Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: MedOjmx49bd9QYXoYjgK6N/TULI/Ogz/C2USWt6ulVs=
Subject key identifier: 38:F5:0E:31:A0:C4:C1:45:14:81:06:1D:9D:6B:57:2A:62:4E:76:ED
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 019D296109859AF7529C4FC9A4C345D533AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 17DB
Signing time: Thu 26 Mar 2026 09:01:58 +0000
Manifest this update: Thu 26 Mar 2026 09:01:58 +0000
Manifest next update: Fri 27 Mar 2026 09:01:58 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: eNW8Gfpzy+LpjhlQQTulatm53+bD3Zo4ODlV4yRFzN0=)
2: APkEJsxH2t-1o8uReEsySa-BG0k.roa (hash: QGebNblh9sIV47+DzT8QKo/lQO0JIeSNiq/YB/thR5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:09:85:9a:f7:52:9c:4f:c9:a4:c3:45:d5:33:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Mar 26 09:01:58 2026 GMT
Not After : Mar 27 09:01:58 2026 GMT
Subject: CN=38f50e31a0c4c1451481061d9d6b572a624e76ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:48:4e:1d:ac:6c:7c:fd:da:ce:cb:a3:ae:
cb:b7:22:cf:a1:89:ff:e7:b2:19:72:bc:0c:ac:ca:
a7:31:a9:f8:7a:47:f9:73:d6:30:ff:85:9f:6a:2c:
a1:51:8b:2a:1b:06:ea:c2:74:8b:ba:8a:99:86:84:
e6:60:a9:3e:5f:4c:09:68:1a:02:6d:da:ac:4c:7d:
53:05:99:6d:b2:cf:20:1a:50:a8:52:f1:12:c0:e8:
36:15:80:61:8a:93:30:02:c3:07:97:93:5d:89:3b:
39:7b:93:d6:af:c4:eb:6a:30:30:93:20:3a:d1:cf:
4c:f8:f1:39:0a:d8:6b:96:53:7b:8e:2c:2a:e4:a0:
59:14:97:27:09:7e:1e:a8:37:a9:74:29:5a:4f:c9:
8b:94:60:cb:64:29:24:2f:77:cb:f9:6a:27:7e:9a:
e7:22:d8:29:d4:ef:e7:38:c7:df:12:0c:d8:6d:1e:
b8:ba:8a:27:d6:66:45:7f:9e:49:02:83:4f:05:5e:
a7:e9:51:01:b4:07:64:3a:bd:e2:d5:9f:8e:0f:ab:
45:2f:61:f0:23:ac:5f:03:6f:11:48:1f:e8:2a:f9:
11:48:e4:75:32:80:54:4e:37:9c:a0:84:1e:25:e4:
1c:d2:cc:0d:be:cb:8d:d2:c6:79:a2:9e:81:51:fd:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F5:0E:31:A0:C4:C1:45:14:81:06:1D:9D:6B:57:2A:62:4E:76:ED
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:f6:5f:2d:9f:09:15:57:8d:07:34:51:c2:84:e3:f6:21:4c:
51:77:0f:12:be:00:94:94:3c:33:98:cf:b9:eb:7e:02:87:74:
f7:87:a3:58:4b:8a:4c:1d:be:3a:dd:91:94:ea:5f:7b:41:c8:
29:d5:9a:7c:d9:e0:43:89:fb:46:1c:aa:c9:6f:24:ea:60:81:
ef:a7:1b:1f:78:9a:62:ba:53:d3:29:6f:63:9c:2c:ea:e5:05:
92:94:93:d2:b2:fa:45:ae:0e:e6:3c:aa:55:c0:58:90:d2:6f:
cf:ec:4c:bb:1e:64:57:2b:f0:ba:86:b7:bd:3d:e0:33:09:de:
ab:ea:20:9d:01:8b:45:7f:9f:33:23:4d:b3:45:70:36:07:2f:
db:99:b1:ab:48:fa:0e:31:a0:9c:5a:b6:de:8a:70:d9:df:b1:
68:b4:be:78:3f:ae:79:3b:44:2b:76:a1:e7:98:68:bb:80:7b:
e9:09:c6:94:1e:59:00:fd:4b:ee:ad:70:fa:07:8c:85:7f:47:
eb:f1:19:e7:eb:73:46:ca:6f:ef:24:55:b5:c5:25:11:96:58:
7f:b5:f7:71:16:97:60:70:97:f4:fe:87:ab:ce:a7:02:7d:68:
b1:9e:7d:12:54:73:27:ca:3d:61:4d:ad:79:ac:9c:cb:87:7f:
35:d6:46:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:22:42 2026 by rpki-client