Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json)
Hash identifier: kmlqFIsuM+wPYts8Tsc+ZWKFIPnThWPFIb5gYW8uSRA=
Subject key identifier: 3E:57:D3:44:1D:F8:56:EF:5F:2F:32:DB:4B:E0:91:C3:3B:D0:79:CE
Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f
Certificate serial: 019D322BCFB8993C6607CC00C3B4C1DB49B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
Manifest number: 047D
Signing time: Sat 28 Mar 2026 02:00:25 +0000
Manifest this update: Sat 28 Mar 2026 02:00:25 +0000
Manifest next update: Sun 29 Mar 2026 02:00:25 +0000
Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: ap42B9F4KJepI1IsD5ZLCGnDzGemr/CIV/c3J1spv1c=)
2: 8J8jqfIBZIcDi5qcEjDOA-SS3uk.roa (hash: P2MosB3uZAItjOGMQglzm3PWOTUEZCA6IE9hN8uIIUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:2b:cf:b8:99:3c:66:07:cc:00:c3:b4:c1:db:49:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f
Validity
Not Before: Mar 28 02:00:25 2026 GMT
Not After : Mar 29 02:00:25 2026 GMT
Subject: CN=3e57d3441df856ef5f2f32db4be091c33bd079ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:e5:93:20:6b:43:0f:a2:3d:48:e9:c0:a7:
a8:a7:68:93:b4:16:a3:7e:68:f5:40:d2:b5:0c:66:
ff:48:31:38:43:40:b5:a1:2f:28:8b:5f:d7:21:50:
c6:3b:1b:c5:b0:d4:e9:e3:11:4f:cb:01:5c:09:dc:
42:ba:e1:66:61:73:2a:df:fc:6f:79:ad:8a:a2:81:
4e:e0:38:57:1c:62:b3:a2:8b:33:02:a3:e4:f9:2d:
9a:01:32:cb:78:c6:a2:66:c7:28:7c:16:3d:c3:25:
43:fd:42:d0:58:3d:49:71:6b:7b:d7:23:f0:8a:33:
65:2a:65:84:03:3d:29:b6:8e:da:31:c4:91:15:da:
61:60:96:d7:8b:28:7e:7f:2b:4c:50:e0:2e:d8:e1:
93:56:33:cd:25:ab:ad:bd:ec:d4:9e:91:9b:b9:5f:
30:69:00:62:3b:2a:3c:0c:16:22:2d:a2:72:e7:12:
da:07:f3:9f:e2:e0:b4:20:8a:2c:03:72:82:e6:d1:
7c:e9:c5:cb:66:0f:56:d7:9f:80:be:16:ac:49:a4:
0e:65:e1:53:ec:f3:06:33:27:7b:7b:4f:e9:14:e8:
9a:9b:c9:99:1b:29:d9:28:b4:fc:b7:2f:67:f3:00:
00:fb:7b:2d:85:f4:eb:bd:31:6c:f7:6b:16:1a:ae:
f6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:57:D3:44:1D:F8:56:EF:5F:2F:32:DB:4B:E0:91:C3:3B:D0:79:CE
X509v3 Authority Key Identifier:
keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:63:83:99:ed:8a:c3:37:69:9e:8a:31:42:0f:18:75:3a:53:
c7:20:a8:a1:04:e6:29:0e:ff:c5:fb:f1:90:9c:e5:10:3a:f7:
a4:59:25:83:94:26:19:5b:a5:82:1a:3a:3d:cc:9c:17:29:35:
d7:40:62:fa:c9:8e:e0:63:1a:2f:69:3b:6a:a9:3d:f6:44:8e:
5b:2d:eb:3e:bf:40:f8:3a:5c:ef:2c:85:67:13:c2:f7:48:cd:
4e:6c:57:ba:e5:36:dc:5f:3e:1b:bd:c3:19:dc:ba:92:21:7b:
c4:df:be:86:9f:58:85:db:85:ce:74:ee:98:f5:c3:a0:03:34:
ec:36:80:54:04:91:09:bf:b1:b7:56:79:f8:3d:aa:55:b7:42:
15:d1:7a:b3:74:cc:e0:5c:6c:b6:5f:9e:66:85:a8:60:fd:56:
32:cc:1a:cd:a3:86:5e:98:da:b8:a8:0b:33:53:94:23:70:82:
0a:1f:f3:77:33:0e:49:d7:c3:a2:b1:ee:42:2a:75:67:f2:2d:
f6:db:9a:35:85:c7:c7:1e:ed:21:97:59:d7:c8:d4:95:33:d4:
d0:75:a5:9c:31:7c:a0:dc:dc:78:e8:74:aa:13:86:03:1c:55:
15:1d:af:2a:6f:2e:17:43:bb:28:4e:0b:ae:19:ff:69:67:91:
2d:51:c7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:22 2026 by rpki-client