Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier: LZUNIuum1HtEpg1KyJkQbCvfVvWI8Y7TT8Yhm1YtON4=
Subject key identifier: C3:E7:3B:B4:D7:41:B5:F3:87:0E:B1:80:F2:C0:ED:0C:0F:FE:D2:A6
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 019D2A3BCC281AD3313C4D030979F989BACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number: 189A
Signing time: Thu 26 Mar 2026 13:00:55 +0000
Manifest this update: Thu 26 Mar 2026 13:00:55 +0000
Manifest next update: Fri 27 Mar 2026 13:00:55 +0000
Files and hashes: 1: 1-nIDHjjDOfK0qkT3T38aF1CybZo.roa (hash: wfNaZ1sAvLj/BXad973SBMXYEOp2AK12GK1yxn0qtHA=)
2: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: BeWWdTD12bJy4DtO8fP9VtGxJ3Z5WGxkHcXGkTPNSYo=)
3: 7cNt7nS6Ga02pEEvUGwXFcclfa4.roa (hash: IhtCXpz8Ziv5ADSE80GH1TqeWkIm73cJMRq8OxzR0jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:cc:28:1a:d3:31:3c:4d:03:09:79:f9:89:ba:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Mar 26 13:00:55 2026 GMT
Not After : Mar 27 13:00:55 2026 GMT
Subject: CN=c3e73bb4d741b5f3870eb180f2c0ed0c0ffed2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:58:01:f4:f8:2b:dd:02:24:08:58:84:e6:
c9:80:aa:e3:a8:08:15:d0:89:08:ea:40:e1:d4:7d:
1f:7d:83:a5:7a:90:6f:4a:18:f0:7a:59:1b:de:ac:
e5:0e:f3:b0:89:35:9d:22:0a:ad:ef:a2:fd:56:ac:
f6:92:08:05:09:65:4f:9c:73:a4:02:f3:01:bd:78:
66:fd:45:bd:b4:c9:f7:65:62:a7:02:33:42:c8:a4:
57:06:d9:7b:49:6b:f1:3d:76:44:ee:ad:f2:3d:30:
a4:af:02:7c:f9:62:cf:14:81:98:ff:d2:95:8e:1d:
f3:11:8e:8a:77:61:2d:82:02:23:61:7a:bc:08:0c:
ab:40:f3:48:72:fe:2a:96:d3:13:3f:4e:3d:60:3f:
fd:46:c6:1b:e7:9c:ac:2a:1e:fe:b2:85:d2:e0:e7:
65:2c:65:fc:4b:21:be:4e:69:06:b2:d2:ce:0a:82:
15:26:cc:5a:c2:6d:dd:02:a7:d0:bb:b9:e1:15:d6:
42:83:85:09:bb:4d:47:3d:7e:94:19:a8:06:3f:31:
d0:b1:2e:3e:f3:f0:98:1b:06:e1:e7:99:67:78:e9:
48:90:62:a5:cd:c1:18:ff:3b:8c:fb:48:7c:83:7f:
30:52:a2:6f:69:60:1b:52:55:09:d4:8b:55:b7:bc:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E7:3B:B4:D7:41:B5:F3:87:0E:B1:80:F2:C0:ED:0C:0F:FE:D2:A6
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:b7:4f:35:8b:bd:cb:09:08:8c:14:b1:cd:00:ee:7c:0b:ea:
c2:6e:db:96:d3:c5:8d:e5:9d:d1:a1:46:8d:03:98:7e:ca:4e:
04:95:45:16:75:25:89:29:6e:13:4c:99:ed:22:5d:1f:47:c3:
80:b7:24:df:f7:5d:0a:bf:d9:e8:bf:d5:ce:13:22:5c:f3:f2:
8b:cc:fa:cc:f7:68:6b:11:95:55:96:e7:d7:5c:b2:d1:6e:b0:
86:40:11:7b:da:3f:01:1f:7d:96:94:65:ec:67:32:dd:43:7b:
a3:ed:5e:e7:b7:f3:d8:0a:56:1b:09:54:ec:fd:7e:be:d4:df:
53:21:f6:34:d7:9f:e0:e8:0f:18:83:ad:7e:0b:6a:cf:3d:a4:
3c:e9:6f:c0:05:8b:03:6a:36:09:2f:be:55:ee:fa:d1:16:43:
3e:79:e7:79:b9:bc:10:3d:b3:c1:3b:ee:de:be:85:f0:f1:48:
52:ed:0e:61:25:03:42:a3:75:d9:f6:4b:a2:5e:76:89:6f:f2:
03:dc:90:d0:5e:68:e4:77:e3:3a:01:50:7b:73:a5:ef:b1:15:
65:fb:1a:13:f2:1e:18:5d:09:de:9c:ec:09:f9:23:93:8e:8f:
6b:ae:5e:20:b1:de:94:42:4b:1b:30:a0:39:61:27:ae:ce:ba:
77:5d:1a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:27:15 2026 by rpki-client