Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
File: TIp4hmYiVL456hrdcnKOAA6ywlo.mft (raw, json)
Hash identifier: elRNDwAMz/dIqrKXtpAJlWO63Rcs2P416Pgfct1jHgc=
Subject key identifier: 61:89:6D:BF:B3:0B:1C:6C:95:60:DB:B1:39:A8:AE:4D:3F:00:6D:54
Authority key identifier: 4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
Certificate issuer: /CN=4c8a7886662254be39ea1add72728e000eb2c25a
Certificate serial: 019D2772C8A44B1B56918E0418474033D400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 00:02:07 +0000
Manifest this update: Thu 26 Mar 2026 00:02:07 +0000
Manifest next update: Fri 27 Mar 2026 00:02:07 +0000
Files and hashes: 1: NU0khScwjPjv2Td0G2zhVpmilbA.roa (hash: AeqeiYhPTRBagvHIsxnzHVAbHQ3SfkNkz9Z07JIdpsg=)
2: QRtiZIJ3lC4wddKs5UQgizYT0KY.roa (hash: lrhTL8oElij8rm8reXnXmQ+K5/YFB6C+f/8MDpdyFUU=)
3: TIp4hmYiVL456hrdcnKOAA6ywlo.crl (hash: skKa5krv3zFGh2afse783Fq1WFRrzLFGHtPUHHZwsFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:c8:a4:4b:1b:56:91:8e:04:18:47:40:33:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c8a7886662254be39ea1add72728e000eb2c25a
Validity
Not Before: Mar 26 00:02:07 2026 GMT
Not After : Mar 27 00:02:07 2026 GMT
Subject: CN=61896dbfb30b1c6c9560dbb139a8ae4d3f006d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d0:36:76:ca:bd:3a:c1:24:59:89:17:28:8c:
61:43:1a:0f:5d:ec:d8:df:6a:ea:be:35:62:b1:61:
e8:6c:ea:1a:52:35:dc:ef:be:3f:bb:ac:af:c8:b4:
49:3f:f7:c6:3b:ab:80:b1:f9:59:6b:41:2b:bc:2f:
e2:7c:b9:90:5c:c7:fb:df:58:a4:18:8a:7d:af:1c:
b8:c5:6d:38:7f:0d:5b:69:55:42:ae:ac:dc:03:1e:
15:57:69:b4:49:58:19:33:ec:4a:54:9a:b9:9c:db:
fe:0a:55:07:82:32:0c:4f:18:b1:0d:10:2b:2e:dd:
b7:3a:ed:a9:66:5c:b0:d5:ac:cb:2a:ce:52:3d:89:
c5:4f:63:39:4d:bd:db:bc:f5:8f:bd:14:b8:cc:09:
8d:4f:0e:98:37:d5:53:01:9c:eb:15:c9:c9:66:9d:
e1:11:d3:dc:c1:d9:07:9a:b3:b7:c3:60:aa:aa:65:
5b:da:45:4a:af:9c:3f:62:96:fc:ea:71:1e:88:fc:
76:ba:d7:46:01:ae:e3:49:e5:16:e4:15:1f:06:1c:
20:88:62:37:02:f9:7a:25:db:f2:59:4e:d9:0f:65:
3c:d0:41:fd:7a:9f:9c:04:64:0c:c2:93:c2:e4:ec:
ca:6c:eb:72:44:7d:c9:24:c0:ac:03:03:79:d6:da:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:89:6D:BF:B3:0B:1C:6C:95:60:DB:B1:39:A8:AE:4D:3F:00:6D:54
X509v3 Authority Key Identifier:
keyid:4C:8A:78:86:66:22:54:BE:39:EA:1A:DD:72:72:8E:00:0E:B2:C2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIp4hmYiVL456hrdcnKOAA6ywlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5687c1-df9f-4ae5-a4cc-ec03ebd19000/1/TIp4hmYiVL456hrdcnKOAA6ywlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e3:35:44:48:74:b9:e6:75:ae:b7:e7:8d:b8:b2:8f:3a:a8:
7c:4c:eb:ba:7a:24:bc:9b:c8:35:32:9f:1e:64:eb:a8:00:ba:
ab:b8:41:97:58:14:36:b5:49:b9:ee:e5:78:48:43:34:4f:0f:
fb:0a:5e:f4:d3:e2:b4:b2:11:1d:bc:93:d7:b2:86:74:32:32:
01:00:0a:e1:27:a6:38:1e:3e:5c:9a:08:19:e6:a9:86:90:19:
78:a7:00:19:a6:3e:6b:5a:e8:03:2e:88:64:37:4f:39:30:c7:
e2:8c:00:36:28:03:e3:2d:6d:c2:1e:19:c0:4b:ca:ba:4d:79:
6e:ca:d9:a2:58:2d:48:5f:4b:c7:90:3a:b9:a0:79:a7:d0:9c:
f5:fb:c6:fc:47:99:79:82:3f:6b:75:85:15:41:3b:ee:d6:ec:
de:df:bf:ff:86:e9:81:2e:81:96:c7:5e:01:4c:77:0a:88:16:
d2:d1:08:69:cf:46:77:89:b0:69:6d:69:b5:08:45:4a:a6:1e:
65:43:8a:8e:88:a1:b1:ac:1e:00:6b:90:51:a9:c5:d7:02:e9:
8e:4b:8b:20:4e:60:96:2c:c9:a5:7d:ad:44:62:28:7b:35:79:
95:b7:fe:e0:be:b5:b6:2f:cd:95:8e:b2:4d:10:dd:5b:22:4d:
8c:9c:9b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:42:35 2026 by rpki-client