Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier: SLaK9ddVragPRONF2JhHZ2bN4RMggvF7UYkbLhVQN4g=
Subject key identifier: 35:67:DE:AC:29:E8:9F:6E:F3:35:89:29:CC:C4:51:22:EC:D8:BE:5E
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial: 019D2695F2432479C2DC5437C951DDB8A2F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:00:53 +0000
Manifest this update: Wed 25 Mar 2026 20:00:53 +0000
Manifest next update: Thu 26 Mar 2026 20:00:53 +0000
Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: NF6IEn/SZpsAKis4X88W+taaapzTsdSGIdGuFaEn0BI=)
2: SZ7uQjj18-cU4bIpWv5dSgIvGBE.roa (hash: rmE3xiiuA8FInWGbe7SdLUBpAe5mfXQkxmyusGShZtQ=)
3: XphaguuWFSP8UQVU9jupgKQKPTw.roa (hash: 7KRxLds07r+kpPQbo12VWuWgRVl+sWP2XMsAOWnoAcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:f2:43:24:79:c2:dc:54:37:c9:51:dd:b8:a2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
Validity
Not Before: Mar 25 20:00:53 2026 GMT
Not After : Mar 26 20:00:53 2026 GMT
Subject: CN=3567deac29e89f6ef3358929ccc45122ecd8be5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:a6:1a:3b:b4:24:60:02:0e:9d:da:76:95:
57:36:72:c0:ec:df:48:03:89:e1:6c:e1:d5:2a:ae:
f5:42:df:73:3a:46:c9:e6:0e:38:7b:90:f7:c7:0b:
90:73:2f:7f:28:da:60:11:07:a3:03:8c:bf:d8:3e:
32:2a:a6:19:26:de:a7:31:29:d6:2d:ef:9e:fb:a5:
91:5c:21:51:00:60:7c:f9:9e:8e:ea:3b:f9:8f:5f:
cf:db:22:59:e5:2a:06:7a:c4:71:2e:b5:fa:52:21:
44:83:dd:d1:84:39:37:2c:f3:4a:59:bc:ed:a4:89:
5a:be:2b:da:f1:b1:48:4f:4c:fb:29:9f:a1:bc:a7:
23:c0:14:ce:60:06:72:38:ec:ea:a4:6f:a8:6f:e1:
60:9d:69:55:a7:1c:d0:78:e3:8c:14:ce:8e:19:e3:
37:ec:b9:9a:f6:5c:82:2b:c8:32:de:35:b3:dc:e0:
d0:f6:92:9d:6a:52:10:f8:b7:ea:b5:5d:d3:11:60:
2d:0f:dc:e9:6e:3a:22:a6:48:24:5c:62:ca:97:bf:
c0:9a:03:89:ec:ad:9c:a5:02:ed:e7:2c:8d:89:73:
f4:4e:26:65:15:a5:3d:fe:28:5f:19:16:a6:60:76:
ec:a5:0f:81:37:74:60:f1:2b:af:c0:44:d0:2b:19:
9c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:67:DE:AC:29:E8:9F:6E:F3:35:89:29:CC:C4:51:22:EC:D8:BE:5E
X509v3 Authority Key Identifier:
keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:82:b4:b1:cd:98:ef:9a:af:ed:df:4a:00:1f:b3:1a:b5:65:
66:89:52:77:f6:13:db:bb:9a:fd:85:69:b2:4e:fe:7d:46:8a:
e1:24:1f:b2:fe:7f:47:51:b5:bc:a8:f4:73:a8:c7:62:f6:78:
e2:3a:55:fe:b7:7d:0a:a7:09:1c:fe:bd:e4:33:ba:b5:ab:91:
cb:a8:59:1e:8b:a0:84:60:57:89:9b:6b:02:1f:e2:49:b6:65:
b5:3f:79:88:c5:ed:9b:9b:a7:ef:dc:42:d4:f5:a9:96:0c:71:
91:3c:dc:e6:3d:aa:c3:8a:35:43:79:be:0d:38:b5:27:b6:58:
bf:c0:7f:65:c2:d2:5f:9c:08:c3:60:22:53:ab:ba:73:c1:7f:
7e:08:73:dd:30:e7:1e:54:1c:79:e0:ed:1f:c3:c0:69:d4:05:
cf:06:99:18:f3:43:31:fc:08:83:32:47:c7:7f:35:4c:70:5b:
6e:be:ca:1a:72:88:cd:3e:7b:7e:79:c3:8f:ca:e1:56:65:b5:
dd:0d:10:92:03:3d:48:c9:1b:d4:97:39:a2:66:df:f0:be:6e:
f5:f5:96:43:cf:d4:74:d2:13:df:a2:bb:60:00:11:cb:b6:d3:
8d:a2:20:cb:e4:f2:4a:69:cb:ca:07:ad:7d:0a:0e:2c:ce:0a:
81:7f:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:08 2026 by rpki-client