Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier: ysy7ty19i0S0e6Ds6Db+iyBIJon1u3ef7xPzgB+0s5Y=
Subject key identifier: 47:AB:FC:25:FD:EB:F1:E6:80:B7:19:41:A6:C7:8C:06:24:C1:C2:E9
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer: /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial: 019D2884C1F589C97C7CD917F892D6795D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number: 0869
Signing time: Thu 26 Mar 2026 05:01:22 +0000
Manifest this update: Thu 26 Mar 2026 05:01:22 +0000
Manifest next update: Fri 27 Mar 2026 05:01:22 +0000
Files and hashes: 1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: y4exdxmaqHVVZ0GW3MpLwuL29DVYrQ0rCBFjWWbbD3s=)
2: gVfdWm0UhTm-_kYhCxfI_PPh9pQ.roa (hash: KPBhQabvMXA3ivJ7vLYo7qGQjlOgp6mXdXBE/OSlu9M=)
3: wZ9RkRMpZ0zSJRETkyLZujvEe_A.roa (hash: 8sVpKy5s2khImy6cMRVFY6mSlDYqhzQpPN1YY16omwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c1:f5:89:c9:7c:7c:d9:17:f8:92:d6:79:5d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Validity
Not Before: Mar 26 05:01:22 2026 GMT
Not After : Mar 27 05:01:22 2026 GMT
Subject: CN=47abfc25fdebf1e680b71941a6c78c0624c1c2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4c:54:7f:42:35:e9:c1:a2:5a:0b:96:85:85:
99:19:b2:59:31:df:46:7c:44:47:86:c0:ca:2d:82:
b2:26:ef:8f:2b:a0:cd:ad:f1:c1:a3:3b:f5:74:4a:
36:7b:81:7f:f3:94:bf:5d:3d:11:09:16:7c:a2:7b:
21:04:8c:3d:fb:fe:72:47:29:10:57:9d:59:4b:aa:
4b:c6:94:1b:7b:8e:5e:0a:ef:89:f2:94:d3:8b:27:
28:08:13:8c:b6:5b:08:72:b4:53:ec:8f:76:6d:6a:
62:23:78:2e:4f:52:f0:ea:11:6a:18:30:7d:a8:69:
8b:63:84:a6:23:25:bd:12:e6:ff:30:4d:03:aa:8e:
bb:45:e8:9f:97:34:e3:13:bd:9a:60:2b:95:ae:d3:
3e:41:f0:09:68:b8:31:db:9e:9d:a2:27:21:8d:41:
6b:ef:a2:e7:d8:cb:71:e7:c9:c0:27:96:f8:01:32:
32:95:6f:7f:d9:a2:f8:b9:21:46:ea:2d:42:a9:c2:
88:b2:a9:e7:3e:a4:48:c6:89:00:cb:1d:1f:17:43:
d0:16:6c:37:57:bd:a9:df:3e:d5:e2:6b:bb:0b:d8:
51:87:d5:cc:98:ac:9b:fb:6a:c9:71:cb:d6:2e:d7:
9f:be:12:8f:a3:13:f2:b2:76:83:64:a9:76:aa:4a:
36:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AB:FC:25:FD:EB:F1:E6:80:B7:19:41:A6:C7:8C:06:24:C1:C2:E9
X509v3 Authority Key Identifier:
keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:76:28:bd:7e:30:6f:80:48:e0:a2:21:b3:d5:57:4e:09:c8:
3e:62:2c:12:d7:28:7a:5d:e7:d9:84:5f:f9:29:c9:9f:da:b9:
f5:05:7d:c7:5a:a2:05:48:62:a3:ac:dc:f3:d2:5d:b7:d5:f8:
85:b6:3a:74:47:04:4c:8d:2f:07:b4:df:89:c8:86:7a:13:60:
3c:fa:38:c3:28:86:9d:6d:43:75:ca:65:8c:a4:45:a9:85:fb:
01:d1:e4:56:fa:d0:59:1c:02:fa:d0:df:a4:dc:39:10:d8:fd:
c5:27:7d:1b:bc:48:4e:5b:29:2b:97:24:ce:47:08:bc:25:95:
4e:eb:97:6c:33:7b:ca:a6:16:9d:49:c0:eb:e9:7f:f0:fb:a0:
2b:b2:df:ca:fe:d2:32:e8:b8:f9:fa:77:30:93:fa:62:e7:7e:
a8:be:37:4b:8d:f0:2a:d6:15:17:af:02:e7:a6:f9:53:55:f4:
fe:62:6c:02:25:a4:34:8d:ed:89:fa:fb:b2:85:99:70:71:07:
77:02:b8:eb:6a:9b:dd:37:9f:86:89:d1:65:63:3b:06:70:98:
9c:1d:12:bc:b9:40:d2:3e:26:2c:eb:38:e8:75:77:5e:75:b8:
52:fa:f7:c6:bf:0c:f6:58:3b:f9:e1:e8:26:1f:20:0f:6e:54:
68:00:c5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:13 2026 by rpki-client