Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
File: 4awDIrPqtlcuzioKxavxZKW7_yA.mft (raw, json)
Hash identifier: NH3C0k9XjkHOK2W19B+KKH+8RHj7AIK8fn+XXvaFFAM=
Subject key identifier: 22:95:95:4D:45:52:15:56:15:F2:16:A3:C9:51:A0:E3:37:0A:0F:59
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 019D2997379F2CE6693ED925EB2AD4119E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
Manifest number: 1893
Signing time: Thu 26 Mar 2026 10:01:09 +0000
Manifest this update: Thu 26 Mar 2026 10:01:09 +0000
Manifest next update: Fri 27 Mar 2026 10:01:09 +0000
Files and hashes: 1: 4awDIrPqtlcuzioKxavxZKW7_yA.crl (hash: lWhVbT55KN1QFGTxyTGirqr7/KGeu0Hm7B4sQ3laWks=)
2: Wi5MJkqvObCqrjZBlo0JDmeXkfI.roa (hash: 99QCRcjIbmAy7NXYDozY/LitcvyDVNBk3XTYfLTEqtM=)
3: X4Jj1-4HqPQyHoz2uvlpMoAV66I.roa (hash: U8BCAKAOabJXvpxRbVFDeRvoLuUy39ScZ8CQFXOkfKo=)
4: bRn03FRlSzZThZNkviNVTHKQJGs.roa (hash: xEDx54ik3RAUzg+a27rbqvQuS4hz986uk0RMqkm7R+M=)
5: el7Foe7CpoESR0E_lBDRq_2Ohz8.roa (hash: /kLAJJz2VIOJRlWwXrYI0vRC2jlyRUsDvBRbglDgwCs=)
6: mccsr8m8ho2_mF3Ywy_9oaBImlk.roa (hash: 8fr0OzT5KHo+mYjffMlKzkDxAz4/c/4/JdZVWTqaEVk=)
7: pY-w966p6TcVCR_ceh3iqo8tBvM.roa (hash: 9v8cY+ONlAQ5plK0CUQaAsntXexrpXKvoAQArC1anGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:37:9f:2c:e6:69:3e:d9:25:eb:2a:d4:11:9e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Mar 26 10:01:09 2026 GMT
Not After : Mar 27 10:01:09 2026 GMT
Subject: CN=2295954d4552155615f216a3c951a0e3370a0f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:23:1c:5d:82:17:11:ca:ca:af:c5:33:87:
de:d9:c3:ca:ef:23:5d:c9:47:ab:84:6a:71:80:df:
58:ee:cf:9c:d8:0a:56:a6:26:da:a0:b2:41:4a:e1:
fa:cc:87:85:b7:56:ef:27:82:0c:75:0e:23:10:b5:
33:38:96:9b:97:ae:73:c9:50:78:38:b0:61:ab:87:
23:5f:8c:9b:93:dd:f1:52:fd:1b:4c:2f:c9:3e:61:
f4:45:21:eb:6f:70:78:05:4b:bc:21:64:e5:aa:ed:
49:6f:57:5f:f8:98:02:1b:b9:21:b7:29:18:6b:62:
ee:cb:b9:a9:10:72:98:2d:ae:03:f1:88:e1:65:d4:
f2:26:94:79:db:7a:c9:55:05:a3:6a:f8:a3:62:d2:
05:d1:31:f6:92:7a:91:7c:5c:ea:20:0c:ba:2c:57:
c7:90:ab:de:26:bf:b7:82:3c:60:23:08:65:2c:1c:
7d:5b:cd:f2:e0:ed:7e:66:76:7e:f9:73:a7:65:4b:
85:5e:f1:97:6d:f2:56:f7:e9:19:2e:3a:cc:d0:f6:
87:f7:37:ed:99:81:00:2f:a2:71:e1:67:bb:a4:91:
47:6a:01:40:ec:61:d7:bc:30:d6:3b:73:25:3f:38:
3f:c4:58:0f:05:bb:92:45:8b:16:5e:00:a5:3d:cf:
63:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:95:95:4D:45:52:15:56:15:F2:16:A3:C9:51:A0:E3:37:0A:0F:59
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b6:dc:3e:59:49:4a:a8:c0:e0:82:18:d4:f0:4e:82:18:1c:
63:24:92:20:f9:64:54:0e:02:1a:6f:c2:2c:a0:1a:a9:77:b9:
10:a8:c6:93:ae:89:18:76:54:8e:50:c0:db:63:8a:07:21:87:
0c:6d:69:2f:77:7c:7c:46:0c:47:39:4e:a3:95:8e:b2:34:10:
84:8e:d2:26:f9:7b:f8:34:3e:57:9e:ed:ec:9f:bc:1a:0e:96:
9e:88:d8:d2:da:b7:cd:dc:60:44:16:80:c3:ac:9e:3a:83:7a:
45:68:08:0b:ce:f1:0a:df:e8:2f:9f:1c:87:e8:01:0a:5a:74:
8a:92:cb:3b:d3:87:1b:7d:6a:4c:08:1b:25:a5:ca:91:d2:10:
a6:92:ce:63:c7:6d:4e:5a:97:52:18:8c:5b:12:93:fb:60:f7:
aa:e8:76:6b:a3:8d:0d:ff:e1:7c:29:76:50:7b:81:90:14:74:
6e:64:a3:4f:48:3c:98:0a:a7:23:1b:6e:d3:20:7a:a1:01:54:
cf:07:08:51:21:b5:8f:f9:d4:d7:f0:1e:7d:b4:37:c5:d2:20:
12:97:ba:42:c7:dc:ca:95:02:54:cc:8d:68:32:c2:b9:8c:96:
35:65:83:0e:39:08:f2:e5:e9:cb:60:56:bd:d9:0c:1a:7f:90:
a4:41:d7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:25:10 2026 by rpki-client