Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier: TU+c0WBVztbsnAqYXz1ACclhUx9G7W9+4EUr70g3PWM=
Subject key identifier: F9:8B:66:A6:33:D9:34:6B:D2:3A:DB:8B:82:1A:B3:3D:E8:AE:05:4F
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 019D28F262C18AE2479D08784B6D7E23B61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number: 0DDF
Signing time: Thu 26 Mar 2026 07:01:06 +0000
Manifest this update: Thu 26 Mar 2026 07:01:06 +0000
Manifest next update: Fri 27 Mar 2026 07:01:06 +0000
Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: 62yrPM4fxUjsojurfETluqfvo/3ObSE1Cpb2A77h3VA=)
2: QtPhnyLsRRN8U6hpcPXp4Z0oWqY.roa (hash: i0nu2P6NxLQ5ERHa8d6GR72neeBYjpf7KkNPNvBe0Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:62:c1:8a:e2:47:9d:08:78:4b:6d:7e:23:b6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Mar 26 07:01:06 2026 GMT
Not After : Mar 27 07:01:06 2026 GMT
Subject: CN=f98b66a633d9346bd23adb8b821ab33de8ae054f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9b:d4:86:b5:b1:b6:8c:c4:75:22:14:68:39:
11:aa:43:59:df:8d:ad:b5:e6:42:23:89:c8:cc:45:
eb:68:b2:c7:38:56:a3:14:1a:0d:13:5d:7d:3b:f1:
ef:1a:60:59:05:0b:78:5f:20:bb:5b:d9:2a:cb:f3:
0a:16:23:20:a2:af:27:f9:8d:69:73:f7:07:76:78:
bd:51:f8:b0:29:9e:9a:4a:e6:0d:43:a6:16:bc:3e:
e1:37:cc:73:2c:f8:9f:69:19:5e:a4:3d:d8:f9:d9:
c1:54:97:28:63:77:92:6a:bb:0d:77:bd:00:4e:6a:
4a:f8:49:1f:a2:61:c0:b7:4a:d7:b1:a9:c4:00:8a:
a6:57:6f:cc:44:3c:cf:75:ad:7a:45:8a:3b:f2:30:
0e:86:68:be:68:e0:ae:ad:4b:b1:36:22:21:6f:d8:
99:ec:41:77:d5:23:b5:a7:78:bc:5a:ec:50:5c:60:
19:af:a7:77:ba:5c:bc:41:9b:60:fa:4e:ca:eb:54:
b5:88:a7:b4:83:f0:1c:b5:02:5f:02:82:59:7c:ac:
a5:37:8d:ca:12:49:6c:dc:65:db:0e:b7:bd:4d:b6:
94:fd:c1:f0:05:c4:86:a6:21:57:af:42:4b:16:3c:
18:38:23:0b:6c:ec:ef:0b:28:a2:12:06:c5:71:c9:
bf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8B:66:A6:33:D9:34:6B:D2:3A:DB:8B:82:1A:B3:3D:E8:AE:05:4F
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:46:19:5d:2b:ba:f7:7f:25:f7:cb:be:83:95:51:82:f4:85:
2e:82:59:d7:9a:ef:47:68:2f:dd:be:8f:eb:bd:a4:b9:95:6b:
00:23:ba:f4:93:1e:26:ea:1c:c2:91:f2:e7:18:6c:69:a4:11:
5a:ab:1b:33:8d:27:2b:10:7c:fc:51:bf:3f:c0:c4:53:7f:b1:
f2:94:8f:2a:1c:07:74:5c:5c:1a:ed:ee:35:5e:90:2e:bf:8a:
4d:61:ef:00:4e:77:4c:40:4a:27:a5:c6:07:04:2d:89:ba:58:
d4:e8:6f:34:04:bc:35:5b:70:47:90:56:7e:8b:72:93:72:84:
9e:b5:70:3d:6e:ef:7d:15:dd:76:04:4c:bc:6f:d6:f2:11:80:
ca:7d:3e:56:6c:e8:2f:d4:ad:96:16:0b:bb:00:74:b4:44:37:
97:ba:ec:6e:7a:a5:b8:57:de:85:1f:da:f2:69:bc:7c:13:e2:
10:57:16:39:bf:48:23:25:b1:63:6c:30:49:ce:53:83:3d:43:
ac:c3:1c:a7:65:0f:5c:99:a8:1c:85:9d:ca:cf:91:a6:c4:90:
fd:87:c8:1a:f9:5a:bd:15:c3:e1:36:63:d2:ee:05:49:a3:cf:
05:39:e1:79:af:65:e3:d9:eb:6f:c0:d1:87:a9:3d:af:99:0e:
41:5d:c0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:26 2026 by rpki-client