Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
File: 4BGYDkOhYAqXZWfbBqNKARRf14o.mft (raw, json)
Hash identifier: 6hnLD70Gz0RCR4qkhqEnJ07iYkUpKOqzRbJ3iQcu2W0=
Subject key identifier: 82:E8:E0:F2:EC:96:48:FF:87:17:53:12:2F:4A:89:A9:0E:BE:BF:E7
Authority key identifier: E0:11:98:0E:43:A1:60:0A:97:65:67:DB:06:A3:4A:01:14:5F:D7:8A
Certificate issuer: /CN=e011980e43a1600a976567db06a34a01145fd78a
Certificate serial: 019D3977D26495D51694F2930F431F32F5F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BGYDkOhYAqXZWfbBqNKARRf14o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
Manifest number: 0112
Signing time: Sun 29 Mar 2026 12:00:46 +0000
Manifest this update: Sun 29 Mar 2026 12:00:46 +0000
Manifest next update: Mon 30 Mar 2026 12:00:46 +0000
Files and hashes: 1: 4BGYDkOhYAqXZWfbBqNKARRf14o.crl (hash: 3fU2CzI8rB5l6Gwjzzo670PinS1TZy2dkJpXECxitaU=)
2: aoCwhi5evCru6LgJTjJ8MV_C6jc.roa (hash: yQEGzqfXX6MkFbhFn963xnKD2YQsIROLhxeJWGdhd6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BGYDkOhYAqXZWfbBqNKARRf14o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:d2:64:95:d5:16:94:f2:93:0f:43:1f:32:f5:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e011980e43a1600a976567db06a34a01145fd78a
Validity
Not Before: Mar 29 12:00:46 2026 GMT
Not After : Mar 30 12:00:46 2026 GMT
Subject: CN=82e8e0f2ec9648ff871753122f4a89a90ebebfe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fd:25:4e:cc:84:f2:63:4d:04:76:2f:04:67:
0d:4a:e1:f7:a6:03:14:5c:13:96:46:47:a8:b4:64:
e3:46:9e:9e:ce:ee:64:32:7d:ca:98:1f:0f:42:3f:
56:29:1b:de:44:27:f9:9c:81:51:a3:46:b7:7a:ae:
56:e1:a2:e2:f2:f2:2c:91:8e:fe:60:f9:13:83:0a:
0b:f6:d7:91:94:56:43:90:3b:93:a1:57:0b:ab:5a:
84:af:21:05:1a:a4:02:84:c8:e6:af:f9:17:e9:5c:
e1:31:55:7f:3e:7a:df:ac:3a:f4:b2:0b:cb:a9:40:
2c:04:47:69:36:d7:54:f1:fe:a9:43:7b:6c:eb:74:
fc:55:8e:49:24:11:1e:d0:12:8c:b3:f7:7b:00:f4:
c6:72:7d:14:0f:6e:35:34:81:e5:90:98:00:d9:0e:
37:30:62:18:6d:a8:ee:da:8c:06:25:fa:b6:2d:49:
0b:ac:87:35:db:62:a5:bc:b4:7b:e5:44:d9:8d:0b:
2d:5e:3a:2c:74:71:4c:2e:bf:92:d3:98:1c:00:66:
ce:a1:6f:19:83:42:ac:05:14:07:16:63:ff:a0:9b:
0a:ba:e0:c9:90:07:78:73:65:a1:2b:a5:6f:18:e0:
89:51:4b:4d:aa:d4:53:8c:4d:15:0c:67:df:39:23:
e2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E8:E0:F2:EC:96:48:FF:87:17:53:12:2F:4A:89:A9:0E:BE:BF:E7
X509v3 Authority Key Identifier:
keyid:E0:11:98:0E:43:A1:60:0A:97:65:67:DB:06:A3:4A:01:14:5F:D7:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BGYDkOhYAqXZWfbBqNKARRf14o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4fb184-1d24-4151-8140-d2da5841354b/1/4BGYDkOhYAqXZWfbBqNKARRf14o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:8a:4a:df:a7:d7:ca:04:f0:ec:ed:ea:fc:38:da:98:bc:a5:
94:e2:16:ed:fa:93:ce:60:89:df:28:9f:11:89:de:2c:1c:44:
42:ea:53:72:71:d7:30:51:15:20:9d:b3:c7:36:b1:1d:a3:32:
15:aa:30:ed:cf:8b:5a:18:63:91:a7:6a:04:a0:e7:93:ac:23:
00:0e:60:5c:e8:9a:d8:a8:04:56:8d:ae:6c:d5:46:40:91:b2:
c8:8c:c6:7d:f8:2e:9a:5d:fa:d2:21:d9:a9:db:8a:bd:45:a1:
ab:16:84:f9:a0:ba:b0:dc:c9:02:2e:18:a9:69:d1:8b:5f:66:
54:0e:dc:46:96:aa:02:65:57:3f:26:b2:cd:d1:93:65:ae:ad:
8f:c0:61:be:07:a6:75:4e:46:51:5e:33:82:d6:e0:66:af:3f:
be:ee:3a:16:ee:33:69:93:6b:01:c1:28:b6:31:30:58:25:5d:
5b:1c:49:37:df:28:ff:82:8d:64:78:57:78:63:df:ab:72:66:
8d:aa:3f:9f:d1:af:4d:4b:43:a9:88:10:28:7d:85:5e:ee:ca:
67:69:cf:38:43:7c:5a:6b:d6:8e:62:dc:3f:d5:62:4c:60:b6:
f2:4c:27:35:f5:75:c1:b4:fb:13:0b:a0:fe:6b:9d:a0:d6:a7:
13:b5:f5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:16 2026 by rpki-client