Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
File: 4m4BgY9rbo42iNfzYfdTwSNeDNw.mft (raw, json)
Hash identifier: 1yNeC1xcLVJgCr6tvpqdPpWfPT7DUApQBSnnZYG5F1E=
Subject key identifier: AE:3B:B3:42:E4:16:CB:20:2E:BF:C3:B4:0C:5B:87:51:C4:C1:1A:A6
Authority key identifier: E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC
Certificate issuer: /CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
Certificate serial: 019D26CD0825132264957FF6296E7242A3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
Manifest number: 75
Signing time: Wed 25 Mar 2026 21:01:04 +0000
Manifest this update: Wed 25 Mar 2026 21:01:04 +0000
Manifest next update: Thu 26 Mar 2026 21:01:04 +0000
Files and hashes: 1: 4m4BgY9rbo42iNfzYfdTwSNeDNw.crl (hash: sWpsKcJ8dvRdwqHsyerin3SqMODRjczeQevEg871s/4=)
2: 55lgQHjawIWIBPegmtUWO19P1qY.roa (hash: xr29hGNw/G2B+5szsIy5zpkogZqhj2L/lLvicw1+OJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:08:25:13:22:64:95:7f:f6:29:6e:72:42:a3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
Validity
Not Before: Mar 25 21:01:04 2026 GMT
Not After : Mar 26 21:01:04 2026 GMT
Subject: CN=ae3bb342e416cb202ebfc3b40c5b8751c4c11aa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:4d:f1:08:a3:9a:8f:79:60:f5:6b:72:6a:
8d:45:34:37:44:f2:9a:6b:1b:c9:84:f6:82:bd:8c:
ca:0e:62:e4:93:85:f2:16:cd:05:8f:f6:5e:94:1d:
ef:9f:af:02:5b:de:e4:a8:cc:1f:84:47:24:d7:1a:
ce:8a:16:1a:aa:02:fe:64:83:11:71:d6:f7:76:9e:
2b:d7:b2:a6:d0:9e:a1:70:b4:fe:70:74:58:63:c8:
3e:23:f2:bd:ab:40:88:22:e1:26:1e:25:de:95:d2:
29:e9:24:3e:52:57:21:af:8c:a6:60:e4:33:4a:96:
c2:a2:7e:20:4e:d0:7d:40:60:bd:38:54:12:e5:3d:
51:cc:8f:7c:bf:fd:8c:97:f6:30:5d:08:ff:07:bb:
24:e2:d1:9f:55:44:88:9f:99:54:79:9d:6e:72:a4:
a8:36:00:21:a1:5e:b4:4b:0c:18:6c:2b:88:cc:3b:
eb:3f:76:fb:d6:22:77:eb:fd:0b:07:39:b6:65:a3:
99:48:be:20:ac:88:c1:35:ad:9a:a5:7d:81:6a:5b:
b7:1c:19:6e:9c:0a:e5:80:42:08:06:b1:64:a8:9f:
86:7f:59:3d:8c:68:81:4c:0a:8c:3a:a9:0f:8f:fd:
a8:d7:ab:af:6d:6d:e2:8d:d4:b4:12:4c:a1:49:55:
11:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3B:B3:42:E4:16:CB:20:2E:BF:C3:B4:0C:5B:87:51:C4:C1:1A:A6
X509v3 Authority Key Identifier:
keyid:E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:04:2d:78:3c:27:51:30:0f:e0:8c:b3:47:43:94:e6:03:e9:
2b:6f:41:16:34:f9:89:71:cb:30:66:a8:ea:25:a4:6c:70:5f:
e5:30:b1:a8:4e:f6:98:77:42:2e:36:12:d0:93:fd:86:93:4a:
83:74:9f:30:3f:dc:f5:73:d0:64:ab:61:34:f7:a4:2a:71:50:
fa:1d:f9:17:7c:00:a1:e2:40:61:b7:01:d7:57:23:60:7d:a2:
21:42:b2:be:ea:8a:40:0b:7f:48:c1:aa:61:0b:d0:12:36:4d:
9c:ad:52:f7:7e:bb:1b:34:4c:f2:39:c8:37:27:89:eb:b5:d3:
6d:55:7a:cf:02:0c:d7:51:90:a9:e0:d4:47:cb:9e:f6:cf:0e:
69:a8:83:43:bc:a6:91:3f:95:26:61:f7:0b:d2:a5:28:88:d8:
21:29:9a:8f:6b:9d:0b:2a:c9:63:55:10:f0:12:b1:b2:d8:8e:
ee:64:de:65:5c:13:fa:6b:94:cb:9f:a6:9d:25:40:70:21:a7:
12:14:59:5f:e6:8f:ab:a9:77:dd:21:52:cb:5a:f1:97:f1:dc:
e9:ad:bd:5d:a7:18:af:6b:0e:9a:2e:d2:36:0c:1e:43:01:d1:
c7:09:d6:d0:41:1a:1f:4c:fb:a2:6d:cb:49:41:40:c7:0d:a0:
a7:16:6c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:23:58 2026 by rpki-client