Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
File: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json)
Hash identifier: YA3lZ0yCdKXJx5AfTekhJOUWi6OIKDFf0mmMdPaX1O0=
Subject key identifier: 8A:C3:40:85:5D:6A:D8:CC:EA:67:3B:60:B1:76:77:02:02:18:58:10
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial: 019D262881A22FF2F623D7C92C7688A4CA71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
Manifest number: 0D99
Signing time: Wed 25 Mar 2026 18:01:21 +0000
Manifest this update: Wed 25 Mar 2026 18:01:21 +0000
Manifest next update: Thu 26 Mar 2026 18:01:21 +0000
Files and hashes: 1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: 4tjucZUWq3MAoNrYxqT1gWK21udyDisRkzwO55i5jB0=)
2: PrQ9lga9Ki2nMKZgqqoUsecApCI.roa (hash: wgW6ob7p1bWzADPUesI+OZalVcxaNSlVibSRrGZpWnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:81:a2:2f:f2:f6:23:d7:c9:2c:76:88:a4:ca:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Validity
Not Before: Mar 25 18:01:21 2026 GMT
Not After : Mar 26 18:01:21 2026 GMT
Subject: CN=8ac340855d6ad8ccea673b60b176770202185810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:66:78:7c:d9:f2:5b:13:4b:01:4f:95:db:21:
77:53:c1:ae:16:2a:54:fb:5c:3e:4a:32:25:7b:6a:
79:5a:fe:22:b9:7f:3d:34:5d:e2:0b:9d:5b:07:98:
c2:d1:00:f0:89:9b:b9:9c:b3:80:97:37:a3:8e:9a:
c6:39:0f:4b:ff:e2:fc:2c:0b:0c:81:5d:ee:ca:74:
4c:86:90:1b:79:53:95:fe:0c:26:22:2b:69:43:e3:
9e:a1:68:19:e1:9a:b9:c9:1e:2d:11:6c:23:29:80:
14:f3:38:6a:4a:65:5e:57:63:eb:1b:ce:cf:c0:2e:
72:aa:e5:dc:f2:61:03:e6:1d:11:90:df:14:8f:7e:
6a:bc:a4:7e:48:32:b1:e4:ce:8f:38:85:c1:a0:03:
48:2d:4d:4d:98:a8:22:99:f9:d4:5d:f4:6c:ba:b7:
bb:96:e2:c1:fd:3d:5f:08:51:3f:85:db:a3:6e:da:
d3:ba:38:d8:94:49:70:59:03:42:19:6e:18:b6:21:
97:22:eb:c7:31:25:fc:6a:72:fe:4a:c9:1f:05:3b:
06:83:9b:d2:97:ad:18:86:89:18:b5:de:6c:8a:52:
fc:9e:c1:dd:89:56:c2:d5:c8:d9:4d:74:a5:b2:7f:
03:a3:32:18:fd:1c:82:2c:b1:38:72:99:d1:bf:c7:
cc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C3:40:85:5D:6A:D8:CC:EA:67:3B:60:B1:76:77:02:02:18:58:10
X509v3 Authority Key Identifier:
keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:47:55:78:72:52:b7:ce:b7:da:28:44:81:41:ab:be:3b:1b:
4f:cb:23:97:75:30:c1:67:b0:a5:7d:02:d5:11:18:45:bb:4e:
5b:61:92:ad:72:37:da:ff:6d:95:5b:90:ad:9d:9b:75:37:d0:
27:5a:5c:43:47:04:2b:42:99:52:08:4f:97:00:7d:7a:84:4e:
6e:fa:7d:00:b1:e2:27:80:9c:03:99:0b:58:04:69:f7:d0:a3:
a8:c9:51:89:72:79:2e:f2:01:c3:71:1b:2e:4d:5f:99:cf:5c:
b0:d6:41:bb:d5:2b:ad:b4:5a:ec:47:d8:77:b5:7f:5a:3f:83:
ff:98:88:0a:a4:c5:bd:f5:09:14:76:5d:05:82:ec:a3:d6:eb:
d8:3f:9c:11:01:d7:8f:2f:fe:e4:b3:fb:03:fd:db:43:b0:0e:
8b:55:fb:ca:46:07:2b:ce:75:f8:25:b0:d5:40:68:8a:49:58:
c4:58:9c:8c:46:8e:aa:78:e6:60:a9:ce:a1:90:fd:cf:7f:04:
91:f4:a0:7a:0b:1d:1e:74:17:3b:82:23:06:f8:1e:00:10:d1:
04:ed:21:59:57:50:2b:ab:a7:80:6e:59:17:0e:cf:8c:ba:1a:
54:4a:d4:91:fb:e5:3d:6c:14:95:19:e6:6f:3d:d6:90:dc:7e:
fb:4f:92:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:47 2026 by rpki-client