Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: EA7qrIale5thjP9+jyLfR5AFOQ8zJVo6gZ60zpo4ugU=
Subject key identifier: 41:91:5D:C4:82:89:16:B4:26:71:7F:0B:43:5A:23:24:4C:E2:97:0E
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 019D28843198AF3F3744F95A4DCF689B7D86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 141E
Signing time: Thu 26 Mar 2026 05:00:45 +0000
Manifest this update: Thu 26 Mar 2026 05:00:45 +0000
Manifest next update: Fri 27 Mar 2026 05:00:45 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: YQaDWqZKgTpFHcikpPE/487Pr9tKpILHl7DgAnHQ+QU=)
2: Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa (hash: QNb3CvjoOXufsYPkEn/ZOrzMSuEn5o0O6f8GFs+m4Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:31:98:af:3f:37:44:f9:5a:4d:cf:68:9b:7d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Mar 26 05:00:45 2026 GMT
Not After : Mar 27 05:00:45 2026 GMT
Subject: CN=41915dc4828916b426717f0b435a23244ce2970e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:9f:ab:20:20:41:d4:49:ec:fa:fd:47:6a:
c4:45:64:6a:54:6d:fe:fb:8c:49:6d:67:a0:34:a5:
eb:a5:00:68:22:06:a8:7a:17:24:02:69:6b:e8:d0:
85:dc:00:54:72:79:04:41:35:96:54:7c:37:5f:e8:
32:bf:c9:a3:f0:da:e2:9b:d3:b5:db:cd:be:32:95:
17:8a:ac:17:3b:08:8e:18:dc:0e:17:7a:f2:44:e9:
45:52:3b:26:7d:63:e0:a5:74:e5:d2:94:b9:01:82:
4d:63:7f:c9:8d:5b:44:10:b2:2b:3b:f9:b7:96:4e:
5e:2b:29:d1:e2:d4:b0:95:47:62:94:fc:dc:69:0b:
63:66:f4:92:9a:a1:d7:e4:d4:89:d2:fe:1b:57:c4:
d5:8b:fa:57:a2:e3:ed:06:ba:0e:5d:0c:b1:0a:67:
95:32:90:91:88:a4:c8:6f:33:ee:bc:17:f3:6b:86:
f4:9d:28:c1:9c:fa:4c:7e:15:19:d9:a7:19:1f:d3:
26:8f:d2:ad:3e:65:c1:a8:61:64:6d:bc:1a:76:75:
cc:d0:65:ab:d8:4f:68:b3:6d:bb:76:f3:0f:27:46:
e9:d0:0e:85:47:34:e5:8a:11:3f:3c:1a:39:cc:16:
1d:f6:1f:fb:5e:75:5b:4f:c5:2a:2d:61:bb:47:f1:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:91:5D:C4:82:89:16:B4:26:71:7F:0B:43:5A:23:24:4C:E2:97:0E
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:94:f8:bc:0d:7f:5c:31:2c:c1:e8:bb:21:53:e7:a6:ee:f8:
e7:cb:06:ad:60:cd:46:00:9f:6b:2d:05:d0:ee:38:33:51:3f:
07:3d:83:95:7a:63:59:03:bb:94:03:7e:b4:92:f9:66:ef:cb:
40:3a:40:22:2d:68:57:fc:a9:f0:90:f2:f7:db:a4:a1:67:f7:
f9:16:78:c0:24:e6:30:57:44:f7:8e:a5:ec:14:d1:f6:bb:9f:
6e:bb:d0:12:9f:75:72:48:fc:4b:27:4a:8a:2f:35:9e:52:ff:
d6:07:c5:d5:ee:bd:30:09:cc:61:2d:e8:9c:cd:69:3a:a1:fb:
6f:aa:ce:82:50:b4:c1:a6:41:e8:e0:bf:1f:34:3e:23:7f:0d:
99:df:9c:db:6f:36:28:63:fc:22:44:64:9b:e6:cb:bd:f2:6b:
c4:16:29:1e:74:3b:39:f8:f4:67:cd:7f:59:4c:0e:ad:44:ef:
99:04:5d:05:26:5a:d8:3c:c4:f7:31:e6:08:33:5b:5d:0b:99:
4f:13:1d:e6:c5:14:2d:11:b5:b7:f2:bf:17:35:f6:db:83:13:
91:c2:1d:88:d3:7b:a9:f8:22:55:9f:9f:3a:a1:45:85:8a:37:
fa:29:28:6b:a2:fc:b7:9e:6b:d4:b3:b3:dc:a9:97:d2:04:0f:
5a:4e:29:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:45:18 2026 by rpki-client