Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
File: 4K-xYKlzOKshEUhArdxhgKW6QrE.mft (raw, json)
Hash identifier: hl/lPozE79hMYG0wD7U2S/R4XU/kudSuyTwDmgbh6PQ=
Subject key identifier: 62:D9:3B:55:57:3E:A5:89:A9:21:70:AC:FE:15:48:34:07:E9:06:A6
Authority key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Certificate issuer: /CN=e0afb160a97338ab21114840addc6180a5ba42b1
Certificate serial: 019D2628510AFD2A4CC60EC998E70322E7E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
Manifest number: 155B
Signing time: Wed 25 Mar 2026 18:01:09 +0000
Manifest this update: Wed 25 Mar 2026 18:01:09 +0000
Manifest next update: Thu 26 Mar 2026 18:01:09 +0000
Files and hashes: 1: 2uv4A35uHTMpYA3zuKbwoHVzKho.roa (hash: 1l7FhVG9aM98lzJEoZX89yaj7eW/134YEJfp3yB6jdU=)
2: 4K-xYKlzOKshEUhArdxhgKW6QrE.crl (hash: qGXkTWO1ePz9mEnAX73IcYAQiFAYvkZyw1vJDv1LHQE=)
3: 901P5QTG_zP5-toad6ON5djGco8.roa (hash: T7sgL+7utEqmF1118OKVZINBycYJGTPVYzDcW0kyicE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:51:0a:fd:2a:4c:c6:0e:c9:98:e7:03:22:e7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0afb160a97338ab21114840addc6180a5ba42b1
Validity
Not Before: Mar 25 18:01:09 2026 GMT
Not After : Mar 26 18:01:09 2026 GMT
Subject: CN=62d93b55573ea589a92170acfe15483407e906a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:55:e4:15:31:66:3f:cb:44:6b:65:3f:fc:61:
3b:af:67:8b:d9:ac:f3:b1:11:27:57:c7:22:56:2a:
d9:e3:16:86:11:4a:ae:48:3f:78:c1:15:8d:7f:d7:
27:8b:d7:92:b9:8a:7e:fc:0a:15:6d:ec:37:c1:96:
f2:bc:2d:e5:98:b9:a3:7c:88:06:e7:22:15:66:5d:
7e:28:a5:46:d8:a1:d0:51:b4:1e:29:8d:ae:f6:64:
1a:27:f6:70:0b:16:9a:f3:06:cb:34:dd:0c:f1:ec:
30:4f:be:ac:f4:f2:f4:6e:43:ab:35:1a:8e:61:9d:
08:49:42:e3:32:58:bb:99:d9:e0:85:0f:b4:7e:12:
18:d4:2f:3e:17:a0:1c:ca:ee:20:07:ed:2b:8b:4a:
4e:de:30:23:da:f4:8b:81:1f:63:2d:08:f0:ae:47:
f8:63:71:e2:9c:69:eb:9e:b9:7c:a4:ec:ea:70:86:
19:c6:b4:93:eb:0c:fe:13:6b:36:99:bc:ce:74:41:
80:83:48:4e:86:bf:f4:12:31:35:91:17:cf:8d:d9:
39:27:27:93:ed:b3:93:83:94:0f:e1:6e:fb:46:3c:
08:2c:28:87:bb:79:f4:02:cc:9d:1f:27:df:8e:8b:
df:35:0e:d5:30:fb:06:f3:83:e7:77:bd:3a:d4:95:
69:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D9:3B:55:57:3E:A5:89:A9:21:70:AC:FE:15:48:34:07:E9:06:A6
X509v3 Authority Key Identifier:
keyid:E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:75:cc:40:e7:65:16:35:98:b8:68:dd:3e:7d:dc:13:52:0d:
c3:ae:2d:44:99:3f:6f:ad:48:47:84:a4:a8:aa:5a:8a:35:00:
f7:38:d3:33:1f:73:37:14:17:bc:d2:fd:e6:8e:18:d0:72:57:
10:64:08:27:1d:d5:b6:2a:a5:a0:60:f8:c3:73:58:e7:93:72:
dd:2a:64:bf:72:9d:bf:5d:c0:7f:49:51:d5:e7:9d:c4:2a:5b:
25:18:39:56:0c:fa:73:12:20:7c:42:1a:ee:5d:25:59:45:a8:
f1:61:0f:3c:5e:00:e6:40:17:b0:5b:d0:76:18:6d:97:13:2b:
e5:54:a7:4b:a6:0f:be:eb:34:c2:92:84:e2:25:33:57:63:76:
18:87:fc:3b:5c:d1:fb:8a:c9:0d:b1:6d:06:98:52:cd:e3:3a:
33:9a:2f:af:7f:02:3c:1a:a5:7a:8b:fa:22:67:60:3c:60:03:
82:19:8e:b1:92:ba:98:43:de:ad:d8:74:99:0a:84:23:7a:84:
76:f4:62:7c:83:2b:86:fe:2d:a1:67:df:46:a8:73:0e:2e:a2:
a0:f7:fa:8b:6a:3e:20:41:84:d6:d9:8a:7b:2f:2f:9f:aa:a5:
49:da:32:c8:90:37:32:c7:02:d2:b7:85:7f:d9:77:1b:d0:84:
20:4f:15:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:13 2026 by rpki-client