Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File: 4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier: grkEJogPtSYghyVqvzN9ZVR3rdZfNZg68IGOwcupmhA=
Subject key identifier: 13:C3:64:8C:6F:B5:FE:B3:9D:3B:97:40:FF:B4:E4:4E:19:1A:54:BE
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 019CE5FFAFEC4C7A20651E032F2EADD8284F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number: 138D
Signing time: Fri 13 Mar 2026 07:01:05 +0000
Manifest this update: Fri 13 Mar 2026 07:01:05 +0000
Manifest next update: Sat 14 Mar 2026 07:01:05 +0000
Files and hashes: 1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: A5OBZAgSfPBSNaMnJ8eOYB8473JCksQ2MLfIQ7gnFgQ=)
2: 4xl3tok9SorpWFsyI4hTWRVgL8I.roa (hash: D/WQvDz0YD7aThz9pG4ZIXECMXp1ea6y/G/Bk0u0Mqg=)
3: vzJwebJ7E7PLEVf89eADV1dlWKk.roa (hash: Yr+W4PaEcUNg/gK3cVZEvL18EsHfc2QVQ1cTqMJ7HMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e5:ff:af:ec:4c:7a:20:65:1e:03:2f:2e:ad:d8:28:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: Mar 13 07:01:05 2026 GMT
Not After : Mar 14 07:01:05 2026 GMT
Subject: CN=13c3648c6fb5feb39d3b9740ffb4e44e191a54be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:27:d0:0a:f5:98:59:51:c2:ba:b8:14:46:ea:
72:6e:31:8f:7c:02:e0:42:bf:43:40:b7:f8:da:c2:
44:66:a8:13:b4:95:25:7f:7d:90:08:db:69:26:c0:
cf:67:57:6a:d5:ac:89:f2:d4:af:7b:a5:3f:b2:1f:
6d:36:91:b2:1f:fb:1b:e5:72:af:d0:1f:55:4b:32:
bd:33:32:12:03:a8:68:97:f8:40:36:22:a6:41:1d:
7e:4f:27:0b:84:cf:0d:1e:20:56:69:3c:5d:a9:a9:
10:51:fc:a5:8c:b1:66:3e:65:c6:45:44:8f:2f:3e:
55:7d:d3:6d:fe:b4:5b:6c:a4:a9:33:36:db:0d:05:
3f:ea:48:b5:ce:35:c8:7d:5c:4c:fe:88:04:c5:b2:
be:c1:b3:dc:27:bb:24:dd:98:76:61:5d:13:ed:fd:
47:d4:44:ff:6b:be:20:24:2b:93:7d:93:b7:fc:06:
6b:ad:5d:96:41:5d:b7:5c:3b:4b:f6:81:e2:8e:e5:
ec:bf:26:ff:05:1a:73:81:7b:c8:54:fd:07:d0:ad:
49:ef:cf:81:0c:d7:82:75:66:8f:1f:d4:de:60:f4:
f8:b2:51:e1:bd:18:2a:27:1e:e3:aa:52:30:27:8e:
31:46:7a:e6:e9:9c:66:ed:4c:ad:71:37:9e:aa:cc:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C3:64:8C:6F:B5:FE:B3:9D:3B:97:40:FF:B4:E4:4E:19:1A:54:BE
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ee:2a:e1:2a:c0:ec:c8:dd:62:57:f0:fd:0f:14:e6:9c:0b:
3c:44:c8:7d:4c:2a:0d:cd:9d:36:85:79:e0:e1:75:b8:25:e7:
7a:39:a7:10:e5:37:ee:79:fb:ef:77:5c:3b:c0:f4:3a:c6:ce:
3e:d4:f5:5e:e1:8d:21:cd:77:98:3c:17:d1:23:00:2f:7a:04:
4d:b0:27:d2:7f:bb:c4:69:76:7e:c5:fd:18:e6:58:f4:86:01:
51:00:55:dd:e9:4f:f4:b7:41:62:56:6f:9f:58:e0:74:09:8f:
6f:ad:7d:01:38:0e:2d:d2:63:af:37:9c:69:ce:75:42:dd:32:
b0:37:73:3e:a4:ec:09:9f:49:40:b2:5f:8a:9e:4a:06:75:ae:
0b:05:66:2a:1d:b1:b4:87:9e:06:e6:88:70:28:a1:16:6b:9a:
df:8c:46:11:fa:88:12:fc:22:43:b6:fe:eb:70:88:ea:af:d2:
e9:64:1f:88:ce:18:e2:79:e5:68:4b:e8:c8:3c:43:12:11:0e:
28:aa:1c:fe:bb:c7:a1:76:ab:f9:bb:d0:b3:3d:fa:0e:99:d0:
89:8e:fc:31:e9:ab:ee:67:03:4e:12:65:20:20:7b:29:4a:d8:
35:31:17:e6:0e:65:d2:87:f8:5a:37:c0:07:3b:0d:a7:39:8c:
35:2a:ac:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:56:52 2026 by rpki-client