Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier: XIa2AcJ21lDPU0s0Jfj0TqA6XMgo5KUBsAlIKIJYThw=
Subject key identifier: 1A:68:81:DB:94:AA:AD:58:7F:5F:15:5D:1E:5A:5B:7E:D2:F6:E7:D5
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial: 019D38D2CE2D4D1E5CBFBD1FEECD95017681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number: 06B8
Signing time: Sun 29 Mar 2026 09:00:32 +0000
Manifest this update: Sun 29 Mar 2026 09:00:32 +0000
Manifest next update: Mon 30 Mar 2026 09:00:32 +0000
Files and hashes: 1: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: querUx0TwVscNhfKojZJgG+IywRh9o92g0tDCvXL9D8=)
2: QzeP51koEMjHeE88RWvwCqM_qGQ.roa (hash: nwOrnYkRQHY2ElWIiV63spIPWkoVMJum1Nxinn4biHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:ce:2d:4d:1e:5c:bf:bd:1f:ee:cd:95:01:76:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Validity
Not Before: Mar 29 09:00:32 2026 GMT
Not After : Mar 30 09:00:32 2026 GMT
Subject: CN=1a6881db94aaad587f5f155d1e5a5b7ed2f6e7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:06:d5:9c:15:b1:24:2c:3b:97:de:28:2c:c6:
c8:19:88:11:7e:8e:97:cc:a0:d9:97:5e:4d:99:b0:
1a:33:67:4e:d1:f9:3f:29:cf:9a:58:bc:24:ce:24:
bf:83:40:b6:6d:fc:9a:16:0f:2f:10:6b:4f:c0:fb:
6d:51:73:57:32:c1:92:6a:f0:f1:f4:18:11:b3:49:
e5:05:fe:12:5e:8a:0e:66:35:6d:f5:f6:34:d9:0d:
9f:a1:78:af:96:22:d4:71:d6:22:99:c8:b2:8c:10:
6e:ea:e5:5d:9f:ef:e0:c2:f7:66:e8:7d:1b:63:73:
42:a9:ed:80:a9:1a:eb:8e:6f:bf:15:f6:a0:5d:80:
bf:80:2c:ac:68:23:19:39:5b:f4:66:c9:df:7f:bf:
e1:f4:54:20:57:be:e6:da:54:1d:f0:e7:62:6e:58:
b5:88:15:0d:e3:64:d2:7f:fa:28:d4:6c:81:16:52:
26:4e:e8:95:8a:75:6f:48:25:de:eb:e0:b9:38:a5:
74:d3:bc:c4:9f:e0:75:27:5d:2f:0b:e0:ff:58:a8:
34:03:77:f0:5b:64:ac:08:1f:e8:71:52:7a:d5:de:
fb:e3:ab:df:8b:a3:07:24:46:f7:82:de:ad:2d:dd:
19:40:7d:55:53:e1:6e:9e:65:c4:7e:0e:66:f9:ed:
52:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:68:81:DB:94:AA:AD:58:7F:5F:15:5D:1E:5A:5B:7E:D2:F6:E7:D5
X509v3 Authority Key Identifier:
keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e0:c1:67:9c:dd:90:74:ae:de:66:f9:b4:e9:4c:90:64:d1:
69:f6:6b:f0:f0:66:fa:5d:40:a6:50:a7:35:24:03:4f:c4:84:
40:c1:d9:3a:aa:8e:fa:80:fa:16:f8:81:d8:10:cb:4c:dd:b0:
02:6d:da:1e:0a:16:59:f7:ca:4f:a9:ca:78:ee:13:33:b8:54:
67:1d:08:7d:e2:f5:13:d7:80:b8:31:a3:47:4b:b1:a6:28:c7:
01:a8:64:5d:36:ee:98:9c:18:b7:40:0b:32:9f:0d:df:f7:37:
fa:c2:91:e4:66:b3:7e:d1:61:66:79:fe:2c:13:3e:40:b6:64:
83:c9:1b:d8:f5:85:3b:54:9a:79:0b:2f:21:34:50:28:7d:29:
2d:cd:7f:fb:70:9c:96:59:7a:61:11:9a:89:db:1d:47:c6:1a:
df:29:4f:0b:de:04:69:70:ed:6e:d9:46:bb:cb:dc:1b:f1:da:
06:74:12:a9:34:69:40:6f:aa:8a:43:cc:26:32:14:2f:2b:9d:
3d:b5:d9:b1:05:10:59:1f:72:87:73:07:1a:4f:87:f9:d1:a9:
86:97:5c:8f:1b:b5:2d:79:5e:ee:4b:d9:fd:2e:b5:19:3d:85:
b8:d8:ea:5c:9a:c2:c0:73:ee:53:bc:d8:37:03:ef:80:15:80:
c6:4f:6c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:24 2026 by rpki-client