Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: td+lXxt/Brm2fTTCfq0hEkTDHFTqJdrnC6oc5WfW9OM=
Subject key identifier: DA:3E:7C:C6:B6:88:AA:CD:E3:58:95:E7:DF:C4:CC:96:D4:38:C3:3E
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 019D284DFA15885F2F23376ED5DF636FF7FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 0AC5
Signing time: Thu 26 Mar 2026 04:01:32 +0000
Manifest this update: Thu 26 Mar 2026 04:01:32 +0000
Manifest next update: Fri 27 Mar 2026 04:01:32 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: HsGjD0akclFxgFxNRn9Ct4rDHE8gq/4SNKsPaUn47a4=)
2: OPFTuLGWkU6mUdnCpgOtMP0wcEc.roa (hash: mYTV++dJNwiiA96b08GGaua3APnQu69gvPcnLc6GiRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:fa:15:88:5f:2f:23:37:6e:d5:df:63:6f:f7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Mar 26 04:01:32 2026 GMT
Not After : Mar 27 04:01:32 2026 GMT
Subject: CN=da3e7cc6b688aacde35895e7dfc4cc96d438c33e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:8a:13:b9:3c:4a:c8:3a:52:a8:76:d1:63:
98:e5:26:69:ab:08:a8:73:0c:d4:6f:02:41:3b:36:
56:65:fa:40:1b:ab:46:38:5f:8a:72:3c:65:c9:95:
d2:4b:ea:c0:23:8c:e4:53:b2:f3:ac:cd:cb:18:48:
90:45:db:24:48:e9:4d:fc:0b:ad:7c:c3:a6:90:a5:
04:c7:9b:21:17:9b:aa:14:88:d7:0d:f6:27:42:08:
0b:23:a4:6a:78:3b:d9:1e:4e:19:e6:b6:31:1e:ab:
d1:9d:0d:a6:fa:99:6d:55:ce:f6:42:0d:09:0b:ab:
df:b9:59:d1:48:e9:69:52:ea:94:dd:4b:5a:cf:df:
a9:f8:b3:fa:9b:5d:f7:9e:0b:74:21:4b:9b:f3:ec:
25:bb:91:88:a7:21:3c:3b:78:91:a5:7b:3b:fc:6a:
52:af:5d:2d:be:a7:4d:df:67:99:3c:e3:79:b2:2b:
77:ff:06:41:d3:e9:66:03:96:83:98:b0:2b:b1:76:
c3:bb:44:82:46:0d:60:2c:a6:3c:dc:03:fe:e3:82:
84:4d:3d:4e:ea:bc:12:3d:d3:bb:d7:c9:7e:29:f5:
72:44:c3:e4:1f:f5:b2:6d:c8:37:96:f2:43:af:22:
7a:eb:ea:45:c8:ce:9c:cc:ee:ee:a4:6a:4b:ae:da:
31:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3E:7C:C6:B6:88:AA:CD:E3:58:95:E7:DF:C4:CC:96:D4:38:C3:3E
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:46:21:77:ae:c0:99:ee:fd:b6:8d:9b:4a:7e:52:41:f2:ac:
f1:30:73:79:e2:69:2e:46:58:92:22:8f:40:98:a2:8d:d0:1d:
08:02:48:13:d5:97:f6:5d:96:cb:4e:27:31:f2:bb:fa:90:b3:
58:77:9c:3e:c7:e4:c5:f1:83:2c:6d:fd:5e:dd:da:be:57:09:
30:46:08:ce:cd:a9:1a:d5:46:67:b1:7e:97:85:6c:cd:0c:88:
8b:36:e8:a8:00:40:9b:0d:5a:18:1a:32:dc:f0:9b:2b:39:53:
fd:5f:9a:6b:b4:8d:9b:78:07:72:bd:32:ca:6f:4b:b9:c5:3d:
e2:26:2d:2c:b0:30:39:d3:4d:4f:6d:db:83:c8:28:f5:be:29:
ca:24:8f:d0:c3:c9:c5:d4:9d:73:f2:32:af:5c:24:54:88:8c:
fa:7c:84:8e:c6:d9:02:f6:f0:ef:37:41:ab:3e:cf:f9:72:2b:
bb:f0:ab:6d:e1:40:9d:03:05:53:3f:af:7f:a8:2e:55:6b:66:
8a:b2:3b:fb:5d:32:e0:5a:98:5c:85:22:e0:66:5d:13:9d:59:
27:dc:77:95:2d:b2:69:c6:29:63:65:45:e5:d9:bf:77:96:31:
28:d7:0b:8c:e4:0c:23:8a:39:fe:9c:18:41:55:b4:f9:07:d6:
d2:41:24:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:44:04 2026 by rpki-client