Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: z2vzd6/aapJx/6RDTcYDZDpW63cr5mor7YBrGj+fjuI=
Subject key identifier: 5C:C4:01:27:BC:97:D2:B7:DB:6B:22:48:31:57:66:42:50:E9:03:38
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 019D29CDD96090DEC29959EEB4796529732F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0E7B
Signing time: Thu 26 Mar 2026 11:00:49 +0000
Manifest this update: Thu 26 Mar 2026 11:00:49 +0000
Manifest next update: Fri 27 Mar 2026 11:00:49 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: IfbmBHh2KwKBfT+CDxCuIqLjXmJCbKL51njjloxkW/k=)
2: k6jNcpaTNPSlXj617Gg3gS62Bto.roa (hash: 8LQYJjtnAC4ChUuR0xJhVpC5xdVYrcixNySIFaow6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:d9:60:90:de:c2:99:59:ee:b4:79:65:29:73:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Mar 26 11:00:49 2026 GMT
Not After : Mar 27 11:00:49 2026 GMT
Subject: CN=5cc40127bc97d2b7db6b22483157664250e90338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:de:bf:e7:c8:14:7e:b6:b9:6e:29:5e:42:
aa:5d:19:0d:ed:b4:a4:bf:7b:95:be:44:85:c1:b4:
2b:e2:0a:4d:89:eb:a0:eb:75:70:9a:0e:3d:37:39:
f1:0f:d6:6e:e2:1a:c9:99:03:8c:9b:73:3f:d0:68:
21:3b:f0:a9:23:cc:02:c9:be:4d:62:b8:78:b6:1b:
8e:36:d6:81:8a:d6:c6:6c:b6:8f:fd:6a:ce:a6:be:
16:6a:25:62:d7:2e:67:b8:10:32:6d:2b:61:0d:18:
e0:0a:25:54:57:27:3b:40:aa:55:8a:e1:d1:ce:d6:
27:ca:c2:fd:ce:28:73:14:ae:7d:c2:7d:1b:2d:b7:
ce:53:f6:3f:68:7f:e1:c1:d9:98:91:7b:d9:71:02:
8d:3d:8f:07:36:77:88:9a:f0:4c:51:3b:a3:3c:db:
ef:4a:f0:c2:43:06:f7:cc:dd:97:26:1e:d5:4d:e1:
6f:00:3a:ae:79:5d:87:39:65:a7:ab:20:dc:ff:c7:
bf:04:c2:bc:44:e0:99:b1:52:1e:ff:3f:5f:85:fa:
bd:58:ca:0f:c5:9d:16:8e:ec:36:1d:5d:ef:bc:64:
96:dd:5b:e1:35:a8:f8:be:97:63:2d:f9:1a:17:bb:
7f:e1:ef:96:2a:5a:8a:0c:dc:c3:42:32:c9:5b:d4:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C4:01:27:BC:97:D2:B7:DB:6B:22:48:31:57:66:42:50:E9:03:38
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7b:37:4c:d9:b5:c5:4a:2e:15:77:1c:96:4b:2b:7b:ce:c7:
85:1c:1f:d4:7f:a7:eb:dd:30:a5:8a:2f:ec:d4:46:77:39:db:
a8:d6:64:1d:ef:c8:a9:17:77:ba:05:60:64:b6:cf:c5:7f:0a:
90:18:97:82:c6:a9:46:a7:53:b3:b8:b6:ac:98:73:c9:36:c4:
82:f0:41:78:64:c7:ec:27:b8:d6:05:50:4b:f5:f2:43:9d:a2:
c5:6f:7f:10:a1:da:35:99:a3:43:3c:d5:a8:d6:dd:9b:b1:bd:
c4:e1:d3:1e:8f:a5:d1:03:d4:39:42:70:0b:e3:6e:c5:cc:db:
c2:29:a8:31:34:b1:00:38:a7:5f:ae:fb:22:65:ea:8c:e2:a0:
d0:03:d5:27:54:0c:8e:a2:48:fd:4a:1b:52:9f:51:07:6b:a9:
34:c5:bb:94:b9:89:fc:02:22:f5:6d:d6:cc:a2:80:33:ae:ca:
83:b9:38:f8:66:b4:28:8c:58:63:f4:17:30:f7:b0:22:a9:c7:
a3:06:e0:4a:f3:3f:c4:e0:22:b8:41:5d:f1:7f:97:73:81:ca:
de:1c:1c:cb:4c:a4:dc:fc:61:fd:73:cb:6e:fe:0f:38:bb:ca:
73:88:96:15:64:5d:6d:a4:c7:29:63:be:e6:61:57:69:1f:20:
a9:74:0c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:14 2026 by rpki-client