Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier: aJDrtH5SE/ERI1t2SS+XpVTehpGmlCIglAjLFcVGzQs=
Subject key identifier: 00:01:86:B8:B0:B9:C7:44:45:01:3F:B6:42:17:FD:A8:FF:43:42:9D
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 019D26CD276E4BE0F3E9474BF53C43D9C5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number: 14BF
Signing time: Wed 25 Mar 2026 21:01:12 +0000
Manifest this update: Wed 25 Mar 2026 21:01:12 +0000
Manifest next update: Thu 26 Mar 2026 21:01:12 +0000
Files and hashes: 1: 3Kqw9tljPQG5d-js0HaYveBuk-4.roa (hash: D1nlz+BjAzn+Pt0loadLXbRjBXPaaFlVhaNwxEkZAGY=)
2: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: wUdCVtKBjLGmPv5K51bXn9xEMYIddTOCn0S0bQ7dr/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:27:6e:4b:e0:f3:e9:47:4b:f5:3c:43:d9:c5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: Mar 25 21:01:12 2026 GMT
Not After : Mar 26 21:01:12 2026 GMT
Subject: CN=000186b8b0b9c74445013fb64217fda8ff43429d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:03:05:68:15:09:91:51:06:52:a2:9e:6b:
3c:41:23:5c:e0:b5:ab:55:d7:33:01:2d:d9:25:65:
9a:61:33:06:85:73:6f:d5:99:4c:b6:3f:7b:d6:8b:
57:4f:42:5d:fe:6e:e3:46:a3:67:9a:3e:4e:13:a6:
bb:38:bd:ff:ce:d3:35:89:00:9c:60:68:76:eb:2c:
87:e9:3e:42:6b:8a:de:9f:18:a8:42:17:e3:59:a9:
5c:e7:4e:dd:09:26:30:cc:8a:bf:08:86:2f:69:03:
ca:8f:f8:e3:8d:ec:fc:ed:ce:4a:57:c1:aa:60:4a:
eb:e5:a0:e0:41:1d:90:b6:01:d0:91:56:7d:60:16:
fd:d0:2e:22:ba:f2:81:e6:bd:0b:4f:bf:a2:83:23:
26:a7:f3:bc:0a:70:aa:ca:ee:32:c2:10:79:1b:07:
38:de:1b:f2:6a:14:96:8b:d6:0c:e7:4a:49:6d:89:
5f:77:05:3e:db:c2:7e:55:ec:1f:41:2a:68:71:77:
05:5a:e9:b7:f8:23:cb:1d:4d:28:38:5c:e4:0a:03:
23:e0:5b:1c:6d:35:4c:70:98:01:3a:95:bd:8c:4f:
6c:fa:13:05:b4:56:a0:0f:67:39:af:9f:07:a7:47:
a4:df:9c:3b:ff:c2:87:b4:f4:b2:b5:3e:92:f4:6d:
52:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:01:86:B8:B0:B9:C7:44:45:01:3F:B6:42:17:FD:A8:FF:43:42:9D
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:13:4d:90:e1:53:1b:f1:1e:87:7c:01:f1:0b:28:fe:39:49:
55:60:cd:93:40:f7:96:8e:ac:6e:75:53:41:4c:48:7c:d6:7e:
fb:8c:fc:ed:d4:26:60:bb:99:f0:e6:54:fa:2e:6f:28:e7:36:
72:d6:b2:47:b9:de:a3:f1:70:5f:7d:45:83:06:06:0c:a0:d2:
73:57:80:80:1a:33:f5:76:e1:bf:66:69:d6:b5:92:28:f6:ef:
2e:c3:26:fe:75:3d:96:5e:de:8d:bb:ea:60:bd:20:8d:f4:eb:
ea:94:2c:62:49:54:79:ab:58:96:a6:56:c1:77:82:ce:e2:5c:
56:f8:49:4d:ce:fd:23:88:4c:d2:78:c5:a2:39:06:ec:f7:09:
86:66:84:d0:d9:ac:b2:bd:6c:0e:e3:cb:ba:4b:58:b5:55:c2:
9b:60:4d:0c:e7:76:bb:93:90:92:d1:ca:cb:89:f9:57:c0:6f:
fe:af:03:66:4f:a2:e3:8c:df:1a:8f:28:f7:5e:11:b5:86:e5:
05:31:70:8b:5a:48:4b:6c:6e:66:f2:07:d9:de:15:d6:57:0c:
9f:8c:c4:ab:ce:69:fe:b5:6f:82:54:82:62:49:a9:d7:bc:3a:
77:7d:b3:49:e4:eb:b5:a4:28:1c:fa:06:7e:68:8f:61:3a:2b:
87:73:01:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:22 2026 by rpki-client