Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
File: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft (raw, json)
Hash identifier: iVQTEWpdq4eFTcWDw7iHmC5awZUODvTDPmyY20MbSbU=
Subject key identifier: 09:2F:6F:2F:CF:5F:32:D4:6E:85:EF:98:D5:9B:3C:AC:B1:D4:CB:8C
Authority key identifier: E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
Certificate issuer: /CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Certificate serial: 019D292919EBB4E93710B09A453BE3D4F207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 08:00:52 +0000
Manifest this update: Thu 26 Mar 2026 08:00:52 +0000
Manifest next update: Fri 27 Mar 2026 08:00:52 +0000
Files and hashes: 1: 28-UkpXxAzZbO8vuIBQRnkr5eRE.roa (hash: YFs8JOoUa4SUku2tRg5QnVz5rp4j/Pv7WxhvaMnlFHg=)
2: 4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl (hash: QH7/KuO3p79ejQloBKi14A0pnASEJsXBRV2lZ1cv0m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:19:eb:b4:e9:37:10:b0:9a:45:3b:e3:d4:f2:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14f264fa4a4c90dcb4a99cccec50c5508f44498
Validity
Not Before: Mar 26 08:00:52 2026 GMT
Not After : Mar 27 08:00:52 2026 GMT
Subject: CN=092f6f2fcf5f32d46e85ef98d59b3cacb1d4cb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:ec:94:92:5f:1f:41:38:92:40:9b:e9:97:
7a:32:04:9e:dc:82:c9:87:c3:9f:f5:98:ba:ab:a5:
f3:62:15:cc:90:93:10:cf:3c:96:3a:7b:13:0b:5e:
bc:f9:be:1c:34:59:b9:b6:6e:57:78:7b:ac:6c:64:
87:78:e6:3f:c8:23:dd:5e:a7:34:7d:8d:c2:69:8b:
cb:8a:73:03:87:8b:04:ae:54:c6:02:cc:b2:ae:3f:
21:9e:da:08:fe:86:fb:d0:07:58:2e:5e:a0:74:28:
0c:f4:af:12:cb:3a:e3:64:5f:68:b4:9e:ec:ce:8a:
3d:95:06:d9:69:38:61:7c:76:74:1d:64:6c:7a:8e:
c4:c2:1d:c3:9a:c8:62:20:7b:e1:a8:e8:02:3b:e5:
aa:6c:95:f4:57:02:a5:e9:93:89:12:2b:73:31:e7:
f6:ab:1f:07:7c:a9:94:20:28:b8:08:4a:cd:93:72:
55:91:93:ba:a5:4f:92:a6:19:1c:fe:0b:af:d2:bb:
e9:37:11:1e:c5:69:29:95:bb:49:e4:ed:09:33:94:
01:1f:18:09:5c:f7:28:72:f7:b8:fc:86:de:69:f7:
fe:65:87:fc:1a:62:c1:5d:d9:78:2f:cb:87:04:d0:
c0:55:e1:2b:7c:db:8f:a5:10:4d:05:b0:8b:00:38:
38:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2F:6F:2F:CF:5F:32:D4:6E:85:EF:98:D5:9B:3C:AC:B1:D4:CB:8C
X509v3 Authority Key Identifier:
keyid:E1:4F:26:4F:A4:A4:C9:0D:CB:4A:99:CC:CE:C5:0C:55:08:F4:44:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4159c3-814d-4001-8527-139043749c48/1/4U8mT6SkyQ3LSpnMzsUMVQj0RJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:55:55:40:e1:86:54:c4:8d:56:ea:4f:8c:e9:f2:9b:13:68:
a4:d5:4a:1a:dd:73:a1:9e:96:68:a9:78:44:a8:bf:18:e5:51:
9d:2e:82:08:9e:3d:d1:06:f5:97:28:8f:4b:c7:89:cc:d6:38:
46:87:c4:98:78:c4:58:88:20:4d:2f:d4:97:34:2e:e5:55:3c:
65:c6:38:4f:25:34:da:ce:74:ac:41:d7:c6:aa:e1:b9:78:a6:
9d:3a:e3:9e:fc:06:52:e7:02:e1:d9:ae:6c:2e:f9:6e:2d:da:
a7:87:ee:0b:d3:13:d3:d3:46:e7:9e:79:e7:5f:8a:78:7f:25:
b0:3c:ef:c0:2f:56:b5:f8:b4:1a:e6:03:ca:ad:3c:71:cd:fb:
39:6d:9a:3f:ae:66:d4:86:af:7d:8a:49:06:62:9b:31:6d:35:
f7:08:bd:dd:3c:a2:ff:1f:5d:83:43:40:58:16:d1:38:f4:9d:
d0:e2:53:48:39:ec:66:ae:e8:92:05:af:ee:8e:38:50:70:04:
64:90:e3:f5:46:5d:79:65:86:e5:13:e4:5f:a4:f7:e2:3e:02:
26:66:e3:6d:66:94:b5:63:ad:6c:a7:ba:7e:e6:23:32:70:99:
50:fb:90:b9:08:cd:b1:60:03:17:ac:db:68:db:10:08:6f:ec:
55:0c:82:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:31:01 2026 by rpki-client