Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: QBlFsqvAAWjd4C8mYRjompnFQgUzg4My3R+8ZN6s9Zk=
Subject key identifier: 9E:3D:C8:5A:43:1D:D1:92:A5:FB:6A:51:00:02:52:18:A8:17:79:77
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 019D2695BCCE89FB7C1B77948C06F89AAD38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 20:00:40 +0000
Manifest this update: Wed 25 Mar 2026 20:00:40 +0000
Manifest next update: Thu 26 Mar 2026 20:00:40 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: 8dlsrd0BzpGaGKGUsgGPSt0Y+18gtY+QymWs3JoeqEc=)
2: J1Zd6j9Lcwtys2PuV4W0VrM-mt4.roa (hash: 0QTHJDhGxK5m6zxqs1yz2ztZUhs7s6VuZHp2XlfhZqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:bc:ce:89:fb:7c:1b:77:94:8c:06:f8:9a:ad:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Mar 25 20:00:40 2026 GMT
Not After : Mar 26 20:00:40 2026 GMT
Subject: CN=9e3dc85a431dd192a5fb6a5100025218a8177977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7c:c3:47:17:60:b0:2f:ec:46:b4:e1:f9:0d:
0d:b9:45:a8:08:2d:0f:17:ed:5d:bc:fb:b4:94:b3:
c5:76:2e:45:fc:2f:d1:30:03:c6:ae:8a:e8:e2:d2:
fc:45:3d:10:18:01:4f:bb:11:b9:3e:1f:19:39:37:
5d:70:6e:a5:b1:fb:ae:5a:5b:3f:73:73:c1:cd:54:
f8:13:85:a9:f3:60:a9:e9:9a:98:8d:ea:81:e2:e2:
d4:77:e2:99:99:7e:cd:72:38:d4:65:f7:ac:18:61:
2b:46:c5:d3:e5:53:bd:38:09:4f:5a:a1:46:49:f8:
a1:c9:d0:2c:33:ce:52:e4:47:3c:41:d4:27:31:92:
01:0b:a8:fd:80:67:d0:85:f5:06:7a:a9:4e:b1:7c:
d0:58:b6:54:3e:54:2c:ab:39:01:fa:85:df:72:4d:
57:90:99:ef:06:bc:94:2a:7f:6a:b3:f8:07:60:a3:
09:82:30:3f:ae:e3:e9:42:05:92:55:ee:5d:04:a0:
fe:ab:25:09:8d:3a:94:fc:3f:d1:be:ec:45:d0:6a:
2b:d9:20:1b:c4:3f:cd:f4:34:12:94:44:74:1a:c7:
2d:33:ec:05:a2:1b:6f:f6:71:66:31:c1:c5:ff:01:
82:5d:6f:eb:8f:ba:04:04:86:54:86:b7:56:62:18:
1e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:3D:C8:5A:43:1D:D1:92:A5:FB:6A:51:00:02:52:18:A8:17:79:77
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:a9:d4:a7:76:0f:be:2c:58:f3:a6:b4:13:2c:51:a6:fd:5d:
3f:37:b1:3d:12:d0:d8:29:87:71:06:ec:9a:02:b0:6b:b9:8f:
c7:32:f5:f6:ce:31:66:cf:22:a9:da:71:3d:82:6f:72:65:65:
73:2f:4d:5f:22:37:c5:5b:0d:cf:dd:0c:6b:11:70:ef:c7:15:
97:28:d5:db:c0:c5:2f:5c:43:49:e9:32:54:bb:b4:ed:b1:0f:
94:98:dc:34:5c:ab:31:1b:6c:dd:c8:a5:76:4a:db:7e:2c:de:
91:3f:da:78:c2:35:4a:3a:45:3d:81:4a:1f:ad:8d:69:00:34:
b6:3f:33:cc:00:b5:fe:81:74:d3:a7:94:f6:15:5a:37:67:a4:
1e:84:55:52:21:0a:cc:54:52:fd:05:9f:cb:76:7a:82:2e:5a:
05:22:2c:a0:4c:c7:29:27:c9:66:12:30:ec:71:6a:a4:1d:27:
50:92:65:e5:16:90:43:b6:72:60:ff:48:2e:fd:e4:e6:8d:f8:
1f:a5:8b:3e:8c:0e:5c:04:d8:a4:f3:9e:da:40:e7:69:f0:17:
74:46:76:9f:27:5f:a9:a3:05:61:33:2c:de:7d:da:54:3b:da:
12:ff:87:5d:2f:3a:16:7f:d4:cc:0e:dc:3a:88:fe:b2:c9:1b:
05:a5:87:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:16:28 2026 by rpki-client