Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: 8v5QGkwq6WUpSiDbcoAFWUIX7DllQl0V5C3synuovL8=
Subject key identifier: 71:EA:06:CE:DE:06:97:CA:6D:36:52:A3:FD:50:12:7A:03:1F:9C:9C
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 019D247154BD0430B630800D3C2179A961E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 0BFC
Signing time: Wed 25 Mar 2026 10:01:40 +0000
Manifest this update: Wed 25 Mar 2026 10:01:40 +0000
Manifest next update: Thu 26 Mar 2026 10:01:40 +0000
Files and hashes: 1: 1-qSiDXrAhQQiEkJKVibhHHT9XHY.asa (hash: ek3lFQhBM69m11IFyrspDmCB7+jlGlnfEWGxNiaYwFg=)
2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: s5vwd87fE+Yhr+unWKX70txTeK3m/Shgq3u3kUCpAvM=)
3: s-PKc_tu2wV4rS8DFKDtN3pEWOo.roa (hash: RIeIk6mysjr3waBR5H6D0lD1jhhyLuowL03Fip2BNmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:71:54:bd:04:30:b6:30:80:0d:3c:21:79:a9:61:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Mar 25 10:01:40 2026 GMT
Not After : Mar 26 10:01:40 2026 GMT
Subject: CN=71ea06cede0697ca6d3652a3fd50127a031f9c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:b1:9c:8b:80:22:a1:da:4f:7f:e3:51:d1:
fa:b8:11:e3:8c:2c:49:99:c4:49:5f:53:2e:1f:5e:
12:41:64:e0:a9:11:08:c0:36:29:30:06:8d:88:2a:
93:94:8b:c1:9b:3c:32:70:29:91:4f:21:74:f4:22:
50:e5:b9:f1:41:64:e1:11:f1:80:f6:3f:40:a9:b9:
e9:c8:86:ba:6b:5c:be:6b:b3:8e:fd:b1:80:aa:36:
5a:ab:cf:09:0e:3c:d6:ed:30:24:de:fc:61:41:aa:
d8:51:22:08:ae:ea:62:86:57:6f:6d:34:94:f5:b1:
20:a2:9b:fb:3e:94:f4:be:d8:95:89:cf:67:fb:06:
67:a5:14:e0:82:07:fb:b9:49:0f:59:9c:fa:7d:2a:
1c:8f:f9:bf:16:57:4e:c2:e5:7a:0d:5a:f8:a7:bc:
97:4f:4e:82:33:42:e1:ce:7d:b9:71:b2:c5:aa:98:
79:5e:e2:a1:2a:d2:67:ca:3a:39:6b:ae:f1:dd:54:
38:99:3f:20:62:33:38:36:43:04:0b:18:f1:e4:55:
c6:b0:37:aa:ac:b2:9e:fd:52:15:ef:dd:2e:21:ce:
b9:65:bc:fb:e2:e8:90:e8:1d:d0:d1:77:d2:4e:c9:
c4:23:66:00:9f:82:48:67:72:69:ce:d8:8f:5d:2a:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EA:06:CE:DE:06:97:CA:6D:36:52:A3:FD:50:12:7A:03:1F:9C:9C
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5a:fe:fd:f4:63:24:44:40:ac:4e:83:17:57:64:67:33:01:
a8:83:41:1b:6c:84:97:6b:52:9a:ab:b7:6c:26:ec:7e:78:3f:
2f:62:05:24:72:a3:20:69:c3:c6:f7:b9:50:41:2f:11:90:28:
d6:d7:34:05:ba:a4:d4:01:c4:d8:f2:f5:1e:75:98:41:25:a1:
d6:3c:fe:91:a0:e3:6c:a5:ab:90:f4:55:22:0b:eb:1a:05:6d:
ed:2f:5e:9a:1a:27:1d:97:db:ba:be:9d:4b:5b:d3:28:37:34:
52:1b:69:f4:cd:e3:de:9c:47:f4:85:6b:06:9a:42:d9:82:c5:
1f:80:3a:9b:9c:4b:27:35:c9:27:16:a2:db:55:a0:87:4d:3b:
14:0a:22:39:7f:c4:d0:68:71:82:4f:b0:a5:35:d8:8e:9e:1b:
0d:b9:74:66:ac:6e:d7:42:3d:63:53:2f:a0:cf:8a:66:07:80:
a3:8a:9e:e0:69:10:6e:39:91:4e:03:7a:58:e4:0c:9c:1d:0f:
aa:c4:68:aa:74:27:42:f2:b1:0d:51:11:64:2e:16:c5:dc:08:
cb:45:0f:75:d5:ec:35:11:0f:93:ab:68:fd:d2:72:af:53:6a:
ad:99:bc:2b:c9:94:57:56:04:f4:b0:bc:25:65:d1:5a:67:f6:
fa:e8:61:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:20:32 2026 by rpki-client