Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
File: 4IEr3duyOb5jncddzS4pbE_PSpc.mft (raw, json)
Hash identifier: OKyyNKj1rjOGwcqbgsNnjJlMPbC51JSPIHEmzyfqDxI=
Subject key identifier: 91:B8:BA:ED:37:BF:BE:39:FC:E2:9E:16:73:CE:29:CF:EA:52:55:72
Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Certificate serial: 019D25F15A99440F7CF8BA1803F7E771569A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
Manifest number: 150C
Signing time: Wed 25 Mar 2026 17:01:07 +0000
Manifest this update: Wed 25 Mar 2026 17:01:07 +0000
Manifest next update: Thu 26 Mar 2026 17:01:07 +0000
Files and hashes: 1: 4IEr3duyOb5jncddzS4pbE_PSpc.crl (hash: W0XSRe+RTou4LKmU5J7BRgwAL26Z0vpyLr7fN/0BXmw=)
2: KoVutq_X-hbyyiE4agG4FTzOf0w.roa (hash: IxlRei0uC7ziEeb5GLb2cYAA8ujLZ81mwnQyJ2ROxvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:5a:99:44:0f:7c:f8:ba:18:03:f7:e7:71:56:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Validity
Not Before: Mar 25 17:01:07 2026 GMT
Not After : Mar 26 17:01:07 2026 GMT
Subject: CN=91b8baed37bfbe39fce29e1673ce29cfea525572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:d2:ee:0f:01:5e:d3:8e:95:55:cd:83:b2:
e8:d8:5e:c3:4a:fd:1a:37:b6:b1:5d:43:ae:4c:54:
8e:7b:a0:ca:87:58:e1:a5:43:c7:fa:63:5c:f3:a6:
a9:b7:fc:50:52:0f:db:0e:87:0a:61:04:27:40:a3:
ee:a3:8f:56:58:dd:c3:12:0f:33:ba:8a:1f:5b:9b:
55:96:55:e6:d3:15:3b:64:ce:5f:50:ec:44:98:96:
a4:98:e5:a3:99:a8:ef:09:bc:54:1e:74:ce:56:47:
34:71:1c:03:49:35:a1:a0:85:7b:da:a5:45:ae:70:
66:fa:fe:95:78:5f:8e:09:6b:f2:7d:ac:8c:fa:26:
15:f6:32:48:3e:93:15:3f:ba:79:8c:90:1f:77:e1:
52:ce:85:41:c6:be:c6:8c:ab:df:38:e0:1a:d8:4b:
43:18:f7:0a:01:f0:cf:34:57:ed:2e:c7:57:c8:8c:
60:9e:ac:71:99:aa:b9:cb:95:93:dc:44:30:cb:57:
17:4d:a0:78:04:c9:22:e4:12:8c:91:4f:d2:4f:39:
4a:9a:85:9d:2c:af:a7:16:d7:c5:8e:75:c7:0e:3e:
f1:84:ca:83:66:f2:b9:99:02:7a:d3:6f:2a:28:89:
03:ac:b4:c4:1a:62:0f:88:64:87:e2:4c:c0:99:f2:
5c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B8:BA:ED:37:BF:BE:39:FC:E2:9E:16:73:CE:29:CF:EA:52:55:72
X509v3 Authority Key Identifier:
keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9a:11:d2:d2:5e:5f:23:95:b0:df:74:4e:26:af:05:70:71:
71:2c:c1:93:87:23:38:53:a0:b7:60:b2:55:29:83:79:61:f7:
69:fe:42:95:e5:1b:2c:f9:90:f7:65:15:96:9e:7b:d5:b2:37:
c1:b0:4d:b6:6f:fe:43:4f:c7:c8:5b:fb:72:a9:56:f2:b9:c0:
93:d0:6d:91:9b:27:be:a0:ce:4d:47:1d:d2:88:ea:05:48:1a:
b8:6f:a5:1b:a7:ce:7c:05:8c:dd:60:30:02:8a:9a:8c:68:03:
5c:cf:b0:16:f8:55:70:2f:8a:56:d2:5d:e1:66:6f:9a:8c:62:
0d:97:4d:3b:3b:7e:27:e2:8a:52:22:ab:97:4b:4e:96:1a:41:
70:cf:77:b9:e8:16:49:57:07:08:85:2f:d8:db:71:15:46:ac:
51:e8:14:14:5d:ed:e4:2b:ad:35:ae:b3:d4:15:10:05:4a:d1:
7e:b8:c0:85:5a:2d:db:ed:68:18:81:c7:2b:7e:fe:a7:1b:4d:
86:fe:7f:25:b3:83:da:ca:a5:f8:ab:7b:df:fb:da:54:55:7b:
71:da:35:62:26:31:ab:8c:a2:ae:31:5b:e6:21:f8:c3:73:48:
93:e4:02:b0:34:da:9c:a9:b4:d0:49:eb:1b:ef:57:42:e8:c7:
c9:d8:90:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:52:51 2026 by rpki-client