Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: pVCx25GuyZPHxAGdcYP7ekJEL9JfSroYLMaYPxWDfCs=
Subject key identifier: 2C:81:6F:59:02:E0:50:8E:13:30:92:E4:E3:1D:DC:47:01:DC:60:DF
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 019D284D61F7E805C8E8DD584668CDFBEBA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 10F5
Signing time: Thu 26 Mar 2026 04:00:52 +0000
Manifest this update: Thu 26 Mar 2026 04:00:52 +0000
Manifest next update: Fri 27 Mar 2026 04:00:52 +0000
Files and hashes: 1: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: QUz/6FRsGDHEVw0A90Jmmdf3B9yKFvOpwIeA68b9tAY=)
2: 6jWcTCuvnIbvDAxZuWYVZRLhDLU.roa (hash: LkG1rsHegbWJdLC+vukY1wOXCMcnkOUFAcxz3/K326I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:61:f7:e8:05:c8:e8:dd:58:46:68:cd:fb:eb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Mar 26 04:00:52 2026 GMT
Not After : Mar 27 04:00:52 2026 GMT
Subject: CN=2c816f5902e0508e133092e4e31ddc4701dc60df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:90:c1:e0:e4:65:9e:d2:b0:42:f5:cc:ac:
bb:9a:a0:de:93:ea:54:78:62:c2:a5:21:2c:8c:8e:
4c:60:e6:c9:a3:0d:e1:a9:f0:b2:0c:15:a5:2b:37:
68:92:af:8a:5f:2a:ef:f8:6b:28:6a:c8:68:54:95:
bc:fa:66:0e:1f:72:c8:63:bf:c9:27:58:ed:ff:67:
40:a6:40:fc:dc:b3:81:ab:3e:56:87:30:ce:ed:43:
8c:b6:1e:8d:f4:f1:fe:6e:60:83:7b:45:be:a5:5c:
a1:ec:dd:5b:e1:f8:a0:dc:b5:24:16:37:2a:e2:55:
21:0d:b3:4d:9e:bd:ef:90:ab:f1:c0:fa:f1:d7:1c:
ba:37:1f:de:ee:b1:b9:97:29:6e:c1:73:05:a8:99:
8a:3f:cc:3a:10:bd:77:57:eb:ef:b9:da:2b:f5:a2:
86:fb:86:b1:88:1d:09:41:e3:a0:15:cf:00:01:fc:
4b:54:ea:b1:54:e0:d5:8b:55:dd:3b:71:96:7a:14:
32:54:1c:ce:4b:b1:d0:ec:66:95:dd:11:12:f0:68:
d1:35:27:6e:3f:dd:14:ef:83:ef:c8:0a:66:d6:c2:
86:91:0e:46:7d:7d:6e:5a:56:76:68:15:84:02:00:
f4:41:48:75:df:e4:60:f3:70:c3:39:ba:a4:c9:64:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:81:6F:59:02:E0:50:8E:13:30:92:E4:E3:1D:DC:47:01:DC:60:DF
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:01:9c:1f:72:1d:10:36:dc:42:9a:81:d8:ed:4f:8f:2d:9f:
bb:c4:2e:00:a1:8e:41:2e:ce:68:77:d1:6c:9a:f9:d9:fd:b9:
5f:01:c8:85:15:b9:97:4a:f8:dc:55:45:1e:f8:ce:b7:4b:ca:
ce:19:15:07:eb:03:79:05:86:7f:a7:47:81:15:3d:e2:15:3f:
9b:f7:f3:ae:10:47:0e:b5:b2:e2:4f:af:fe:d3:61:a3:ed:05:
2e:f2:18:d3:ec:e7:ef:07:40:8a:d9:3b:1b:7e:cb:99:c1:3b:
3d:f2:43:29:e1:9a:4d:c0:2b:f1:0e:fd:56:07:e8:0c:7e:ee:
08:ff:c8:ab:6b:69:b6:63:d3:36:1f:42:17:67:82:3a:fd:ae:
65:37:b6:f5:a1:55:c2:5b:5d:82:42:18:3b:95:8b:62:4d:f0:
3e:c5:e5:de:47:10:7f:65:c2:06:a0:ff:82:f4:2d:59:bc:f5:
a1:dc:4f:d5:a9:d6:38:b4:49:d5:d5:ee:38:b2:f7:bf:09:32:
4c:05:5a:b0:e9:d4:cc:3f:42:18:fc:aa:1e:52:35:d8:25:bd:
20:6d:d5:83:4b:e0:80:b8:9d:5e:16:3a:43:ed:1a:9f:2c:c9:
6d:4d:b9:88:29:8b:e5:eb:14:c3:d5:e6:3e:ae:39:4f:a1:72:
46:5b:0d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:23 2026 by rpki-client