Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: 0LfkVNCzxWSLlS/BhFcW8N13Yupzf6KwTpXLN53ewQ4=
Subject key identifier: 17:E1:91:40:25:D7:CF:F6:DB:A9:FF:7D:3D:41:A7:C9:68:EB:AA:75
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 019D25F1A1BDF7A9D365672F6C1C74630059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 0700
Signing time: Wed 25 Mar 2026 17:01:25 +0000
Manifest this update: Wed 25 Mar 2026 17:01:25 +0000
Manifest next update: Thu 26 Mar 2026 17:01:25 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: Bp97gIeLeClWWW1Akd2JVocIO4uFH/QfsG8jrEXuLHk=)
2: p_0XKV3exhd9uWdO5Cc3FmTs35I.roa (hash: vHzaqcFQuYBAr6NOnDqMX/4qIu/wE1PoUiKrWppcY/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:a1:bd:f7:a9:d3:65:67:2f:6c:1c:74:63:00:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Mar 25 17:01:25 2026 GMT
Not After : Mar 26 17:01:25 2026 GMT
Subject: CN=17e1914025d7cff6dba9ff7d3d41a7c968ebaa75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:6f:74:06:8e:76:81:25:7c:82:d4:0b:81:
af:a6:40:da:7d:f5:e9:74:a9:ec:b4:c2:cc:e1:1d:
33:b6:26:c6:b3:6a:4f:4b:c1:2b:7e:88:b8:6e:7c:
18:ed:37:bd:06:6d:e2:af:82:bb:97:a6:8d:2e:4f:
45:33:fc:4f:4b:c5:80:08:29:fa:26:e6:fe:3d:be:
f9:5d:de:d2:4a:01:d0:ee:e0:f6:13:92:89:99:7e:
c8:94:df:84:c0:e5:2e:76:40:81:10:d5:28:95:bd:
84:9f:31:f8:41:ee:f1:ab:d5:89:65:ef:12:e9:a5:
a9:e3:d2:b6:a6:81:51:5c:c3:5d:66:55:36:f3:e9:
fe:13:00:ed:77:e7:98:40:54:aa:f2:b9:96:35:a3:
3c:1c:55:60:7b:28:6f:5b:db:8e:fc:f1:ca:b9:8a:
75:79:80:83:8c:e1:d2:d5:65:bb:98:61:d9:dc:97:
59:d7:44:a5:0f:b5:91:47:a3:47:b7:2c:9d:3f:41:
2d:86:51:6a:77:a3:18:40:f9:8b:c9:4c:ef:53:55:
db:37:65:65:7b:43:e9:82:08:e2:c9:c2:6b:ca:cf:
11:15:2e:59:86:1d:d5:7d:11:80:8e:c8:a4:3c:7c:
e6:44:cc:15:a6:f2:c3:99:c2:77:73:5f:fc:77:2b:
c7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E1:91:40:25:D7:CF:F6:DB:A9:FF:7D:3D:41:A7:C9:68:EB:AA:75
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:08:13:e0:73:6e:3e:3e:b0:71:00:03:d8:c8:20:f7:e0:19:
bf:21:92:44:bc:6f:67:08:e8:3f:8a:eb:68:0d:12:e5:c4:9a:
4d:40:7f:4a:02:8d:09:54:8d:1e:e3:6a:4a:40:84:01:ae:b6:
fa:b3:1b:ad:60:11:58:4a:db:57:85:5e:95:20:20:f2:7d:02:
ac:c0:f8:a5:c7:c5:9e:12:12:e2:47:8d:ec:ab:73:2f:e5:d1:
a4:90:41:44:73:43:ff:ea:aa:c2:64:a9:da:25:6c:e3:f8:84:
fe:f4:29:5f:a2:33:54:06:10:a3:5c:59:01:d6:80:c8:1e:25:
15:f3:d6:32:07:9a:d3:01:85:24:e6:45:34:db:0b:7b:15:64:
52:7f:45:75:9f:b2:c6:d5:a5:6d:00:ef:95:26:2d:0a:ba:f7:
a5:9d:51:cf:36:60:0c:83:90:f8:7b:13:5a:1e:65:ba:ce:46:
08:ba:e4:10:c2:4f:44:ba:98:a7:ad:06:27:52:05:b3:c5:ee:
6a:33:90:eb:d3:9d:88:26:ce:dd:da:b7:63:17:f6:8c:46:a3:
31:12:66:c1:ac:f4:9d:0c:a2:74:e3:58:bc:62:7f:56:af:28:
60:b0:84:40:3b:c0:38:e9:3c:d6:0d:86:54:63:d2:69:40:02:
03:fc:5a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:35:32 2026 by rpki-client