Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
File: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json)
Hash identifier: XrD/5FO7P5FkJCNITWilKCU26OGPrshOV1QadRD0a4o=
Subject key identifier: 71:01:48:64:C1:7C:54:06:83:00:B7:90:18:1A:E2:A1:BE:29:6E:B1
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial: 019D265FDE65E250CB3423FD068097470798
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
Manifest number: 05A1
Signing time: Wed 25 Mar 2026 19:01:50 +0000
Manifest this update: Wed 25 Mar 2026 19:01:50 +0000
Manifest next update: Thu 26 Mar 2026 19:01:50 +0000
Files and hashes: 1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: r0/1vift5mvYbFR8SvbFCvdvGE9eBGSWWyXe+IpZkBs=)
2: mX8HnTFvLthfSZ2ZAzBIL5WiGxo.roa (hash: JasekT6eOU4dUWNEwUdVF7G0JwY0SRq9zwzctkh7yh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:de:65:e2:50:cb:34:23:fd:06:80:97:47:07:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Validity
Not Before: Mar 25 19:01:50 2026 GMT
Not After : Mar 26 19:01:50 2026 GMT
Subject: CN=71014864c17c54068300b790181ae2a1be296eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f7:87:7e:c9:f3:7c:4f:eb:a3:5f:76:49:25:
de:e1:5e:33:8c:b6:88:f6:16:03:10:81:de:f8:74:
03:2f:83:43:07:a2:ab:a1:30:f5:c2:6b:7e:ba:87:
7e:af:0f:55:58:69:d7:7a:1d:d6:51:69:35:9c:a4:
72:54:3a:ba:4f:fd:17:32:eb:8d:06:30:04:6a:1b:
82:7c:9a:65:49:c1:c1:41:cc:da:e4:06:85:e0:dc:
61:4c:5c:6c:fd:91:8f:a3:87:e4:91:c9:60:d0:6c:
67:5d:c3:ff:ed:ec:0d:f3:01:a4:a5:5a:94:cc:64:
af:a4:d5:94:65:e7:b9:3f:ae:39:ad:9a:a1:3b:d5:
be:9d:3c:ea:fc:b2:21:c0:9f:21:fb:10:be:0c:c2:
d9:04:5b:9a:c7:cc:3c:9f:99:cc:78:32:18:61:41:
3c:92:db:8d:db:48:6e:f1:1a:f6:8d:13:a3:50:d4:
c9:2e:9a:2c:04:0a:df:d0:fa:a1:0c:33:a1:dc:cc:
d7:24:03:cb:65:f6:71:09:83:65:ff:0c:6a:d3:8a:
a5:d7:e6:fe:90:2f:42:95:e3:86:f3:c3:71:1c:0a:
d1:31:c2:c4:2b:a2:af:75:7e:23:fb:28:d3:f6:68:
5a:51:f7:ec:c0:f5:bf:6a:ee:e0:5a:8c:69:78:24:
f0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:01:48:64:C1:7C:54:06:83:00:B7:90:18:1A:E2:A1:BE:29:6E:B1
X509v3 Authority Key Identifier:
keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:8c:e6:f3:eb:2f:83:1d:34:07:8f:45:17:55:bb:6b:5f:91:
92:12:57:95:79:ba:c4:62:10:20:19:e4:08:b7:cc:8f:ca:5a:
01:ff:b9:57:ae:aa:de:f4:a1:b6:a3:45:55:57:87:5a:32:a6:
a8:5b:74:16:1e:b1:0c:96:65:a6:da:d0:69:3a:5d:eb:22:9b:
89:f9:4f:30:a9:d9:5a:25:ad:c0:5e:54:4d:73:cf:c6:e2:79:
b3:4b:e0:e2:3a:f0:0c:0a:08:49:bd:59:11:37:37:80:f4:2a:
cb:1f:a3:ba:2e:b0:db:bc:92:43:de:3f:bd:23:8a:40:7a:af:
3b:fc:9b:08:6b:88:bb:53:9f:ad:ce:87:86:da:df:15:ed:56:
29:5b:0f:e1:88:f2:c3:14:25:2a:cb:19:b6:67:ae:93:ee:44:
fc:de:46:b8:11:dc:0e:8c:6c:90:03:94:66:7c:1e:80:dc:e7:
60:45:67:87:47:7c:af:06:57:b9:12:64:4c:d9:b0:cd:9d:a4:
ad:d7:ac:19:a0:d2:4e:4b:03:20:f0:db:2f:6f:3d:51:26:ea:
73:c4:12:51:7c:49:f9:9d:7c:ae:15:e7:55:d1:88:41:cf:d7:
ee:a8:68:4d:30:b6:be:0c:47:c5:79:c5:fb:0b:d9:08:42:28:
bd:1c:36:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:30 2026 by rpki-client