Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File: 4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier: 9toVjvbyVpFDcA3UuUhSumKz+NzqF0HP0Mr4DNfkilI=
Subject key identifier: FF:35:AE:85:C9:E7:0D:98:1C:6A:98:0C:2D:36:61:A2:19:DF:EB:75
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer: /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial: 019D273AB0C196BED690AFED79E9DA0138A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 23:00:50 +0000
Manifest this update: Wed 25 Mar 2026 23:00:50 +0000
Manifest next update: Thu 26 Mar 2026 23:00:50 +0000
Files and hashes: 1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: CfpmXih82AnEkc85V2594QqFihyLO69HWZ+3OuiGSDM=)
2: 8WgF1FeeAMIWLEqNHsEmrCFfWUU.roa (hash: l9CCrON/4HDYrH0Vj7tQlkfUKI21p0hKJL3nNR+WrZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:b0:c1:96:be:d6:90:af:ed:79:e9:da:01:38:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Validity
Not Before: Mar 25 23:00:50 2026 GMT
Not After : Mar 26 23:00:50 2026 GMT
Subject: CN=ff35ae85c9e70d981c6a980c2d3661a219dfeb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:56:e4:95:b7:10:d0:16:4c:fd:93:7d:4a:
07:34:62:28:c5:4c:f1:33:0a:12:5f:b2:31:67:26:
37:45:3d:b7:e8:9a:c3:99:85:a9:3b:cc:70:18:27:
15:dc:86:cf:6a:13:79:a5:5b:12:1e:18:44:4a:ea:
31:7f:59:9a:53:33:61:93:31:08:da:c2:da:8c:61:
1f:23:65:d8:c7:c4:16:93:6e:62:7a:87:ea:47:1d:
00:f0:cd:9c:4f:f9:d7:aa:95:aa:9f:46:d4:38:13:
96:f4:f4:81:c5:78:15:45:d5:c3:c9:d3:8b:38:39:
d8:0e:2c:b1:50:0f:5b:0e:a5:ee:b5:32:b9:0b:01:
01:7b:35:22:a4:42:69:7f:6d:1b:b5:54:60:f3:5f:
89:b3:54:3f:a8:cf:fc:64:2b:47:bb:be:9f:2d:45:
6c:0f:38:15:4c:61:ec:f8:3a:7c:0c:30:36:1b:8c:
40:7b:3d:8e:b1:24:20:82:ba:9c:94:74:09:0e:c0:
e7:c8:1d:67:d3:38:76:d7:cf:09:4a:e1:a9:a2:f6:
eb:6b:6c:07:ff:64:7b:4a:f6:5f:ee:95:cf:54:e6:
ec:a9:3d:c3:14:ad:d1:eb:f9:df:20:8c:1c:b0:95:
0b:e9:65:a4:a6:1b:a4:f2:86:84:b2:cf:9b:19:0a:
6f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:35:AE:85:C9:E7:0D:98:1C:6A:98:0C:2D:36:61:A2:19:DF:EB:75
X509v3 Authority Key Identifier:
keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:46:16:da:1e:8a:77:07:cb:eb:a1:f2:54:9f:4e:60:96:aa:
75:fc:88:90:6a:cc:c2:34:57:0b:bf:71:76:75:72:50:04:8a:
de:49:0d:09:87:d9:60:4d:f3:96:c9:28:b2:a8:14:c6:d4:58:
8a:1e:64:01:7f:9b:50:e8:42:58:25:46:51:94:9b:7f:28:c1:
97:8b:35:6a:17:0d:11:ad:fb:4c:08:6d:16:da:bd:1e:59:c7:
99:2d:ce:96:94:ec:71:24:ec:ae:60:2a:12:03:63:87:75:7b:
52:22:6e:83:05:9e:83:69:9d:e1:af:b1:ea:bb:36:5a:1c:83:
39:0b:8b:4a:fd:14:86:0e:fb:38:5e:a9:cd:56:9c:87:ac:3b:
a5:30:11:43:28:25:bc:22:c7:d0:76:f9:d9:90:89:cb:06:d7:
d8:a7:32:27:d6:68:6a:c8:86:f1:19:36:77:d4:56:bf:53:a8:
e3:21:e8:72:f4:0e:b7:15:c7:90:b1:9b:13:5e:42:2b:1e:fa:
2f:ac:f4:d2:aa:bc:6c:ae:a8:e2:6e:fa:8a:7d:f3:1b:22:3d:
4b:f0:40:29:e3:95:30:d3:df:39:7c:42:03:8a:b0:ca:12:93:
db:30:5a:2b:14:e0:28:ec:b9:72:88:e1:97:dd:02:b7:82:cf:
7a:a8:b7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:27 2026 by rpki-client