Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: HsQUyat8+WxupRzOknvB0RZOG2cWBdrMpsLnk/9NEa4=
Subject key identifier: 65:5D:5F:3A:B2:AF:9D:F8:E0:2F:E4:E2:BE:43:2E:95:C5:BD:62:AB
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 019D29299476229E4A5C50087A890701D4FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 1599
Signing time: Thu 26 Mar 2026 08:01:23 +0000
Manifest this update: Thu 26 Mar 2026 08:01:23 +0000
Manifest next update: Fri 27 Mar 2026 08:01:23 +0000
Files and hashes: 1: 1eykC-2BnVsWo7Ye-BCUzkQkUoQ.roa (hash: XORzzia+v0TQle6S3eSeTmbfXijHFXJwl9VwUUmAcRw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: A7UrtNvw0UqtbLP9QvzZ8OlFg++/tMVNZa88BmdmCUU=)
3: NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa (hash: 3elpIcyAaRbsEU++I8EIRcmrePMiDX7Ycf8Xs+7sNy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:94:76:22:9e:4a:5c:50:08:7a:89:07:01:d4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Mar 26 08:01:23 2026 GMT
Not After : Mar 27 08:01:23 2026 GMT
Subject: CN=655d5f3ab2af9df8e02fe4e2be432e95c5bd62ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7b:e3:c5:ec:de:de:af:4d:0a:58:f6:39:76:
ff:dd:f5:06:06:02:22:71:03:cb:84:e6:b7:2b:7c:
98:53:b9:e2:b2:56:e6:44:90:67:b8:22:fc:bb:5a:
0a:d9:b4:56:d9:c7:7b:0e:09:49:61:cf:69:d9:3d:
d8:fd:e4:c4:17:06:5b:85:42:d4:e1:7b:62:2b:2f:
21:1c:d6:86:fa:27:af:cb:a0:fd:a5:a2:6b:21:79:
36:57:e5:45:b8:46:5d:14:f7:ee:79:4d:ee:6c:1d:
25:42:5a:91:f5:e1:c6:de:5f:4f:df:52:e7:7d:4d:
d7:f9:a1:7d:e3:56:dd:77:24:9e:90:5b:4f:fe:64:
07:a9:6c:d2:dd:5f:33:fd:93:23:65:16:68:b0:8f:
ab:51:95:13:d3:56:d3:cd:6e:c2:3c:b3:fe:4b:5f:
df:db:2a:4a:04:71:71:aa:da:36:93:19:65:ae:2b:
3f:24:a5:37:26:8d:71:79:d3:00:a9:b9:40:75:9b:
89:6a:ab:7e:16:bc:2d:14:a6:17:33:22:df:cd:cd:
7e:c4:fe:74:c1:dc:02:52:51:a8:fa:ef:cd:ac:89:
f0:d4:9a:e7:fe:d0:80:20:f2:6d:ee:aa:e3:f6:16:
29:7e:7f:eb:3c:e2:f5:20:81:3d:ac:32:1f:68:58:
74:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5D:5F:3A:B2:AF:9D:F8:E0:2F:E4:E2:BE:43:2E:95:C5:BD:62:AB
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:40:ab:dc:cf:da:c1:c9:94:70:3d:ab:15:98:f8:71:82:02:
58:bf:de:e6:0b:37:62:a3:e4:09:a6:b8:fc:99:f7:8b:fb:da:
b3:58:bd:ff:07:fc:f5:76:d6:9e:a5:81:43:4e:bd:47:9e:79:
a5:52:fb:53:a6:bb:d0:2f:6b:88:16:73:69:38:f6:5e:80:80:
41:6e:83:f1:38:08:25:11:ff:9d:55:8e:b9:a4:57:af:38:70:
2b:06:67:9a:e8:53:74:5d:01:70:54:5d:9c:3c:44:a5:88:ba:
a9:f8:bb:d5:6d:06:7e:36:94:13:e9:53:f5:9e:bd:cb:81:d0:
c5:d1:7c:b8:04:b8:43:58:ee:29:d5:38:a4:54:ce:eb:03:65:
e3:26:86:93:3a:a3:5f:d4:51:4d:45:f6:b4:27:48:89:6e:48:
dd:6f:40:35:aa:07:6b:4f:15:1e:41:ef:cf:4f:b2:72:69:0a:
18:f9:d3:ad:99:9d:2b:54:97:32:51:f1:c1:9d:91:9f:1d:e0:
62:ef:58:4e:db:0c:5b:9a:5d:4a:e8:b8:71:55:19:11:2e:ef:
af:87:a7:d0:1a:92:fc:1f:e2:99:44:b2:1d:07:f1:ac:fe:87:
75:c3:fe:61:87:da:df:f7:21:c6:b9:61:ae:c1:71:0c:41:bd:
c5:b8:f7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:47:26 2026 by rpki-client