Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: TDLp1e9sBZDIu3lkI9spcQhx4zrfVUiFfOxfS3a2C0c=
Subject key identifier: 1E:E4:6D:F6:71:79:88:AA:62:3F:66:E5:24:1E:B6:9D:63:E6:F5:D9
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 019D2A724953ABF8D606BF7E95B5EA9A05BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 1143
Signing time: Thu 26 Mar 2026 14:00:26 +0000
Manifest this update: Thu 26 Mar 2026 14:00:26 +0000
Manifest next update: Fri 27 Mar 2026 14:00:26 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: AgWTbX8+wV7bD9XaUFUKRLFwORH9aJ8vN1KPRFbgALc=)
2: uTD6khWcd31ZzRZAtfj7o4AtIHw.roa (hash: 69oOJR8ncC7sjtYVQ8SZHCT4Cq2KZtCn6uWehRleXPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:49:53:ab:f8:d6:06:bf:7e:95:b5:ea:9a:05:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Mar 26 14:00:26 2026 GMT
Not After : Mar 27 14:00:26 2026 GMT
Subject: CN=1ee46df6717988aa623f66e5241eb69d63e6f5d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:00:bb:5e:91:b2:68:7f:d3:4e:19:45:b9:
3d:bd:7c:54:8b:69:0e:81:41:33:52:da:f8:15:ef:
b3:21:09:e7:18:aa:54:d9:22:34:68:36:22:93:d0:
72:1f:cb:b4:b8:16:ee:fe:19:f6:bc:50:60:2f:6e:
0d:2d:ff:60:51:68:aa:92:bb:85:80:00:4e:d0:d8:
c0:fc:63:3a:f1:87:f3:49:5a:f0:1d:29:28:62:56:
27:b9:17:e1:75:c1:42:8a:cf:6a:8b:2e:4a:51:8c:
c5:dc:32:16:26:fa:54:47:e5:18:53:7b:19:2c:1f:
44:f3:5f:85:d9:e5:16:05:8c:82:a3:9a:4f:69:42:
e1:95:f2:26:55:b9:5a:66:d5:d5:b3:3b:28:6e:72:
dd:09:03:90:75:55:73:38:e2:26:8d:25:36:76:52:
0c:79:70:b6:97:4a:4a:90:1e:b3:73:41:cd:2c:34:
b9:94:2e:1b:15:64:73:6e:88:73:68:2e:67:84:cf:
01:e2:98:5c:d4:ee:a5:b5:7f:50:57:ca:4f:07:f3:
22:d3:b3:d1:39:a4:b3:f7:98:7f:b2:b4:92:46:0c:
ba:ef:c7:50:d1:c6:ca:bd:ec:7a:d8:dc:4f:a0:51:
67:c8:a9:df:d5:b9:cb:80:1a:7e:35:dc:fa:5f:c1:
59:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E4:6D:F6:71:79:88:AA:62:3F:66:E5:24:1E:B6:9D:63:E6:F5:D9
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bf:e6:50:9f:4a:0a:2b:19:f9:a9:7e:93:71:6c:a6:74:c0:
f1:5b:7f:08:49:ce:ed:14:51:da:97:09:7e:03:89:3e:6b:ec:
06:9c:da:88:09:ea:31:31:20:eb:7f:4d:67:f0:00:cd:9b:62:
bb:9d:40:42:85:76:3c:d1:33:54:f5:a3:82:56:62:24:80:1d:
63:0e:2b:96:73:e7:82:aa:21:dd:9c:93:05:26:2b:bf:65:3a:
7a:1f:4a:42:a4:a3:f3:96:57:a4:22:45:44:6c:36:18:6d:f7:
cc:97:81:43:07:44:dd:a9:31:56:5a:66:35:1e:07:67:e9:04:
aa:ed:50:11:22:9f:c8:26:29:b6:e6:49:b1:d5:28:3c:f5:bc:
d8:8b:c8:17:fe:60:ed:6f:67:2e:01:83:a6:77:f7:ed:00:05:
20:91:83:b3:b9:f7:b3:f3:e6:ed:2c:13:32:d4:f5:01:ab:55:
70:c5:08:58:9b:18:37:18:09:8b:ec:95:6c:b6:35:32:42:76:
7a:99:26:82:a3:4a:96:33:1d:af:95:f8:1d:ef:23:cf:b4:65:
4d:c2:fe:0a:e2:0a:1e:9f:22:df:f7:d7:96:54:c1:98:a3:f9:
38:14:ac:9f:94:dc:cb:31:aa:3f:14:7c:42:89:3f:cd:9d:ae:
5d:ef:10:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:34:22 2026 by rpki-client