Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
File: 4Pi55HhWy7oIK3r0KXobcj2vxAI.mft (raw, json)
Hash identifier: bz/1G4v0+Xjn9YKnzY0FSwjxnJNyozbeXgPOA4e3Yvw=
Subject key identifier: 2C:2F:24:A9:68:D8:CF:53:54:5A:AC:CF:D8:63:30:87:9D:C0:3C:D4
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Certificate issuer: /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial: 019D254CA523D99CED3CC2A54CAF495F5898
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
Manifest number: 1139
Signing time: Wed 25 Mar 2026 14:01:13 +0000
Manifest this update: Wed 25 Mar 2026 14:01:13 +0000
Manifest next update: Thu 26 Mar 2026 14:01:13 +0000
Files and hashes: 1: 4Pi55HhWy7oIK3r0KXobcj2vxAI.crl (hash: tJBCu3QZ4851WYccOvdtA0oENzVQmukgwAZvBYE2KcQ=)
2: kVdVmGrwD_1QhMpmPtm5S0rHuLM.roa (hash: 5VG/dK7kZFbtMzo8Upi7dKEOdYrNjvX54ok+rFIDbeU=)
3: wfPK-VcMi8MYRaYAwMg4vaWygwo.asa (hash: 6yNA3pVOdLj0ExvOjreMr4cUDtTKaNe3nwjPRKJN048=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:a5:23:d9:9c:ed:3c:c2:a5:4c:af:49:5f:58:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Validity
Not Before: Mar 25 14:01:13 2026 GMT
Not After : Mar 26 14:01:13 2026 GMT
Subject: CN=2c2f24a968d8cf53545aaccfd86330879dc03cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:b9:e8:f2:02:2b:5d:f6:d9:7a:9c:fc:dd:
87:01:fa:a2:52:4e:a7:4b:a7:73:0a:ef:21:40:6f:
61:ec:e8:c9:6d:27:03:4f:d0:f1:8a:8e:56:18:c3:
67:98:71:47:60:ae:ff:c4:e7:21:40:b0:06:59:70:
52:95:cf:7f:4b:4e:8e:b9:6b:17:87:ab:8d:41:0e:
6e:5d:50:cb:a9:58:a8:34:4c:d1:f2:1f:98:b3:71:
8f:8f:88:09:0b:21:70:bb:5d:6d:2d:27:e7:4e:47:
f2:01:8d:51:96:d1:74:9f:ac:b2:fd:bc:88:8c:2d:
9b:8d:1a:75:c0:9d:c2:65:52:b5:b0:4a:21:14:5d:
07:d6:fb:3e:c4:ca:2f:04:1d:57:64:a0:d3:b6:d7:
10:db:20:9e:98:b5:a5:ed:8b:4c:e3:d1:10:52:1d:
48:39:00:e6:a4:86:d2:dd:e0:0c:04:dd:eb:9a:c0:
d6:32:5b:6e:f3:65:ca:19:3a:dd:52:f8:c3:0c:02:
48:ea:a1:7b:74:72:19:f9:4b:04:38:f7:b8:eb:0f:
63:13:03:11:19:2b:d6:a3:a0:cb:19:62:6b:1f:8a:
81:94:1f:fa:04:2e:2f:48:fb:cf:2d:c3:df:1f:8e:
e5:74:ce:36:ad:c7:c5:df:4d:16:eb:7d:c5:c7:38:
dd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:2F:24:A9:68:D8:CF:53:54:5A:AC:CF:D8:63:30:87:9D:C0:3C:D4
X509v3 Authority Key Identifier:
keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:28:78:e1:d2:16:07:c8:d5:b8:80:12:ac:58:02:79:88:7f:
df:66:cb:6b:43:87:24:b9:63:24:12:6c:c6:e7:58:02:49:1d:
e2:b9:ae:21:c3:ab:2b:d9:7c:45:7b:8d:ff:07:46:ee:bf:27:
69:7c:09:53:b7:71:dd:8f:17:e1:03:44:53:bb:85:82:25:9c:
5c:5f:7f:54:a8:25:c4:21:15:e6:af:e0:3b:fc:6b:cb:47:5e:
5c:4e:04:1e:2f:d7:49:9f:ee:50:2a:81:99:7b:30:6b:5d:7b:
4b:1c:79:f4:a4:1d:a9:88:d1:fa:3c:73:10:4d:38:7d:f9:2b:
ea:80:76:90:89:a6:90:a2:dc:08:c7:be:e0:3d:a6:6f:ba:55:
4e:67:c0:94:3e:0c:7a:a0:b4:30:be:97:9c:4a:a1:02:67:6f:
c4:f0:5a:eb:f4:05:de:50:2c:5b:9c:7b:03:c9:85:d0:c4:56:
1a:63:c8:f5:2c:5a:bb:e7:75:4f:bf:36:89:1f:60:80:87:65:
15:84:79:a8:ec:6c:a3:96:2c:cd:b7:6d:8b:13:d5:f1:08:6a:
c9:a8:07:b3:a6:52:f8:90:ad:0c:37:98:02:1d:89:b6:cf:9d:
b6:20:90:7d:63:c4:6e:7d:08:fd:e9:39:05:25:f0:29:5d:02:
02:6e:90:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:56 2026 by rpki-client