Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: CvfTbjhf7KXFfLUS+wEI78q+2i6xHBRiKHt2rFGqwwQ=
Subject key identifier: A2:21:13:12:2B:29:AC:14:6B:29:71:9A:75:23:01:89:09:7B:D8:25
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 019D2696057994E930B7F6EB368C79B2FE93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 20:00:58 +0000
Manifest this update: Wed 25 Mar 2026 20:00:58 +0000
Manifest next update: Thu 26 Mar 2026 20:00:58 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: 0rKcWhkDrE6719Fx58i+JTTevKZZQTwmYrBKjnukMr0=)
2: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (hash: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec=)
3: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (hash: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:96:05:79:94:e9:30:b7:f6:eb:36:8c:79:b2:fe:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Mar 25 20:00:58 2026 GMT
Not After : Mar 26 20:00:58 2026 GMT
Subject: CN=a22113122b29ac146b29719a75230189097bd825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:9c:22:0d:6a:b9:76:17:d3:6d:25:d0:f2:
2b:d2:aa:c6:92:bf:ef:de:d7:1b:30:61:1a:42:f2:
e3:37:05:45:d0:80:17:2e:fc:45:e0:48:03:af:5c:
8c:7a:5a:52:ec:2b:aa:1f:c2:3a:48:86:1d:d0:53:
5f:43:7d:3c:ff:65:16:ad:17:5c:3d:48:f6:a8:e8:
1b:98:7f:fc:fd:aa:0d:6c:e8:98:f7:ff:d4:39:bd:
0e:0b:66:57:d3:05:e7:a4:64:30:73:94:44:67:d9:
87:e2:9a:5c:87:4c:a0:93:32:d7:d5:2f:7d:c0:64:
66:c1:b9:7d:b0:45:fa:45:10:2b:6b:86:68:1e:77:
e1:7a:71:e8:f4:21:fe:f2:d8:83:25:85:de:8a:b2:
91:b6:fe:98:63:90:9a:c4:5a:e6:91:06:e0:6f:53:
f1:8d:79:33:b2:ad:c1:c5:79:8f:b7:7d:9a:6a:26:
d2:1d:fd:c3:8e:3f:ea:b8:c1:fc:e7:6f:81:a9:61:
69:0b:98:05:ee:12:f4:65:be:11:ef:12:e7:5a:51:
40:3b:8a:7d:06:e8:8c:3c:f5:25:81:73:f8:cd:6f:
c4:71:d6:4c:e8:84:7b:d6:23:5c:3a:52:40:58:62:
a1:fa:b1:5e:20:00:d3:cf:93:06:8e:8d:80:d6:eb:
43:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:21:13:12:2B:29:AC:14:6B:29:71:9A:75:23:01:89:09:7B:D8:25
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:17:ec:fe:8c:b9:69:e2:15:07:a4:f5:fb:c4:16:00:10:3b:
d8:5f:9e:16:1e:f3:27:16:0b:38:07:30:4a:27:d0:55:28:07:
1d:b5:74:dd:7c:3b:ac:0e:eb:dd:a2:13:be:fa:ea:0a:45:0b:
80:ae:cf:6f:30:c9:13:e0:d9:fc:eb:a6:8d:03:ac:d0:c7:dc:
c1:10:45:c6:e9:c5:d7:12:97:72:78:2d:ea:4d:32:95:66:b8:
dc:7c:e7:f6:0b:fc:f4:43:ab:f8:5a:e2:c5:88:69:d5:87:55:
48:14:a3:a9:4c:ef:18:2e:cf:60:0d:c3:da:a4:ae:90:18:6a:
70:50:f5:13:c7:66:d9:f0:e0:2b:82:2a:b5:2e:94:15:64:41:
74:04:ca:ef:7b:5b:10:8b:dd:4a:d8:1c:92:80:21:8d:c9:6f:
f3:65:75:77:98:5f:2c:70:ce:ca:af:b1:23:7c:b5:2d:2c:3a:
28:20:c7:6a:3d:5d:83:a1:33:66:e1:f2:64:2e:fa:4b:1b:9d:
ee:34:7c:5a:81:03:cf:18:2a:f0:33:48:b9:7b:06:94:6b:09:
6f:7c:b8:fd:29:1b:59:10:24:df:a3:3b:70:88:98:97:ae:1f:
91:0a:11:c0:96:0b:34:95:ed:9e:5d:1c:93:f0:00:b0:96:cc:
9f:90:02:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:45 2026 by rpki-client