Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: RcL/PI0SC5v4yRQKq5vqhIki6S4SLaK+vfXQNSCSzN4=
Subject key identifier: EA:6E:88:E3:2F:58:8F:6F:51:5D:EE:75:0A:C3:58:08:29:CC:24:F9
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 019D2816900DEF1153CE798CF2C7B76C1836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 08ED
Signing time: Thu 26 Mar 2026 03:01:00 +0000
Manifest this update: Thu 26 Mar 2026 03:01:00 +0000
Manifest next update: Fri 27 Mar 2026 03:01:00 +0000
Files and hashes: 1: 1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa (hash: /XeBvwgyOqHyg56chvGRDFMd+7ExlJpVYmiAYZyhDGM=)
2: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: aHTSbOR6LGb5px6gcQe/wG2OFLfhhSISnA8QEziOIeY=)
3: cgkSjyInxeBAfsrMtADKQej1dQA.roa (hash: NJBBWIxm8P9FWZLPw5DFC5dmcCI2sjb8UDnkU7sydo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:90:0d:ef:11:53:ce:79:8c:f2:c7:b7:6c:18:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Mar 26 03:01:00 2026 GMT
Not After : Mar 27 03:01:00 2026 GMT
Subject: CN=ea6e88e32f588f6f515dee750ac3580829cc24f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b3:c4:c5:fd:30:af:85:64:48:db:17:50:7f:
fd:75:6b:86:12:64:f0:0b:8e:35:84:21:a8:aa:79:
fe:75:3f:a9:5c:19:41:a2:31:01:ea:6a:0e:f6:e7:
62:25:e4:e5:1b:c8:d5:88:55:a6:3b:82:96:d5:e4:
35:a6:34:99:a1:45:e1:80:a0:ad:93:05:54:a7:2a:
58:c2:1b:15:82:a9:a5:c1:7d:c2:4b:ab:d0:0e:4f:
1f:17:67:a9:2f:c5:ab:33:56:a5:eb:53:06:1d:05:
5d:30:0e:8b:ed:f1:d4:04:f9:a3:df:ee:db:c9:81:
62:ef:e4:18:25:55:78:94:22:b2:b3:20:d0:2a:ab:
4a:62:0b:ab:8d:c7:b5:2a:08:28:69:c1:27:c1:48:
6d:e2:cf:bb:cd:df:af:74:aa:f7:d9:33:a5:ba:9c:
f9:d7:49:eb:ae:77:23:a4:73:15:ef:87:6b:75:3b:
b2:e1:8d:bf:5c:72:a8:f6:de:c3:ac:97:6e:cd:f4:
04:53:d7:4a:aa:43:f8:8c:cd:7a:2d:a8:49:18:91:
ff:03:6b:ee:7d:02:d5:d3:d1:28:a3:9a:71:27:c5:
be:b8:0a:11:b5:8a:df:d5:04:72:fb:a3:77:dc:d8:
f8:9e:26:05:83:12:08:c3:1a:2e:56:fd:55:6b:ed:
30:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6E:88:E3:2F:58:8F:6F:51:5D:EE:75:0A:C3:58:08:29:CC:24:F9
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:2f:7a:b1:19:0b:3a:d4:9b:2d:64:6c:c1:d3:ff:26:d5:85:
23:7d:b8:05:5f:7a:f3:34:1f:a0:ca:ec:3e:e7:82:b6:bc:db:
a1:55:fc:cd:6b:e3:95:95:30:71:7f:45:03:5e:e3:64:0d:1c:
30:8b:94:d2:dc:7e:b6:3b:14:ee:36:fa:a3:a6:e9:3f:d8:c7:
76:e3:ff:39:3a:f6:3f:da:34:9b:80:a1:90:14:c3:6c:d1:57:
8b:3e:de:a4:6d:23:9b:5e:c0:08:f5:d3:b0:07:ca:36:80:f7:
ab:f3:a4:98:3d:0c:18:81:74:99:02:44:76:7c:42:ac:cd:43:
0b:ed:da:bb:a1:82:c6:54:c5:46:53:5b:78:14:e0:a0:8a:df:
b4:a9:92:e9:5d:fd:ca:38:7f:d4:5e:eb:47:97:c8:c0:82:92:
a9:83:e1:e7:b3:f4:88:6f:d0:44:d3:7e:9e:14:f5:62:bd:a1:
11:65:36:cc:85:1f:68:92:4d:85:f6:c7:d2:f8:f2:23:44:a4:
57:5a:1d:13:ff:8d:ef:25:6a:26:42:28:83:00:b8:d4:75:16:
37:ba:15:cd:f3:8a:53:24:f7:62:72:05:f5:d6:41:36:3a:1b:
6e:c0:73:dd:7c:60:c9:84:7b:1a:1d:95:82:b1:ff:3d:d8:45:
92:89:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:06 2026 by rpki-client