Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
File: 4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json)
Hash identifier: SB4fXR57Gdjmom5s6o2LWPSbVzLup1wKhwr25yTNDsU=
Subject key identifier: CA:FD:6B:81:77:C2:0B:6F:09:85:CD:C4:CB:0D:01:D9:97:4A:05:5F
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 019D26280D725336F34073F4327474A211EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 18:00:52 +0000
Manifest this update: Wed 25 Mar 2026 18:00:52 +0000
Manifest next update: Thu 26 Mar 2026 18:00:52 +0000
Files and hashes: 1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: dY0FY1xhCZ25q/S3aY3XvVS0YhHp2SbzbXnUrgobAt8=)
2: nQKy6e2LccKKfVdgMJiI4DoR9BU.roa (hash: DkQsbrxnTq1yHz8jrN75m8LOYNoDRbUgrzZnY6/SqN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:0d:72:53:36:f3:40:73:f4:32:74:74:a2:11:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: Mar 25 18:00:52 2026 GMT
Not After : Mar 26 18:00:52 2026 GMT
Subject: CN=cafd6b8177c20b6f0985cdc4cb0d01d9974a055f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:d9:df:e1:0f:bc:ef:00:a4:e4:c1:5b:38:
8b:28:86:6d:d1:9c:dc:f6:1d:26:fc:6f:5f:a8:23:
59:ef:06:7b:84:b2:85:14:53:c1:11:3b:8a:a7:11:
d1:7d:5a:84:63:16:98:d6:64:b9:08:d6:c0:a6:72:
94:0b:0a:f5:e5:57:d0:06:0d:6c:e5:9b:95:40:77:
c4:e9:24:57:26:fa:f3:1e:d8:45:81:6e:1d:29:22:
1a:dd:d5:78:99:e6:7e:f6:fc:aa:a5:e3:d7:5c:24:
69:4a:3d:10:cf:2c:d3:76:34:c5:98:30:8a:ee:ab:
39:f1:c3:c1:9d:0f:a1:22:9b:46:2e:4e:25:f7:ef:
55:49:2d:d3:37:fe:2b:95:a6:25:cc:fc:e3:c2:fe:
8e:5b:96:f1:a5:3a:b2:02:46:08:1f:06:ff:7b:85:
96:90:ee:fa:11:70:af:ad:a2:7e:1d:84:65:21:80:
2a:2f:10:2e:83:94:81:96:8d:7a:66:3b:3f:67:24:
35:20:dd:f3:38:30:1b:27:88:37:98:eb:33:e2:4d:
24:25:43:5e:e1:9a:5e:b8:a5:c0:c7:9c:09:91:7c:
d3:df:a5:13:c0:bc:44:ad:99:04:f4:eb:ab:e8:12:
6e:aa:75:12:80:b5:c5:27:2e:d0:f4:99:53:f2:6f:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FD:6B:81:77:C2:0B:6F:09:85:CD:C4:CB:0D:01:D9:97:4A:05:5F
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b2:2b:bf:16:1f:aa:fd:c3:b4:c3:7a:4d:29:54:0c:57:62:
c1:a8:f5:55:55:37:fd:27:84:0f:77:f3:9d:95:84:2f:25:06:
73:5a:ac:69:6d:af:92:55:b9:ec:a9:d1:93:2b:c7:eb:fc:c0:
5c:18:68:6e:3b:68:dd:23:26:01:0d:3a:68:9c:91:e1:86:77:
74:bd:95:3b:83:bf:82:45:51:1f:ea:44:bc:f1:c6:be:5c:52:
fc:01:65:03:b1:02:12:b8:b8:a0:a2:2c:b5:fe:4e:0c:09:1d:
36:1f:09:df:a6:77:4b:96:d9:b4:fe:45:3d:8f:e5:e7:dc:4b:
83:d9:55:c1:cb:e1:ce:c7:7c:8e:de:17:3c:3c:59:e8:39:ce:
d4:fa:86:87:ab:79:a5:1e:d2:7d:98:50:12:13:08:6f:83:0e:
d0:22:15:11:be:5c:c8:99:11:fa:07:1b:03:5f:78:0f:0f:ce:
ec:03:6a:77:79:39:0f:ca:cd:84:a9:3c:4a:c8:27:c0:1e:69:
2d:0e:fe:e7:62:46:77:f8:f4:d7:8f:9c:b3:fe:c2:f2:61:68:
07:39:0a:b1:4c:ea:82:06:d5:c5:30:be:c3:80:bd:ad:26:f0:
49:38:c4:bd:cf:76:56:78:a6:70:18:c2:66:1e:bc:b9:9e:ae:
9e:f6:da:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:41 2026 by rpki-client