Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: Sxze+lGD3lQwFYxy6ojwIzhvZMEZs/QRjlkoxSdqS8k=
Subject key identifier: AD:B9:F5:0C:D1:11:85:F8:B3:06:36:A8:62:DD:12:05:1B:27:61:10
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 019D28169BBC368F32938E0649AAB0D16BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0F95
Signing time: Thu 26 Mar 2026 03:01:03 +0000
Manifest this update: Thu 26 Mar 2026 03:01:03 +0000
Manifest next update: Fri 27 Mar 2026 03:01:03 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: 1T2RvcTfrnMjkfwc30YrXMaEGX2/+YcU/uhTAGx0kko=)
2: C2p4m5oAHBR4b9U98n94_vKEpDw.roa (hash: k7x5kSsiwndiFj3n5RLjj9QM21o5JvrjtmVJtRBC0sk=)
3: _Swl5gHDR66TZCO_pkS1vQ9SqpA.roa (hash: 3hG7Kqg7tej55cxB4vcGvkTLY6M+LbT5b2wG9YFhS4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:9b:bc:36:8f:32:93:8e:06:49:aa:b0:d1:6b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Mar 26 03:01:03 2026 GMT
Not After : Mar 27 03:01:03 2026 GMT
Subject: CN=adb9f50cd11185f8b30636a862dd12051b276110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:a9:11:a2:a7:cb:5b:2a:46:e6:c9:db:0d:
96:9b:28:0f:76:4b:78:32:eb:9c:b4:21:a3:cf:6b:
fe:16:af:5f:03:df:68:f3:b7:69:62:58:7a:cd:41:
53:1e:1a:c5:b1:5e:67:5d:8c:23:d5:4d:0d:12:cf:
c9:00:ed:cb:51:b9:97:38:bb:e2:4c:f7:ea:e9:05:
73:f1:dc:65:f0:50:e4:a5:c8:2a:db:ac:1b:27:8e:
95:1b:9d:3c:9b:58:73:55:8f:12:fa:b3:8e:d5:0a:
76:94:70:de:b0:4c:ca:a0:6f:02:39:6f:09:eb:3e:
ad:7d:b5:01:0f:00:ab:c8:1d:53:85:1e:58:3a:4f:
d9:3d:97:45:dd:79:e5:82:78:85:e0:a4:6b:1a:6a:
99:01:7f:94:27:af:5a:82:c9:02:5b:80:37:39:07:
00:9e:1e:f5:5f:47:b5:1d:62:1a:6d:e2:db:98:16:
16:17:25:86:68:97:2c:ee:dd:10:93:52:d5:be:67:
09:34:99:05:6d:65:2d:3b:43:ce:6f:92:52:34:db:
55:47:91:6f:f2:85:77:13:d5:4d:e8:58:bb:20:46:
95:65:8e:73:f9:a2:f1:8b:73:73:33:da:5e:70:70:
a1:ec:86:6c:d3:f2:b0:b7:3a:94:a0:d3:73:87:99:
7e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:B9:F5:0C:D1:11:85:F8:B3:06:36:A8:62:DD:12:05:1B:27:61:10
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3a:2a:ca:af:53:68:15:a7:86:e8:a8:4a:f6:93:06:13:89:
61:da:9d:bb:dc:92:6c:96:0f:06:eb:b3:39:0b:90:44:a7:f0:
a8:ff:91:f7:bc:27:6c:96:e7:4a:bc:17:d1:97:43:94:6e:d2:
ce:25:65:1c:b4:bc:06:5f:bb:05:17:4f:63:d5:b3:af:ea:80:
2a:33:d6:e4:7d:e4:f5:97:03:4a:d5:e3:3b:69:80:0f:6c:49:
fa:83:b1:cd:52:53:bf:d4:e2:50:5e:3a:d4:79:b6:d8:95:dc:
1a:f9:b5:ad:fc:71:c4:1b:b8:48:da:91:39:2c:bb:a6:6b:a2:
b4:44:17:64:e0:20:9c:b6:8e:e3:a8:a2:55:c3:73:e3:58:51:
df:f7:74:0b:aa:5c:0a:a5:7d:67:9f:b5:07:59:48:09:27:7f:
0a:44:f6:74:ec:41:69:4e:0c:59:6c:97:be:cd:15:1e:03:34:
82:6b:1c:19:1e:79:6d:60:8a:a8:c2:b8:a4:59:b7:3c:d5:69:
6e:4b:22:2f:73:06:e9:dc:87:55:c3:42:ef:06:13:1b:c0:ef:
5f:55:7c:e0:c8:92:ee:8a:a9:30:4e:9b:75:ce:c6:58:35:be:
ce:02:d9:30:a1:e2:1f:59:2a:61:c1:84:9f:7b:ce:c2:1c:93:
b2:a2:35:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:50:38 2026 by rpki-client