Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
File: 4u1kMJX_plfeBc7spdILJlwbf1I.mft (raw, json)
Hash identifier: AoiXl5t+6Zn/0ZZXXQv3vT5J1K7E5Nbap+jf8U0fL7w=
Subject key identifier: 2C:B5:7A:60:F9:0D:D3:99:57:9F:FF:18:BA:94:11:36:26:85:5A:94
Authority key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
Certificate issuer: /CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Certificate serial: 019D2704112716E89EA99D6039F41D8D9A91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
Manifest number: 1104
Signing time: Wed 25 Mar 2026 22:01:11 +0000
Manifest this update: Wed 25 Mar 2026 22:01:11 +0000
Manifest next update: Thu 26 Mar 2026 22:01:11 +0000
Files and hashes: 1: 4u1kMJX_plfeBc7spdILJlwbf1I.crl (hash: M7z7qa51+itqawpVfOL/9nBd+7oCCwJ9dhrLolVMTn4=)
2: VCisrPtNvtB7bscmQGWvZKbtHFo.roa (hash: 5zS8VmmJLoewFXoJ5XZ3WMz0MzfOi8w0Bvod98H2Sr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:11:27:16:e8:9e:a9:9d:60:39:f4:1d:8d:9a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Validity
Not Before: Mar 25 22:01:11 2026 GMT
Not After : Mar 26 22:01:11 2026 GMT
Subject: CN=2cb57a60f90dd399579fff18ba94113626855a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e4:75:c2:19:73:76:f8:f5:64:41:04:88:db:
ce:37:46:53:e7:60:9d:a8:a4:a4:e8:1e:12:ea:fa:
21:81:da:ff:ff:8d:4b:eb:3f:bb:9b:48:b4:63:2a:
ce:41:e0:e7:ba:f8:00:4a:89:e8:a3:17:0b:37:1b:
76:bc:d3:6b:5d:36:8a:89:28:18:ec:cc:2d:36:3d:
c9:a5:7d:26:1f:8e:c1:4c:3e:33:3f:16:11:a0:d6:
e0:b5:fd:17:1c:fd:3a:e7:cd:72:8b:f8:b0:d8:65:
7a:d5:78:88:7f:da:bc:74:23:b8:3e:23:3a:c7:ef:
c2:4d:9f:6b:0a:87:65:7b:33:4f:ee:ad:2b:5e:b5:
89:bf:0e:ef:c0:93:73:89:db:5b:af:73:d4:fd:c4:
28:9f:0d:bf:c9:0d:cb:d6:6a:d8:89:fb:51:52:d7:
4d:f8:42:3d:fd:b4:20:bd:d4:4a:7f:b9:4b:ae:6d:
4c:c3:fd:08:f6:9f:72:01:53:62:c5:8e:2a:0a:63:
31:60:72:ea:0a:47:80:87:40:a7:04:6d:9c:8f:26:
11:8e:29:8a:24:06:3f:8d:8a:b1:a6:bc:ca:c1:36:
a0:fb:5d:c1:50:2a:5d:01:48:17:4c:9a:1d:dd:62:
53:ab:5c:be:60:91:bd:1a:21:db:2e:6e:44:c3:18:
86:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B5:7A:60:F9:0D:D3:99:57:9F:FF:18:BA:94:11:36:26:85:5A:94
X509v3 Authority Key Identifier:
keyid:E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4e:33:f3:48:3f:6a:0e:41:00:d1:74:c2:84:58:dc:05:5b:
b8:44:76:4d:be:38:36:16:db:f1:4b:e8:5d:b9:ef:ea:bf:b8:
ac:dc:88:25:d7:c0:57:4f:e0:dd:df:8b:55:7c:fd:00:2a:00:
ae:a0:3f:6c:4c:a2:a8:05:0d:63:c0:5d:fb:ad:86:3e:55:21:
67:a0:bd:f6:9f:90:c5:76:00:ee:44:4b:96:be:9d:1d:2c:34:
df:08:38:6d:e9:3e:ad:6b:b1:96:e2:7f:0b:d2:69:fe:06:92:
6a:5e:58:3f:1d:82:0d:b4:ff:4b:67:34:99:c7:d7:ba:08:8a:
02:b6:a0:dc:a1:85:b8:4e:00:d8:41:ca:c1:26:f5:b8:05:4d:
41:3e:64:69:7b:1a:f8:68:c3:c1:37:18:d1:ea:47:63:4f:dc:
7e:07:25:a3:ba:76:41:d4:24:5f:af:f8:38:b5:6d:3d:ac:d4:
44:9c:7a:41:b0:1f:63:16:42:af:d2:b5:05:71:07:2f:af:67:
be:d2:a6:a4:27:ff:74:b6:52:2f:f1:b5:98:23:ab:70:6b:58:
99:d3:dd:46:a2:a6:e8:20:7d:c9:7b:a8:b9:1b:b6:56:d2:33:
81:64:4c:dc:31:7c:60:50:90:f3:b7:c7:99:61:f7:cf:fa:9a:
3c:97:f8:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:50:34 2026 by rpki-client