Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: zmAqYFnA+WaChGWujlwf4OSf6RvFOiqAFMG2OEXQkFo=
Subject key identifier: AA:C2:A5:B1:23:0C:CF:6F:82:5D:D8:73:29:E7:4E:23:36:13:D8:DA
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 019D2A0450518668D4D3E5636C6DD13F113B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 094E
Signing time: Thu 26 Mar 2026 12:00:18 +0000
Manifest this update: Thu 26 Mar 2026 12:00:18 +0000
Manifest next update: Fri 27 Mar 2026 12:00:18 +0000
Files and hashes: 1: 1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa (hash: WqRlSVx1Vu6h+ixUdX0cx9Mi9fCqLKMKSDgwbsVbLZ8=)
2: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: g4OSQzK7HVe2G9JTR1NIaTy5QLnCh/16v4VkN3kiZGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:50:51:86:68:d4:d3:e5:63:6c:6d:d1:3f:11:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Mar 26 12:00:18 2026 GMT
Not After : Mar 27 12:00:18 2026 GMT
Subject: CN=aac2a5b1230ccf6f825dd87329e74e233613d8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:78:27:dd:f1:1e:f2:3b:51:80:30:81:78:64:
d3:59:e5:0b:ae:7c:5d:c3:26:59:3a:3e:60:8c:55:
8e:b1:27:00:51:80:e5:1d:16:ad:01:d6:a2:74:78:
aa:13:75:04:e4:2b:f6:de:e6:cd:5a:5b:31:34:4f:
83:f3:bd:64:24:bf:23:a3:da:a7:93:0d:3d:2b:2d:
50:b6:0a:3d:78:9d:99:19:40:f1:c4:16:27:18:4a:
8f:e7:cc:35:12:91:99:d7:3b:2e:7d:a1:fd:16:2b:
4b:2f:87:55:8f:3c:08:b6:97:54:27:7e:2a:54:2a:
d8:91:ce:51:09:c8:d8:62:2b:83:62:e1:d6:21:f9:
cb:47:8e:1a:50:80:90:bc:72:fc:7c:54:e2:fb:b4:
45:79:7f:50:d0:54:9e:8f:e2:30:84:e6:39:76:8a:
56:79:4d:98:a8:71:81:54:de:15:62:e9:47:38:a9:
3a:46:ff:aa:5f:de:c3:6c:68:10:2b:73:7c:18:15:
cb:dd:f8:cc:8c:a2:4b:89:5f:5c:08:44:bd:2a:58:
e6:e5:71:24:12:4e:6a:d9:2e:a9:ea:32:42:97:47:
ae:2a:6e:73:6d:0f:24:0e:85:75:ea:6b:6a:b7:76:
c1:22:8a:7d:24:5f:ef:1a:0b:5c:88:77:36:74:62:
9b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C2:A5:B1:23:0C:CF:6F:82:5D:D8:73:29:E7:4E:23:36:13:D8:DA
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:79:a9:09:16:ac:d3:d3:9c:cc:bd:51:4a:2a:e2:d6:fc:16:
bf:94:ab:68:3e:09:8b:10:fc:3c:81:9c:ed:f9:1e:0a:47:c5:
10:5b:bf:cb:d1:30:0a:4a:53:4f:a2:ef:9e:d4:49:d5:7f:e5:
27:c5:0d:c3:48:0f:1c:30:59:fe:0e:a3:11:49:b6:4e:28:c2:
5a:75:55:d7:ba:43:ad:45:cc:60:e6:97:77:84:12:40:b5:5b:
dd:56:77:b6:8e:55:f6:98:e9:1f:47:0f:06:e6:79:02:d3:7c:
c1:31:84:d4:2c:22:5c:4a:65:6e:a6:50:fb:68:6c:aa:5f:0a:
7d:df:1d:3c:67:cf:de:d1:2b:3e:45:d2:cc:af:49:6b:da:85:
85:d3:d0:2d:cc:58:2b:27:31:48:41:dd:bf:16:fc:c6:f7:c0:
88:b4:43:a9:cd:02:2e:b7:7d:d8:2d:8f:9f:76:6e:c4:30:b0:
af:fa:75:e0:3b:a3:3b:b3:5e:65:bd:c0:c3:7d:80:bc:b4:22:
91:14:15:cf:13:90:a3:4c:f4:87:46:fd:75:ba:01:fe:2a:07:
03:47:db:67:cc:59:d0:44:cf:05:14:35:48:1e:52:2a:87:4b:
be:c0:3e:9b:03:70:29:dc:55:08:d2:42:e1:02:1c:d9:bd:70:
cf:1c:b6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:56 2026 by rpki-client