Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: XcvviaeClePlQe26q5+hM2N7ONOpEKFB7uvEPosZwkk=
Subject key identifier: C1:A5:70:7A:17:B6:82:D6:DB:28:D3:95:06:EB:C2:D2:DC:4C:36:ED
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 019D2704CE5E55661E3CC09879ED0469BCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:01:59 +0000
Manifest this update: Wed 25 Mar 2026 22:01:59 +0000
Manifest next update: Thu 26 Mar 2026 22:01:59 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: 83joFWe9Fdey+guB3YFdg7zmVIZPjI2hEQwceDzYRSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:ce:5e:55:66:1e:3c:c0:98:79:ed:04:69:bc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: Mar 25 22:01:59 2026 GMT
Not After : Mar 26 22:01:59 2026 GMT
Subject: CN=c1a5707a17b682d6db28d39506ebc2d2dc4c36ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:42:e9:01:0f:40:cc:c6:b2:5f:da:03:e2:
e5:2c:4d:7c:b8:c2:38:f4:a5:86:a6:a3:a5:87:48:
63:fc:c4:df:d5:03:79:8c:2b:78:a7:72:cf:2f:31:
e4:2c:06:83:82:05:97:47:77:0b:08:40:e7:80:4a:
3d:23:ba:cf:d1:af:ea:b2:af:e5:75:18:44:e7:94:
68:61:bd:62:4c:11:00:8c:c0:66:f5:c9:c3:bb:c3:
d4:a7:77:4d:c1:71:de:14:91:36:62:c6:73:12:a8:
40:8d:01:d3:07:98:70:3e:bf:1d:ba:bd:49:ec:15:
7f:5d:aa:7a:fc:8d:3a:fb:86:7c:1d:8f:78:37:37:
74:09:0d:b4:58:f5:6d:19:13:f1:1c:b2:40:6f:f7:
49:63:85:3d:4c:3b:d8:48:d2:f0:f8:5f:2a:a5:e5:
90:4d:b4:8d:d6:e7:2d:43:99:7e:44:e8:12:2f:87:
73:43:c1:8a:80:02:b7:55:79:57:4a:e9:22:21:87:
61:f6:18:97:70:f3:84:c6:68:41:33:e4:02:a6:a6:
48:7b:f8:33:bc:07:80:73:01:80:c4:e3:93:ad:41:
bc:ca:b2:09:90:33:51:67:07:c9:fb:4b:64:7b:b2:
ed:92:49:70:c6:7f:54:7d:ad:11:79:11:be:71:8f:
9d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A5:70:7A:17:B6:82:D6:DB:28:D3:95:06:EB:C2:D2:DC:4C:36:ED
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ef:93:83:21:78:a1:72:61:53:9b:6d:12:8b:50:b1:63:1a:
07:ed:cc:4f:a3:69:01:52:ed:c3:23:b1:bf:88:7a:49:6e:d9:
a0:e5:e3:86:92:5c:b3:3b:18:51:df:2e:8d:b9:f6:89:b1:41:
65:49:ed:2f:a5:41:a1:14:38:6a:2f:d4:db:94:fa:6a:36:64:
4c:d2:e3:13:1f:6a:0d:62:b1:b9:0b:7a:1e:db:17:59:5d:ad:
6b:4c:6d:34:3f:70:10:1f:8e:e6:d8:9c:ed:2b:e9:a2:f6:29:
72:f8:a9:89:3e:e4:6a:ad:44:03:c4:42:73:d4:56:e3:d3:56:
37:f2:c6:27:9c:91:6f:79:0e:c0:d0:c2:d6:0b:9d:3c:55:d3:
b2:41:63:22:46:27:59:8f:93:d8:a2:9a:cf:11:15:bb:59:c4:
d0:bf:13:e2:9e:8f:96:03:3b:52:2a:9f:09:bb:18:a2:8d:94:
1b:f6:e2:3c:a0:e6:f7:1e:aa:69:fa:fb:d0:2a:ca:4c:6d:3e:
ce:ab:4e:66:f7:60:a2:53:f0:0f:33:01:3e:5c:21:8b:f0:06:
65:63:d8:bf:cb:26:09:cd:44:d6:ab:e8:bd:b5:2e:6f:91:e3:
3c:d7:25:20:57:bd:6c:8d:17:40:70:4e:6c:6f:0d:28:9d:dc:
18:c4:45:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:06:45 2026 by rpki-client