Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
File: rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft (raw, json)
Hash identifier: awE08StziiNYk3dvmN2CAqP3znsFWVmJMj31R5MFnlg=
Subject key identifier: F6:C4:5F:E1:D6:94:E2:D3:E6:C9:EB:56:FF:B0:5D:CB:E0:90:A6:22
Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
Certificate issuer: /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Certificate serial: 019D397783FCA277D3B95E2C92E345463F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 12:00:27 +0000
Manifest this update: Sun 29 Mar 2026 12:00:27 +0000
Manifest next update: Mon 30 Mar 2026 12:00:27 +0000
Files and hashes: 1: Urm8LGF3nWAC-z0vN8e0GgC0tZI.roa (hash: ExuI2kIDGZzfnph2B5PPw/UGl0nESxyqgqQscTauTwI=)
2: rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl (hash: aAwvB+uXVzDMXkv4F3W+vJQNnREsdhZ429cih5B26aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:83:fc:a2:77:d3:b9:5e:2c:92:e3:45:46:3f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Validity
Not Before: Mar 29 12:00:27 2026 GMT
Not After : Mar 30 12:00:27 2026 GMT
Subject: CN=f6c45fe1d694e2d3e6c9eb56ffb05dcbe090a622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8f:0b:7c:b1:01:d2:17:6b:58:eb:00:b4:fa:
96:af:5c:b0:27:68:ed:ce:66:b2:a8:3c:e4:24:4c:
78:0c:a1:9b:8a:5f:da:8d:4d:3f:0d:9e:2a:a7:33:
94:23:5f:8c:50:87:36:4d:2a:02:33:c2:e1:97:0f:
34:78:93:84:90:f8:da:11:85:70:88:ac:aa:fa:88:
09:fd:ed:f2:6f:77:9e:b8:27:7d:be:6f:be:e1:d8:
8a:d6:37:c6:1c:05:eb:3b:79:9b:55:d6:af:ad:8b:
f2:c4:31:6e:b8:ec:88:f8:32:43:05:cd:95:a0:87:
0e:fd:d8:27:6e:88:d3:8d:06:da:9f:f2:a4:ed:c0:
19:c5:4b:c0:4f:42:27:86:9c:63:f8:f2:e7:d7:1e:
8e:27:9b:a5:f9:e4:04:bf:cc:58:61:3b:52:ee:43:
31:a5:88:0b:cb:af:f2:26:7c:1a:52:25:e8:f7:72:
18:30:c9:bd:78:62:5f:4a:d8:f1:05:1b:6b:87:69:
82:4a:2c:72:0a:7a:f3:b5:6d:f6:fd:17:30:b9:d0:
0e:f8:bf:8a:8e:40:8c:cd:94:d8:7d:31:0c:62:19:
0d:b5:04:e8:f6:0e:26:73:6f:c5:9f:cf:68:30:b6:
3b:75:b2:2f:bf:fb:77:c9:8d:e6:c2:b9:ac:3c:e9:
2a:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C4:5F:E1:D6:94:E2:D3:E6:C9:EB:56:FF:B0:5D:CB:E0:90:A6:22
X509v3 Authority Key Identifier:
keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:36:40:90:bb:74:80:95:71:5e:e9:3f:0c:cb:3c:f8:3e:7f:
b6:60:38:0e:f0:b2:f2:c3:da:14:a6:ab:03:25:c9:79:a9:fb:
0a:93:5c:02:07:a7:fc:43:7b:8a:d0:7c:7e:bb:9d:f6:a7:63:
c7:08:ee:a0:5e:4f:cd:59:f9:6f:b4:87:22:91:29:9f:85:ff:
4f:84:3c:4d:f6:26:9b:08:84:62:3e:f8:f2:a3:e0:26:b9:fe:
ea:67:32:3d:a3:d5:69:ba:2c:06:39:11:78:a6:37:85:c7:4c:
1b:ca:dd:88:26:2d:dc:cd:2b:b8:75:02:b3:d9:12:d7:70:da:
20:d2:e3:ad:1d:38:fb:6d:1e:37:c4:dd:57:49:f9:f7:f5:06:
53:8b:96:dc:07:80:85:cb:55:93:a7:11:93:0f:a0:ea:c3:1d:
1e:39:bf:4b:bd:07:bb:92:67:70:b0:f8:82:e3:c1:8a:7f:d5:
c3:1e:97:8c:30:e8:d6:df:fa:1a:2d:23:aa:00:a7:59:40:ee:
9d:91:cb:a2:01:3b:3f:29:fe:56:7b:69:aa:62:07:2f:af:d6:
b2:d4:e3:51:6b:ac:88:20:0a:e7:c4:14:9b:51:5e:e0:1f:73:
f2:a8:46:e7:65:94:ab:b3:4f:2c:10:3b:5a:56:c2:c6:51:c0:
d0:6b:5d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:13 2026 by rpki-client