Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: O3+tD2L5ZrUxqEYZUE20K7Sy+D/ZK71zGbwlFm4cjco=
Subject key identifier: 5D:F2:A8:E4:4C:DA:7F:00:A6:E7:EE:A0:60:4D:A5:8B:42:50:A5:0F
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 019D2771C7F9C23551B97D50B9FAF34FA780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 0E9E
Signing time: Thu 26 Mar 2026 00:01:01 +0000
Manifest this update: Thu 26 Mar 2026 00:01:01 +0000
Manifest next update: Fri 27 Mar 2026 00:01:01 +0000
Files and hashes: 1: 28qciXJsiY_HinbmOHfVFSyJkQk.roa (hash: UYVCwyOsNlY276CdR8TOzS4Rj720VMSX5696EeMarho=)
2: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: /nDGTG7T8UqPAXjIEPC2Wp18YRB2MNFEcuA6+7VzUPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:c7:f9:c2:35:51:b9:7d:50:b9:fa:f3:4f:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Mar 26 00:01:01 2026 GMT
Not After : Mar 27 00:01:01 2026 GMT
Subject: CN=5df2a8e44cda7f00a6e7eea0604da58b4250a50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bc:09:13:62:ef:1b:c3:b6:b5:60:85:db:ea:
1d:00:e8:c9:27:92:46:9c:e3:90:0a:91:b9:34:39:
3a:ff:07:c5:b5:cd:fe:18:8c:64:f5:02:ef:7c:8d:
70:d1:a6:fe:ef:46:a0:57:5c:2a:3c:ac:9f:3b:94:
7a:4a:ae:25:f4:89:79:9e:f7:25:8c:54:65:da:78:
58:05:7f:7d:e0:e8:76:a3:e3:cb:e5:63:ae:ea:08:
0a:65:48:11:29:db:4c:f8:d5:89:33:a0:0a:55:d2:
db:c4:ee:e9:2d:3d:d0:ec:31:82:d6:31:a6:ba:4a:
ff:88:6c:76:a2:54:bf:11:9e:52:89:79:27:1f:bf:
c8:d9:5d:37:86:05:74:53:13:ed:3f:08:6e:9a:85:
20:87:62:52:68:99:a7:2e:f3:c4:17:6e:51:c5:00:
52:b8:91:13:fd:39:da:a4:04:18:df:53:04:37:57:
d4:b9:26:58:15:51:c7:70:64:a3:88:79:3d:b7:85:
35:ce:7c:1a:6e:af:ed:c7:bd:ba:9e:e8:10:d0:b7:
3f:68:ad:3f:0a:8f:20:a8:17:55:10:6b:c5:1f:28:
86:fa:25:5a:e9:0b:95:03:68:b1:3c:ad:7a:80:02:
22:72:5b:5e:fe:df:6c:6d:3a:32:4e:10:dc:9c:a0:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F2:A8:E4:4C:DA:7F:00:A6:E7:EE:A0:60:4D:A5:8B:42:50:A5:0F
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:61:eb:b9:7e:33:5a:3f:0f:20:b1:91:ee:ed:d6:57:d8:23:
e6:b5:20:d7:6e:ca:fc:be:6a:e9:3c:20:ab:8c:7e:e6:68:c9:
3f:f6:70:7a:91:05:7a:c8:59:36:ed:db:49:8e:a4:a0:93:95:
57:71:ef:ea:4c:a9:41:4a:b2:a5:43:7e:b0:14:46:7e:18:cf:
56:55:60:f3:8f:35:d0:87:0b:2b:26:ca:50:ba:95:de:5d:97:
32:a0:35:eb:e4:06:da:e1:19:bc:13:d3:06:1b:ff:52:86:00:
eb:9b:66:29:60:5c:a7:4f:ac:47:65:9c:7b:45:57:96:dc:42:
0c:02:22:3c:69:be:94:a1:e9:f1:c2:79:92:21:1a:18:00:89:
b1:bd:73:6c:c8:5b:2f:9f:ed:b4:14:a5:77:a8:7e:3f:94:a1:
e1:da:87:ac:52:44:5a:99:d6:a7:76:93:a2:da:3d:94:8f:9b:
2d:d8:3e:3d:e8:36:0a:ab:4a:50:6f:77:b8:7e:4a:a8:65:f0:
90:55:dc:c5:1c:53:19:3a:b1:1b:5d:1b:cb:e6:eb:d1:14:f2:
bc:70:b7:23:30:58:56:e9:04:02:2d:2c:e0:f3:21:4a:a7:b9:
1c:0f:e1:01:4c:69:3b:03:bc:cf:31:50:df:5e:7f:eb:36:09:
4c:4c:4f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:32 2026 by rpki-client