Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File: 4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier: JbJpP7U4tWAr2kpDc7g9MdrGU/VXkkF8JXr2Kuhc9rk=
Subject key identifier: C4:AE:E2:C2:90:01:60:F7:68:EE:0F:92:EC:50:0C:1B:AF:98:20:6B
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer: /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial: 019D382E780E8FA2B30C6921EDF6B6D782A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 06:01:02 +0000
Manifest this update: Sun 29 Mar 2026 06:01:02 +0000
Manifest next update: Mon 30 Mar 2026 06:01:02 +0000
Files and hashes: 1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: HMQJpQyFtR0TN/ZIq/CcXiItZr/R7ht8DOgRkoE0vLQ=)
2: EC4GBb1LJjJ7pV8_x0txKCEIXSg.roa (hash: 9oW73pfxOP8M7veC/PL5Kk4ZUA5njttoIdfA+gSwRO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:78:0e:8f:a2:b3:0c:69:21:ed:f6:b6:d7:82:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Validity
Not Before: Mar 29 06:01:02 2026 GMT
Not After : Mar 30 06:01:02 2026 GMT
Subject: CN=c4aee2c2900160f768ee0f92ec500c1baf98206b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:72:ff:b1:03:83:9d:fe:7a:79:c0:ec:13:48:
77:17:e0:f9:8f:9a:35:ac:3b:d7:7d:19:3d:1b:87:
04:a3:ee:d7:fb:60:f7:24:cc:98:16:29:e4:c6:7a:
96:53:8d:fc:bb:e9:40:61:1e:eb:95:7f:15:cb:68:
59:09:20:69:3c:c3:0c:83:7d:b9:c5:ec:d7:2d:e5:
4b:f6:6f:1e:02:86:14:21:d9:ad:02:d5:cd:3d:c5:
6b:8a:89:85:93:bd:fc:6f:ac:7c:1c:be:8b:56:af:
30:5d:27:02:1e:df:4e:93:a8:d6:c3:7c:d0:07:4b:
29:89:50:4f:8a:b9:06:b1:df:46:17:a5:3d:0c:3f:
e5:79:a6:e0:12:8a:e2:d1:e7:49:96:23:71:8b:74:
1b:40:60:86:27:58:33:b4:6e:f3:6c:c9:67:93:ad:
d3:7a:9a:13:8d:c4:0f:87:88:e0:b1:1d:db:73:15:
4f:f7:0d:51:fc:97:85:b9:50:a6:11:8a:f1:a6:a7:
3c:38:97:f4:df:a2:06:11:6e:bf:51:2f:8b:a6:26:
96:86:72:5a:f8:e2:a6:a3:8e:a6:5e:54:cc:73:af:
0a:50:18:d4:13:c8:5d:7b:cc:43:8c:1b:83:44:ea:
5b:a1:7e:ee:7e:d8:7e:71:c5:ec:11:16:9e:c0:97:
28:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AE:E2:C2:90:01:60:F7:68:EE:0F:92:EC:50:0C:1B:AF:98:20:6B
X509v3 Authority Key Identifier:
keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c3:2c:14:90:01:bc:70:31:81:8f:a6:b8:ca:3c:43:88:97:
cd:2e:2f:1f:69:64:31:9c:2d:32:8f:12:52:e5:47:4e:a8:45:
7c:90:fd:bb:dd:e1:2c:7e:33:e9:a4:04:4c:18:21:51:31:ed:
1e:58:6f:d8:70:cd:68:58:94:1d:82:a6:f5:12:e7:07:c4:b7:
8f:43:15:db:d6:b6:ed:14:f8:cb:d1:12:1b:f7:ca:60:aa:f1:
7c:7c:32:56:eb:16:44:a5:ca:39:ce:fc:0d:07:39:1d:11:8a:
23:8b:57:f9:d7:13:36:fa:8f:f1:bc:f2:64:7f:7a:f3:64:27:
e4:eb:1b:2e:7c:8c:b4:bd:f2:1a:d0:23:db:42:02:63:d0:8e:
e4:0a:e8:df:97:6d:fd:ad:d8:5b:3d:9a:af:81:68:31:a7:85:
3f:36:44:36:a0:82:cd:3c:72:f5:80:c3:5b:8e:f1:32:c7:4c:
9c:4b:f6:57:80:1e:04:43:c2:ed:ce:1a:a5:65:2c:0e:bb:b6:
c1:76:af:11:03:bd:5c:fe:6b:b5:94:0f:ea:c1:22:80:3c:aa:
b1:ec:67:ef:f4:20:0a:9a:d9:0c:20:29:fc:5d:d8:f2:cf:50:
e5:cf:28:b2:17:3d:86:9e:da:84:67:06:32:0f:34:21:06:3a:
46:d4:5d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:15 2026 by rpki-client