Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier: 8ZRCflrAmpUXT3x+GJVibdjMqvXOPVs5k5Atnp+Y9Q8=
Subject key identifier: EF:74:3C:D6:A2:28:0B:9B:EA:0C:A3:CD:6C:E0:AE:D1:7B:17:78:33
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 019D284DAC5B0451A6959E675C53234DD58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number: 1899
Signing time: Thu 26 Mar 2026 04:01:12 +0000
Manifest this update: Thu 26 Mar 2026 04:01:12 +0000
Manifest next update: Fri 27 Mar 2026 04:01:12 +0000
Files and hashes: 1: 1-nIDHjjDOfK0qkT3T38aF1CybZo.roa (hash: wfNaZ1sAvLj/BXad973SBMXYEOp2AK12GK1yxn0qtHA=)
2: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: n9HwgS8Gmd7+TkiCRbR0jTpyO0TFy65MaMqw1sUVazI=)
3: 7cNt7nS6Ga02pEEvUGwXFcclfa4.roa (hash: IhtCXpz8Ziv5ADSE80GH1TqeWkIm73cJMRq8OxzR0jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:ac:5b:04:51:a6:95:9e:67:5c:53:23:4d:d5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Mar 26 04:01:12 2026 GMT
Not After : Mar 27 04:01:12 2026 GMT
Subject: CN=ef743cd6a2280b9bea0ca3cd6ce0aed17b177833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0d:47:4d:dc:f2:11:2b:97:4f:f2:84:d4:2b:
e1:e8:e7:54:6b:3b:2d:b4:a0:11:73:49:92:73:a2:
e4:53:27:5e:9a:60:b9:64:47:88:d9:52:fb:85:56:
7d:1d:66:34:49:70:05:6b:60:54:04:9e:eb:1b:ee:
ad:cf:29:c3:82:05:55:ec:c0:b9:54:2d:b8:84:f3:
37:5d:d4:d3:d8:bb:ff:d5:6a:2c:42:ed:da:ee:bd:
d7:4a:81:3b:20:fe:24:ca:e9:c7:9b:b4:89:73:e0:
cc:ee:e4:1d:4e:b8:ec:69:35:ec:6b:31:c2:5a:a0:
db:8b:bd:25:66:4f:15:94:c0:56:cc:84:dc:2d:72:
b8:ca:6d:8e:2e:a6:4c:99:ba:ed:55:2e:e3:8f:73:
07:9e:42:8a:aa:7a:3b:d3:eb:49:9f:c7:53:a4:7b:
8f:37:d4:43:a6:4e:1c:df:b8:00:99:ad:86:f7:f2:
13:7e:4b:db:23:d1:f4:df:13:3f:fe:6a:d4:81:04:
97:db:3d:ab:0f:c9:98:8c:de:37:d4:79:73:dc:5b:
85:b0:a0:05:f1:d7:8a:73:f4:ef:0c:b2:70:9e:77:
af:fa:72:d1:f8:64:31:87:c2:4d:94:6f:9c:9a:a5:
9e:2a:67:ea:86:72:c6:f9:0d:64:05:34:26:ce:16:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:74:3C:D6:A2:28:0B:9B:EA:0C:A3:CD:6C:E0:AE:D1:7B:17:78:33
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ff:1b:6b:c5:e1:27:f0:7f:c2:2a:c6:24:7c:8b:52:83:9d:
cf:3a:5d:3a:80:8e:18:ba:06:c1:b5:22:0c:98:47:f7:c8:49:
a9:ec:73:2f:e5:bf:88:fd:b2:55:c7:5a:3a:83:18:f5:20:6c:
b6:f2:a3:c3:f6:31:1f:0f:36:af:94:e2:cf:08:da:57:ad:30:
5a:d7:79:9c:8c:1b:c7:58:9b:be:d5:83:4c:3d:ca:27:d1:e8:
fe:f7:b2:03:5d:c5:16:55:5f:5f:6e:c7:8d:63:34:40:43:5c:
d7:d7:a8:a5:85:62:3c:89:d9:2d:7f:55:b4:e0:9c:75:fd:60:
15:a5:6e:42:44:19:12:ca:02:b9:97:35:1d:4c:63:24:47:55:
cf:8f:02:f1:09:98:e7:f8:3f:6e:d5:09:42:46:27:47:af:ad:
50:f9:cb:54:cd:16:9e:22:2c:e7:d8:5e:15:99:79:4b:cf:17:
0e:77:af:72:93:65:2c:9e:61:05:50:b7:35:8e:84:d8:86:7a:
3c:ea:b0:7b:38:c1:9d:99:f4:f7:be:2f:6b:1c:91:28:58:d6:
bf:2e:90:e5:5c:99:f6:68:95:13:ae:a0:87:ff:8a:88:5b:32:
cc:66:55:62:a4:0c:ff:81:cd:06:9b:6b:69:e3:ea:f3:f2:d3:
ca:dc:98:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:12 2026 by rpki-client