Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: 4jZWm823rAcr8SeuLMvrZOaoSgrbToZiigxwL9NrZwo=
Subject key identifier: 6D:B3:C0:F3:BD:B0:F1:7C:7E:14:28:01:86:BA:0D:DF:90:D1:F4:3A
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 019D26CD414A7DBE80F875434861DBD4524D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 0688
Signing time: Wed 25 Mar 2026 21:01:18 +0000
Manifest this update: Wed 25 Mar 2026 21:01:18 +0000
Manifest next update: Thu 26 Mar 2026 21:01:18 +0000
Files and hashes: 1: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: tN8yjUZNTpezUgrHo8FyDBFZDH1F3DMZiNkq8B+If2U=)
2: Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa (hash: imyx+MqhErllzPgURUbLOjPqBlQ0hxwFitun79GI6bQ=)
3: pIH-PyJ-S7KYRBMhx3HzyVyBgpM.roa (hash: 1cLs+Wdw+wnP8h4XUUBLHG3PCH085TENzzZDNYgitoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:41:4a:7d:be:80:f8:75:43:48:61:db:d4:52:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Mar 25 21:01:18 2026 GMT
Not After : Mar 26 21:01:18 2026 GMT
Subject: CN=6db3c0f3bdb0f17c7e14280186ba0ddf90d1f43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:4d:26:57:c6:92:83:b2:88:4d:00:ff:7b:
cd:aa:bd:dd:a6:19:bd:12:8c:2a:1d:4c:4e:50:8d:
e4:7c:99:47:1e:33:87:05:fb:e2:ef:c4:7d:85:b9:
74:df:6d:10:5a:81:72:5e:e7:77:34:5a:c4:ec:63:
e1:2a:8f:70:d4:91:f7:72:84:06:60:e4:fa:cd:72:
58:5a:ab:3b:5d:a8:17:9e:6c:a1:ef:26:41:c2:a4:
9b:ef:a1:fc:0f:e5:96:b1:e9:0c:99:b7:5c:78:c8:
5c:75:98:ff:fe:dd:e0:7f:7b:00:88:30:f4:d2:25:
1d:cd:b5:53:70:ef:df:45:de:7f:8e:e5:b4:19:f7:
85:53:f5:5f:b8:a2:1f:7f:6c:76:d3:58:0c:1d:b4:
92:fa:bd:23:1a:65:f6:fd:53:d3:c2:84:ac:09:fa:
45:4c:fe:4c:7b:5e:f7:e3:da:df:b9:56:d6:5f:74:
ec:89:bf:0a:5e:a2:3f:30:0c:97:12:e2:35:45:b3:
cf:4d:f6:a5:03:7c:46:b6:16:a7:0d:83:3c:60:0f:
5c:66:f9:5c:17:59:05:ef:1b:6c:90:6f:ea:1a:81:
de:33:82:61:be:9f:da:64:2c:e3:29:a7:0d:76:98:
ed:bb:22:07:5d:5f:90:d5:c8:cc:c4:aa:48:38:ed:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B3:C0:F3:BD:B0:F1:7C:7E:14:28:01:86:BA:0D:DF:90:D1:F4:3A
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:36:ee:c3:b2:ce:97:12:c1:5d:d8:f1:a5:68:74:cf:11:2b:
85:a5:50:d9:aa:24:b5:56:85:73:81:6f:eb:08:01:33:60:d7:
28:04:17:28:22:f0:4c:1c:25:6d:a0:dc:27:98:2f:4f:d2:ca:
2c:df:15:1c:e5:66:ca:cd:39:91:03:02:e1:a9:1b:48:4b:47:
0a:57:3c:37:ca:4c:61:3f:63:70:81:a0:f2:81:73:32:25:45:
f0:66:e6:48:43:41:d4:ab:4b:62:28:31:ce:0d:38:bc:02:ef:
38:d4:d2:02:ec:f8:9a:ee:df:77:cc:e4:a1:ff:d5:5d:a6:16:
e6:cd:24:2b:3d:03:9b:13:8e:b0:64:50:3c:85:a5:16:da:e0:
0c:70:96:94:15:d2:fb:ab:cd:df:3e:03:d2:38:3c:66:de:a8:
cc:0c:fe:7f:e6:8a:bc:73:08:9b:77:ea:ab:96:cc:5d:2d:59:
28:36:b6:b4:5b:e4:26:b8:d0:b6:97:41:c3:25:9f:ad:7f:42:
cb:4a:06:25:05:bb:dc:c9:4c:b6:ea:cf:3a:26:d0:b5:fb:2f:
a3:c4:d0:bb:d4:d6:21:a7:0f:bd:c6:f6:14:bf:5a:b4:be:7d:
95:95:d4:61:93:6c:3d:41:68:3c:92:53:9e:dc:27:90:8e:16:
55:e9:be:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:11 2026 by rpki-client