Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
File: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json)
Hash identifier: SuVj87QyUC6pV2bGgczdwvEPEPxa6cCnxGhK7Zi6Dhs=
Subject key identifier: 75:8B:B8:31:CA:E4:54:38:F3:4B:8D:29:8B:3D:75:39:7D:3A:C9:08
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial: 019D27DFAF3C7252CAE88DF73FEEFA87838C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
Manifest number: 0ECF
Signing time: Thu 26 Mar 2026 02:01:03 +0000
Manifest this update: Thu 26 Mar 2026 02:01:03 +0000
Manifest next update: Fri 27 Mar 2026 02:01:03 +0000
Files and hashes: 1: 0gBlJTwbURvMna08HGkpbxF3GuY.roa (hash: +AHpd/2s8j+dmg3ibj8zF8ms1DXXH4Z/pjBe0gUwZIo=)
2: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: OA5wC0OhLQvWmIl3Og4D4Ip7yLeWxdPxKOvDCtfZMf8=)
3: olTnJZOeBxSGSHdFIbwThqvRrwM.roa (hash: 7ZVXpb1BUMxPZ9Jc/FGOlyUwvnj11IZVQ1xQChFmpVk=)
4: v41zPODCDOKyhQh2VYGpMRTzGHg.roa (hash: 9WUhwKCjU+8D4DCY2CpCRa3hsSY6UWz+kGJAJ8Vl43I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:af:3c:72:52:ca:e8:8d:f7:3f:ee:fa:87:83:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Validity
Not Before: Mar 26 02:01:03 2026 GMT
Not After : Mar 27 02:01:03 2026 GMT
Subject: CN=758bb831cae45438f34b8d298b3d75397d3ac908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:cf:a2:7e:a5:aa:64:a1:b9:18:7c:5c:4b:d1:
33:e9:44:f0:2a:76:06:99:3e:b9:32:e1:62:fa:b5:
61:f9:a4:e9:0e:e2:07:7a:df:6b:b4:fd:b0:50:c9:
d1:bc:bb:9b:7c:cb:7d:bc:31:99:82:44:57:46:68:
24:b8:ad:cf:65:80:84:29:93:1f:be:3e:95:6e:d6:
3b:04:c9:8a:55:2b:b3:ec:a0:2d:40:a2:a3:a2:69:
6f:03:bb:04:e7:59:b2:18:a9:82:f4:6f:a9:7f:04:
5d:7f:a7:98:0c:9d:ea:05:c8:14:67:3a:c1:38:9c:
b3:37:2f:0c:f7:d1:7a:ee:99:3c:f5:1b:ba:04:11:
34:28:94:27:6d:76:ce:71:1b:24:67:ec:57:24:5c:
ed:de:17:ec:78:5f:13:a5:f5:5c:94:2c:08:e9:0a:
30:a5:b9:f0:17:42:ec:ff:d9:d4:4b:16:f6:56:30:
56:04:ef:c8:5a:f5:44:25:38:4a:1d:97:0c:d0:f0:
0a:af:35:29:ed:b2:c8:dd:a9:0e:0b:b3:60:e0:bd:
7e:fe:1c:81:8c:05:50:31:e6:07:3d:88:9a:1a:b5:
d1:88:fe:1e:6e:d0:0b:9f:79:5c:85:45:5a:33:04:
27:6c:1f:d9:fe:17:c8:f6:65:ca:df:4a:8f:aa:81:
95:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:8B:B8:31:CA:E4:54:38:F3:4B:8D:29:8B:3D:75:39:7D:3A:C9:08
X509v3 Authority Key Identifier:
keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:44:51:84:8b:66:8a:cb:2c:86:69:36:3f:21:f0:12:10:22:
5a:35:8a:84:d7:de:a1:89:a1:aa:64:a7:30:65:e4:85:3e:53:
b1:39:79:a8:33:b1:5f:6f:e2:27:31:40:1b:96:4d:1c:f7:89:
ee:3b:d1:0e:fa:0f:9a:ed:09:00:6c:84:87:6a:e8:3f:65:f3:
d8:17:b2:ce:15:dd:b8:2e:b0:fe:76:06:fa:43:97:b4:fe:72:
72:5b:55:87:39:ae:89:69:ab:f5:19:aa:93:9a:76:ce:ae:39:
1f:0a:fe:71:fa:28:6b:30:da:e8:8f:53:c0:40:50:0e:3f:6a:
ae:da:e4:5d:ab:ce:4c:f7:72:9c:12:ed:ab:56:03:00:17:ca:
4a:8e:57:df:8d:27:1c:73:33:b0:82:af:33:f4:8c:fb:d8:db:
03:70:9f:de:a3:b8:48:65:7f:84:88:6d:f1:91:42:42:56:c1:
45:70:97:66:47:21:1a:73:c4:57:ee:77:3f:85:1c:e1:df:09:
86:01:15:d7:2f:39:2d:07:90:f7:ec:bc:c2:f5:35:62:f2:ae:
74:67:1d:a5:3f:f6:2d:3d:c8:44:1d:49:a2:44:78:f9:14:c8:
c1:57:df:6e:cd:69:a4:58:d1:bb:87:b1:90:3b:cb:72:b8:cc:
62:9f:9f:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:06:21 2026 by rpki-client