Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: kLnbiliqk0bB2dkgIdnRF8yzHvmHiv6RU8LST3O8N4w=
Subject key identifier: 55:79:8E:81:1A:97:05:72:E9:2C:C2:6A:A8:5A:F5:3D:7C:6F:57:0C
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 019D29608E724EE7568021C2CB538CD1D3B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 15DA
Signing time: Thu 26 Mar 2026 09:01:26 +0000
Manifest this update: Thu 26 Mar 2026 09:01:26 +0000
Manifest next update: Fri 27 Mar 2026 09:01:26 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: MqGCTnIjKl8OHo5GxJyvRzBvOgWB5gTDeVH1BFDZsxY=)
2: ZFPsdpNLJ5l0WxKp0MW2ehft5Vc.roa (hash: 9gNaT5xTEshkzEjpFa3J0fv6CbE+hBJqY5VddI2BOX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:8e:72:4e:e7:56:80:21:c2:cb:53:8c:d1:d3:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Mar 26 09:01:26 2026 GMT
Not After : Mar 27 09:01:26 2026 GMT
Subject: CN=55798e811a970572e92cc26aa85af53d7c6f570c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:31:ec:de:66:9a:e7:b4:e0:34:32:70:e4:69:
82:a1:eb:e5:7c:a6:01:79:95:d4:36:91:2f:61:82:
88:c9:fc:32:d1:6b:d7:91:65:0d:eb:25:78:6a:46:
cf:e4:04:4c:e8:2a:f2:7d:16:e8:f6:76:ce:7e:25:
c7:41:52:13:70:2e:a0:03:03:86:a6:28:81:75:88:
7a:da:b1:5e:9a:9b:d7:55:43:0a:94:73:25:8a:eb:
bd:23:ab:54:eb:7b:06:64:c7:d2:1b:f0:e0:82:34:
45:97:ae:2c:b2:1a:34:55:1a:9c:a2:0c:10:a4:c2:
f7:ba:f1:02:82:8b:33:17:39:fb:67:35:86:bd:8f:
12:48:66:4a:d7:5b:57:b8:33:33:65:7d:d2:50:9f:
93:93:b1:8b:1d:0d:1a:0a:1a:b1:82:0e:f1:b7:e2:
3d:25:af:0e:eb:72:ae:42:2e:7a:23:f0:6c:86:31:
ae:a3:c0:f1:8f:96:e7:b0:0d:29:ac:9a:f7:8e:7f:
7f:3a:e4:d7:dd:aa:7b:84:0e:3e:07:90:a4:46:26:
b4:a8:a4:3e:1f:e8:42:fd:ce:99:b6:bc:99:be:bf:
b8:2a:cd:93:e9:47:9b:7c:df:4b:6f:2d:e5:4f:9c:
a5:fe:61:aa:a8:bd:77:5b:f6:89:9b:ca:77:d6:80:
03:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:79:8E:81:1A:97:05:72:E9:2C:C2:6A:A8:5A:F5:3D:7C:6F:57:0C
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:b8:83:b3:cc:f0:9e:94:16:7f:05:c9:44:9b:b6:1e:ea:83:
99:3b:79:41:28:cb:82:0e:9b:e3:73:a6:e5:70:5f:1b:21:70:
bb:c1:72:3e:cf:55:ac:76:77:d0:3b:0b:bd:d8:50:2c:54:62:
b5:3e:56:8a:db:63:54:ef:81:6a:58:74:a8:db:90:68:ab:0b:
19:d0:4c:db:19:7b:c2:be:d8:aa:53:72:b4:21:14:37:0e:0c:
6d:c0:d7:4b:c6:04:da:fc:bd:86:60:0f:6f:0a:ed:bd:4b:d4:
ff:04:28:73:a9:80:d8:22:8f:4f:8e:94:f2:a6:02:80:c6:44:
ca:1a:09:3f:e6:fb:30:f6:d8:40:ca:ad:72:32:66:c2:4a:eb:
38:6e:a4:ab:0d:b3:55:f6:dc:b9:f8:7f:1d:7f:5f:2e:d7:46:
bd:33:0f:4c:c1:7f:72:23:cc:c7:60:e1:13:4c:11:1d:dd:78:
7d:c0:ef:f6:e1:31:34:a3:4c:f9:0f:9f:9e:1a:9d:9b:44:cc:
0c:f8:16:7e:08:dd:d4:3d:cc:3c:a5:b8:42:17:96:ba:44:fa:
81:4f:87:fb:ee:f3:07:6b:3b:dc:c4:0a:be:ad:21:f5:b8:66:
f7:86:c5:73:49:14:2f:b0:c0:9f:b2:57:b2:15:15:19:f4:b4:
b5:3b:c6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:09:03 2026 by rpki-client