Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
File: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft (raw, json)
Hash identifier: lPwGl+0UilaJPrDjI5fZbglCPIpRoZj3BpHlSLYOlcg=
Subject key identifier: 0A:C7:FC:7B:22:CF:22:E2:D9:6C:BE:9F:59:D3:F0:33:E5:31:1E:45
Authority key identifier: E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
Certificate issuer: /CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Certificate serial: 019D386585CBDF19198522178A57241BCDD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:10 +0000
Manifest this update: Sun 29 Mar 2026 07:01:10 +0000
Manifest next update: Mon 30 Mar 2026 07:01:10 +0000
Files and hashes: 1: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl (hash: eBQB4Q0D10uJVK5MGdND9GgC/RWfCvGiXbxixwnMI9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:85:cb:df:19:19:85:22:17:8a:57:24:1b:cd:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Validity
Not Before: Mar 29 07:01:10 2026 GMT
Not After : Mar 30 07:01:10 2026 GMT
Subject: CN=0ac7fc7b22cf22e2d96cbe9f59d3f033e5311e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fd:ef:4e:c6:ab:20:bc:72:bc:2d:58:58:f6:
c9:7b:18:6f:d8:ec:2b:a4:0c:40:62:12:a4:f3:f4:
74:02:3a:83:51:3b:8b:61:8c:a8:81:de:ab:39:d0:
96:de:9c:9d:5d:ab:32:6e:dc:a0:81:a7:54:a5:dc:
6b:20:bf:4d:8b:59:f9:09:74:8e:7f:db:a7:4b:47:
d4:11:8c:8e:56:dc:28:8a:97:8e:f1:ff:2e:69:99:
be:e2:3c:4e:25:5e:81:76:58:53:0d:0d:b5:bc:f0:
14:7d:be:4e:07:c9:33:16:ab:aa:69:e5:b4:62:0b:
72:12:5d:8c:64:20:64:bf:2f:b6:5a:88:31:d5:76:
77:f5:7e:c4:b8:7b:5c:fc:cf:d8:b7:39:de:00:c6:
5b:2d:91:8b:c6:86:58:1d:cd:c7:60:0a:45:7b:fe:
5d:88:b9:1a:b2:1d:55:c3:f0:11:6b:45:f2:6d:45:
fd:cc:8a:63:67:c3:62:a8:5b:ab:33:1e:9b:4d:df:
b6:b5:7c:b0:8b:85:f9:72:18:cf:d7:97:13:6a:98:
56:48:0b:19:ed:dc:26:28:6f:77:85:c7:b9:7e:f5:
1d:39:37:0d:c1:44:d3:56:37:d0:c3:1d:98:30:6a:
ba:7a:d2:6a:2c:83:7b:7a:22:ee:2f:c0:9d:b3:8e:
c7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C7:FC:7B:22:CF:22:E2:D9:6C:BE:9F:59:D3:F0:33:E5:31:1E:45
X509v3 Authority Key Identifier:
keyid:E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8e:c1:68:b8:12:a2:86:ad:91:e2:a9:e3:70:e4:03:ae:db:
1e:8c:9f:47:67:ec:b4:1f:c8:c0:6e:88:55:12:d7:cd:0b:18:
81:f1:76:a0:11:2f:9f:d7:00:d0:b9:e7:f8:5b:3a:fe:cd:c9:
a5:20:55:4c:70:18:1c:2f:e1:e9:ce:43:10:77:b2:ca:7e:64:
5e:9a:56:4e:95:62:8d:2c:be:dd:d4:db:ea:9c:d1:05:c0:1f:
f1:da:3f:75:af:12:b2:0b:5f:27:31:cd:2e:d4:bb:da:b0:c1:
db:e3:30:6d:21:cc:7a:bb:ce:b3:06:d1:16:45:47:c4:1a:9b:
91:23:d1:89:c3:4d:5e:ca:60:9e:77:89:05:88:df:24:6a:d9:
1a:d8:56:6e:16:ff:e5:f7:8a:c6:a1:66:8b:71:34:c3:97:27:
fb:e4:25:34:ef:ee:9a:b3:b5:15:e8:5a:89:c7:d3:58:8b:99:
30:6a:cf:50:cd:94:dd:1f:02:f2:6a:0d:fc:2f:46:9b:18:1c:
cd:02:e7:e7:e8:63:60:e0:ca:7a:27:0a:00:8b:49:64:75:b3:
38:23:a7:8d:ec:96:55:43:74:fb:fb:a1:a0:79:cf:3c:60:fc:
1c:ad:3c:92:c1:ad:c0:ff:0c:f5:7b:ad:f6:c0:d2:1c:e3:89:
90:f4:c4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:16 2026 by rpki-client