Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: gJOx7Kw82WxIWOh68jbjF4H4wr4u/5ILQ+OJLrMs9rE=
Subject key identifier: 12:D2:7A:BE:5F:82:F3:81:95:EE:A3:88:5C:85:1D:7F:11:D6:CA:78
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 019D3909E060F0BA801987ED4D9A4E5719FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:41 +0000
Manifest this update: Sun 29 Mar 2026 10:00:41 +0000
Manifest next update: Mon 30 Mar 2026 10:00:41 +0000
Files and hashes: 1: 102rhK3hZolwzCt7IJfuq8GdQf0.roa (hash: YO/FD+MWLi1I9ePrVvUS7xZGRfMEMrX2LxQRpa4cPxs=)
2: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: tTjSBYfFJhIkO0w+D5k1kgpu64MEN507y9Kxe8qjCN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:e0:60:f0:ba:80:19:87:ed:4d:9a:4e:57:19:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Mar 29 10:00:41 2026 GMT
Not After : Mar 30 10:00:41 2026 GMT
Subject: CN=12d27abe5f82f38195eea3885c851d7f11d6ca78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:76:72:57:0b:ad:a9:af:4e:0d:11:9d:66:
d7:04:8f:ef:e8:aa:d0:bd:62:1c:1f:e6:d1:88:3c:
2f:3c:2f:ab:de:6e:07:8a:94:4c:3f:16:05:41:f7:
87:4a:2c:52:6c:c5:78:3e:d8:7f:2e:ae:e1:b4:81:
b9:06:56:90:e9:30:cc:4f:75:77:3c:a8:dd:58:f0:
7e:a3:3f:77:e7:7c:e8:88:26:0b:81:f0:44:2e:42:
ee:e6:64:b7:6d:ea:7d:f4:76:10:dc:cb:d0:0e:a2:
ee:d5:44:a9:00:f6:f8:80:24:17:88:c2:ff:44:14:
b4:42:73:15:60:36:cc:46:3a:c7:c8:e7:c3:2c:7e:
eb:46:e4:c9:79:7a:d5:99:dd:c5:cc:b6:22:bb:11:
9c:74:93:cd:12:89:38:03:43:cd:3c:f4:b1:a5:22:
00:08:4c:17:cc:a2:fb:77:1f:00:b2:e2:59:ab:d3:
76:b4:a8:37:3b:20:37:dd:d4:e3:9a:f4:2a:9d:66:
66:88:22:47:88:42:25:6c:fe:41:6e:b3:a5:3f:fd:
52:89:73:99:27:ea:22:ca:c6:cc:65:e1:8a:aa:6e:
4f:3b:7a:fe:3f:96:e7:b8:75:30:fa:d4:cf:e6:85:
1d:9b:d4:25:c5:5e:a4:06:d5:28:41:4f:d9:3e:c7:
86:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D2:7A:BE:5F:82:F3:81:95:EE:A3:88:5C:85:1D:7F:11:D6:CA:78
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:3a:d0:c1:bc:c0:b6:ff:4e:fc:31:f4:83:5d:20:56:12:47:
c5:a1:a5:98:8d:bc:42:90:33:62:3c:58:01:68:ed:91:70:cc:
b1:4d:2a:72:0a:8d:c7:99:97:3f:b4:a1:e2:b4:c4:79:13:4c:
ea:2a:ef:23:94:35:bf:4d:df:88:4c:1f:17:bc:58:0e:56:24:
27:39:d0:e1:f4:8d:96:0b:a3:30:23:4f:d3:49:36:2d:04:5b:
90:97:2e:4e:19:c2:a0:c3:e8:b6:f4:c7:8d:76:37:f7:73:5a:
bd:a4:f9:6f:45:5f:02:32:24:8c:ca:20:56:41:4b:8d:8b:d7:
e6:b9:83:45:11:5a:02:46:34:52:fc:ae:30:be:67:eb:4a:c7:
aa:da:1e:2c:ed:f9:fc:4b:e1:b9:76:e8:26:86:b0:57:8c:2f:
61:80:01:d7:2d:89:57:4b:ff:57:ec:20:cf:1a:76:55:9d:82:
09:b9:dc:5d:ad:8d:3c:3c:fd:f9:1d:e4:d0:b8:55:46:d2:b0:
e4:1d:26:2c:6d:de:e3:6d:01:76:6e:2a:8b:b4:8f:c5:03:64:
a0:79:2c:d7:93:fe:32:db:c6:9c:82:a2:76:ca:fb:de:99:94:
3e:f8:4a:ff:4e:10:9d:d9:c9:45:aa:34:da:d9:72:09:43:2e:
a2:ec:73:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:01 2026 by rpki-client