Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier: K3f6SUyZEQ3AWXt6LvUxLw4VtyEuoduNIF8oZmwdFFU=
Subject key identifier: 2F:19:0D:64:B3:27:59:1B:30:0C:06:C7:20:44:AD:0D:8A:D9:1A:38
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 019D2816DB3C02F1209A6AF119ACFEADD825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 03:01:19 +0000
Manifest this update: Thu 26 Mar 2026 03:01:19 +0000
Manifest next update: Fri 27 Mar 2026 03:01:19 +0000
Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: rFbqL2N1M0WRB49EMGm0/cHSX/icn8NtiNGGbPb2oPk=)
2: vC2Im6wO7AYNQfHqhdffdSsKQVk.roa (hash: 7HPvAiJ29pt2x/rNPwngG1GyeF1UIK/JkGxi50lh27k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:db:3c:02:f1:20:9a:6a:f1:19:ac:fe:ad:d8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Mar 26 03:01:19 2026 GMT
Not After : Mar 27 03:01:19 2026 GMT
Subject: CN=2f190d64b327591b300c06c72044ad0d8ad91a38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:47:54:0a:bb:ce:d4:2c:27:78:f2:06:6a:0c:
35:c9:c7:df:96:70:ce:70:ff:36:a0:d1:26:b1:08:
f3:74:70:74:21:4b:4d:80:f7:d6:e3:7e:fe:9f:93:
7e:42:ff:c1:f6:b3:09:47:5e:ad:cd:91:4a:7a:7d:
20:75:c2:16:53:21:d8:70:02:60:72:d7:6d:61:33:
19:cf:22:b6:03:24:0d:2d:22:51:ed:5b:c3:c2:82:
20:5a:4d:29:71:34:b3:82:22:b6:0d:7b:30:8e:a4:
82:e9:56:c0:97:2e:0b:38:d4:c2:92:e0:91:f2:02:
ff:7b:ff:89:92:aa:6a:19:16:53:f0:da:a8:00:71:
26:33:ca:38:b2:75:1f:67:f9:e9:79:6a:4e:d3:12:
30:6c:df:6e:4c:94:d5:a9:e4:16:19:28:27:8d:a6:
98:0f:a2:67:d4:0c:46:10:17:f3:5f:6c:86:0d:a2:
e9:e2:7d:c1:9b:c6:13:55:38:bd:97:e4:f9:06:ec:
90:87:2d:8d:d5:d3:1f:17:a1:93:36:a5:d1:6b:68:
8d:75:1d:fb:13:66:2b:97:f7:ab:83:94:6d:1e:cd:
20:bc:8d:50:e4:51:e3:81:8c:bb:b1:b0:83:44:16:
f4:88:6d:12:b5:f8:5b:33:eb:c3:14:72:2d:41:75:
f7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:19:0D:64:B3:27:59:1B:30:0C:06:C7:20:44:AD:0D:8A:D9:1A:38
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:59:7b:44:71:71:ce:b2:fd:95:5b:0d:0b:35:37:16:12:fc:
a1:d5:60:1a:99:1d:e1:09:a2:8a:ed:98:6e:76:c9:39:ff:52:
37:be:87:be:f2:6f:f6:8e:9b:19:70:6e:dd:d4:5d:25:8c:e3:
bf:5a:dd:70:6b:07:bb:76:af:7a:2e:2a:fd:59:67:b3:2c:a8:
ee:83:5f:dd:e4:d4:e2:23:87:93:ca:27:c9:a4:1b:17:aa:49:
6a:3a:39:df:3d:e7:f4:8c:22:45:4f:4d:aa:fc:d5:af:2e:0c:
75:e6:4f:d3:ef:fd:e9:6b:fb:09:d0:09:23:3d:8e:d9:bf:e6:
54:85:9c:03:33:df:c2:15:82:4c:b6:af:d9:cb:36:3b:ee:72:
b7:1f:dd:f0:c5:18:32:f6:b5:76:69:0f:21:94:e6:aa:5a:97:
85:00:61:24:b1:fa:4b:a1:25:fd:82:32:fb:60:d2:a7:27:dd:
b7:e6:fb:d3:ab:2f:fe:fd:61:5b:05:ba:56:98:3b:8b:39:76:
78:c6:e8:20:e0:a9:84:c6:ef:df:b1:18:fb:29:8e:13:a8:5d:
57:43:bb:e1:74:9a:53:60:07:24:1d:f9:a8:33:b1:d7:ca:fa:
ca:d0:81:4d:37:0e:e8:a7:ee:7a:e6:23:87:1e:e7:b1:b0:34:
48:ec:0d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:01 2026 by rpki-client