad:33:56:
c4:d9:12:dd:3c:2e:88:ae:b2:14:25:f7:a7:b7:93:3b:d3:aa:
93:ff:f1:6b:e4:84:3c:73:18:7b:5a:05:4b:9f:ae:41:23:6d:
82:74:da:c7:29:bf:43:6d:76:0a:11:51:92:c3:5d:db:7f:29:
00:cd:51:14:7f:9d:6b:57:19:8b:c3:45:75:2f:58:db:65:e3:
5b:6d:6f:10:e2:c8:3d:25:3a:3c:6b:5a:f2:af:fb:20:47:ca:
b0:69:cb:ed:5e:74:ff:82:a7:98:0e:fa:e7:7b:fa:99:d1:3e:
4a:a6:7d:68:4a:56:32:22:60:f6:2e:91:06:8d:36:d9:3b:72:
12:58:22:93:ec:cc:e7:2b:a2:31:f4:d5:48:82:06:53:19:90:
0f:54:24:21:0b:2b:34:68:4c:69:0d:fa:08:4f:a3:02:67:e0:
6e:94:27:f3:60:f6:ec:a9:6c:8c:d9:f7:c7:db:fb:d6:32:a1:
b7:09:eb:9e:12:30:eb:f2:7e:d0:42:e4:70:c9:bc:df:3e:8e:
2c:95:83:14:2e:e7:40:80:40:66:8e:59:6d:ad:6f:ae:81:0f:
26:be:09:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:53:36 2026 by rpki-client