Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
File: 4bYF1mYOmDMcLiBJgPKldv30lhk.mft (raw, json)
Hash identifier: T+de4PkLOz7aFPX1ZoXqL69AwPdQelIopbSkKwh2IS0=
Subject key identifier: AC:C2:EB:64:60:7F:A6:59:95:A4:24:08:07:B0:EC:9A:CD:F9:F4:DA
Authority key identifier: E1:B6:05:D6:66:0E:98:33:1C:2E:20:49:80:F2:A5:76:FD:F4:96:19
Certificate issuer: /CN=e1b605d6660e98331c2e204980f2a576fdf49619
Certificate serial: 019D25837DCF74CD818419C0826B404F2572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bYF1mYOmDMcLiBJgPKldv30lhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
Manifest number: 26
Signing time: Wed 25 Mar 2026 15:01:07 +0000
Manifest this update: Wed 25 Mar 2026 15:01:07 +0000
Manifest next update: Thu 26 Mar 2026 15:01:07 +0000
Files and hashes: 1: 4bYF1mYOmDMcLiBJgPKldv30lhk.crl (hash: MAt/kpcq99WAdv8cJHg4Ld+PTeUwvdCpofCT8z6w+DY=)
2: 5kAvBd30hpJ31v7a5btR1f3C5_c.roa (hash: z1wDX3ExFB1UHqUZVdNED873b9M0TIqJFILLETY+deY=)
3: J4mXmms4TiP28PN9LBCVFRM01HA.roa (hash: VUMEpxKdTm7c58+fUJJlRr+8yRrKuCjq0GD1rQWYd3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bYF1mYOmDMcLiBJgPKldv30lhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:7d:cf:74:cd:81:84:19:c0:82:6b:40:4f:25:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b605d6660e98331c2e204980f2a576fdf49619
Validity
Not Before: Mar 25 15:01:07 2026 GMT
Not After : Mar 26 15:01:07 2026 GMT
Subject: CN=acc2eb64607fa65995a4240807b0ec9acdf9f4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2b:01:8e:37:1e:39:49:7d:cb:06:bd:00:af:
69:cb:2b:ac:58:f6:b8:bf:1f:08:66:22:99:68:21:
b9:12:ba:21:0a:a2:6f:4e:f2:64:56:60:2c:62:82:
f9:1f:4a:ba:b9:00:4c:a6:40:05:97:1c:e9:c3:62:
95:a3:50:a5:a4:b2:3e:7a:ea:99:0f:1d:fd:80:81:
f2:cf:8a:a5:0b:8a:01:a9:77:46:9c:d1:11:87:86:
ad:6f:02:20:3c:5c:00:9f:c7:33:75:1a:42:75:1d:
1b:b9:65:d6:5a:f7:06:51:e8:23:6c:c2:4d:66:27:
33:21:1b:ea:bb:13:a7:20:d1:db:55:70:4a:ea:d8:
f7:c0:fa:ec:49:1b:4d:f2:50:89:4c:c5:4b:7c:f5:
e6:e3:8c:60:23:1c:c1:c4:35:79:7c:d4:84:7d:79:
cd:c5:c4:91:62:cc:26:da:de:dd:d8:8a:7d:3c:03:
cc:ec:35:79:69:f5:b6:75:b6:bf:94:98:53:37:38:
33:2d:d0:a8:cd:ef:5d:7a:03:5d:b7:42:b6:22:76:
ea:71:36:1f:28:24:82:7f:32:95:f6:19:65:74:40:
a6:df:30:e6:f3:0b:f9:e6:2d:fe:58:4d:5c:e6:a3:
54:95:b7:65:00:0f:98:11:24:cd:71:19:6e:5c:b9:
87:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C2:EB:64:60:7F:A6:59:95:A4:24:08:07:B0:EC:9A:CD:F9:F4:DA
X509v3 Authority Key Identifier:
keyid:E1:B6:05:D6:66:0E:98:33:1C:2E:20:49:80:F2:A5:76:FD:F4:96:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bYF1mYOmDMcLiBJgPKldv30lhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0e:6b:29:95:7d:79:0e:7d:39:20:a3:51:5a:32:47:a3:64:
c9:68:db:9b:6d:83:fe:10:38:3c:ab:31:1f:41:a5:9d:b7:d3:
ac:23:ee:73:ff:a3:ac:15:6c:b1:5e:c4:e0:83:49:3d:91:e5:
ca:ba:bf:c9:4a:e0:e4:6c:9e:cf:3d:29:9b:89:7d:44:e8:fd:
6c:99:22:e0:3c:ec:3c:68:c2:df:b5:7e:9d:51:b4:5a:fd:13:
d6:a7:85:f4:02:ce:b9:a1:1f:ed:f9:62:76:b4:70:1d:36:a7:
39:3d:3e:1c:23:54:af:9f:ec:a5:76:9b:14:5d:8a:9d:bc:ad:
c5:6b:f4:c1:2d:ec:58:5c:f6:16:b9:87:fa:82:f4:1c:aa:fd:
e9:cf:2b:31:58:0b:b9:ed:55:ec:09:83:70:0d:15:0a:69:49:
72:3b:17:72:0a:11:49:98:c7:46:f7:48:05:1a:86:33:b3:0a:
77:e7:04:85:4b:cc:02:c0:4d:15:0f:aa:8b:5b:78:8e:f5:41:
7d:43:c1:9f:8e:1f:55:9e:a9:99:9d:04:4f:4a:07:8f:91:8a:
f0:cb:4f:cb:2c:99:d4:73:98:53:92:5b:72:84:dc:ce:93:a2:
3b:c5:39:46:f7:fe:50:e0:9e:92:d6:8e:92:79:ac:49:77:ac:
f7:bd:2e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:27:55 2026 by rpki-client