Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier: xBiRba+sSZiM2Pp09j1iB/Rk4LcHuJibr/Gz12IKZ2M=
Subject key identifier: 94:A0:22:26:0B:24:0A:98:51:51:22:D9:86:D7:E9:F4:0B:E8:0A:06
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial: 019D2B172BDEBB8218400F03B159AA77B771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number: 0844
Signing time: Thu 26 Mar 2026 17:00:31 +0000
Manifest this update: Thu 26 Mar 2026 17:00:31 +0000
Manifest next update: Fri 27 Mar 2026 17:00:31 +0000
Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: qC327a3F1zNFSMMX43Kn3ze3knPMQHOe+uWDvgkNlLU=)
2: 5sTdJeQvv6vdlppaT-0bRjKtxg8.roa (hash: b/QRqgkGgU7MnJZfBiHqIddmWZWJFgjkkxrAF3+M/Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:17:2b:de:bb:82:18:40:0f:03:b1:59:aa:77:b7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Validity
Not Before: Mar 26 17:00:31 2026 GMT
Not After : Mar 27 17:00:31 2026 GMT
Subject: CN=94a022260b240a98515122d986d7e9f40be80a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a7:4d:c2:1b:42:55:b7:91:a2:81:4b:3a:d9:
60:42:8a:8d:ca:a7:7a:f7:a5:86:13:05:06:3a:a7:
7e:36:35:0b:2d:9d:3f:46:b8:10:47:df:84:d7:9d:
4c:d1:b1:b3:44:e5:d9:48:98:fa:6f:fe:11:fc:52:
1f:b0:81:a5:90:83:41:ab:99:e7:66:6b:0c:7c:85:
af:54:52:3d:7a:5d:fa:78:46:d1:ac:b5:0c:d8:4c:
52:c9:79:82:29:aa:e8:97:24:bb:bb:67:1a:70:8c:
f2:dd:af:3e:a7:a5:79:de:f8:ad:4e:53:17:a3:84:
18:bc:c6:34:fd:b3:de:f0:c8:37:2d:7a:12:87:c5:
9e:37:5d:9d:83:19:b1:87:61:32:87:05:44:0d:50:
cf:d7:7a:e0:cd:76:f7:f1:a2:e8:96:d5:82:1c:dc:
53:ba:73:bf:9c:9c:55:9d:a2:e3:04:e1:fa:6e:a7:
5e:fc:64:c9:23:53:09:ac:09:54:20:10:12:6a:11:
78:76:64:5d:1c:bd:4d:96:c4:65:0b:7d:67:c5:84:
80:61:1a:18:fd:a3:58:10:e1:dd:c3:60:4c:2c:e9:
df:2e:90:b2:ab:32:1c:65:20:0d:07:bc:a7:5c:9c:
6f:e1:38:b8:fb:89:83:5c:9b:34:f2:c1:d8:ff:a8:
65:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A0:22:26:0B:24:0A:98:51:51:22:D9:86:D7:E9:F4:0B:E8:0A:06
X509v3 Authority Key Identifier:
keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ef:0c:bf:34:fd:0e:22:d9:d2:b0:b9:f5:65:8d:f7:05:22:
73:4b:e8:7e:1e:bd:0f:3d:ef:e9:e4:3d:0d:9f:20:37:17:b0:
14:b0:a7:02:89:bf:65:00:e3:ae:5a:f0:81:3a:ee:bd:f9:5f:
91:4d:a3:32:d4:23:58:6a:71:82:62:5f:1f:85:cc:07:39:d7:
96:c5:67:2c:77:34:69:aa:f0:53:9c:1f:51:e4:42:01:8a:fc:
f9:44:9c:54:99:94:39:d6:92:ed:f0:cc:fb:be:b8:f2:07:33:
1b:46:cd:56:8c:42:c2:e1:29:99:a8:9c:f1:06:af:21:02:c3:
53:ed:e9:67:bb:4f:18:ce:c4:88:f9:fe:63:99:96:ac:f0:56:
d1:21:f1:24:b8:c9:9c:15:5f:f9:34:64:95:a4:20:63:f5:30:
f4:8d:62:de:bb:e1:f8:1c:15:9e:ae:d0:23:55:fd:45:bd:91:
9f:2a:85:7c:4a:fa:f1:a8:65:32:96:88:65:5a:b7:2e:0c:39:
6c:56:e9:73:af:60:cb:d5:52:dc:23:6d:0d:eb:1b:84:76:27:
5e:db:c3:01:2c:84:f4:68:9b:cf:06:42:c7:8d:36:82:43:f9:
0b:1a:f3:7e:87:b7:8d:c6:a6:01:75:59:06:bf:c5:7d:58:6f:
fa:16:b1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:55:36 2026 by rpki-client