Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
File: 4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft (raw, json)
Hash identifier: OfsbK13ceq3UYbfcg2aeTjnsET5InO2k4Gw/SEtRHPU=
Subject key identifier: A0:40:DC:B7:74:D5:7E:7B:1B:50:E0:45:4C:7A:15:70:79:B9:B5:94
Authority key identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
Certificate issuer: /CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
Certificate serial: 019D254C296034550712F3F18936114FD845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
Manifest number: 021D
Signing time: Wed 25 Mar 2026 14:00:41 +0000
Manifest this update: Wed 25 Mar 2026 14:00:41 +0000
Manifest next update: Thu 26 Mar 2026 14:00:41 +0000
Files and hashes: 1: 4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl (hash: DjgK2B6ihz0LYK7wdKexgUo9RJMj5hYRLRV1HJLa0mY=)
2: LhVZpnJRBB7NrSzWfHHBJ2SG6bU.roa (hash: R8R2deH4wzpQeZtkxO49MWL5HlgBcEV1PZ5wfpJUweo=)
3: dEyl1wRLwZD53oaixGSnEJouVpI.roa (hash: GpR9gkiY/09kNYwh3uLXbfU1LJkTwOBwOzQDnF7Ik84=)
4: hFB_f-BZ_am25TGtg-kLEdIlptA.roa (hash: NoOMHYbmu75DUl11Vo7jX7dGF5BWLAYsxu8ojOU01yk=)
5: lLg_J9YIGk9Bx5020VMchGBjT28.roa (hash: z6BgfhJ3Bk6vD4wjFGLuDISYOvDfTRG5fR6HJauBSGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:29:60:34:55:07:12:f3:f1:89:36:11:4f:d8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
Validity
Not Before: Mar 25 14:00:41 2026 GMT
Not After : Mar 26 14:00:41 2026 GMT
Subject: CN=a040dcb774d57e7b1b50e0454c7a157079b9b594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3f:69:f6:c6:65:18:8e:23:66:8e:63:56:e6:
9b:61:f7:31:ba:f6:3b:ee:fd:8e:b6:76:f2:03:09:
74:b7:b1:13:1e:e3:ea:c6:11:03:74:ac:d4:54:fe:
87:ce:33:94:0e:1e:68:b8:e6:e9:00:8b:92:61:d6:
55:94:b3:c9:60:7b:02:70:0d:41:18:fe:4e:ab:c9:
d3:7d:83:2d:b1:2f:d2:12:c0:da:2a:4d:db:a9:c8:
7d:39:e2:f2:ad:f1:54:52:18:85:68:57:7e:f1:20:
24:ff:9d:3a:2a:5c:43:6f:47:70:40:fb:62:0a:bf:
9e:7a:9b:76:c0:10:9f:16:c2:78:25:31:67:d2:37:
70:04:c5:81:e8:82:30:ef:47:9e:e7:97:c7:8a:a6:
7c:b7:b5:c3:66:04:3f:3d:73:dc:73:01:0e:8c:7e:
c3:67:ab:41:eb:1e:7f:1c:d5:4d:48:7e:93:20:03:
58:fa:e5:ae:d5:b5:fa:a3:98:4c:b1:64:2b:1a:20:
e5:56:d7:0b:ea:11:63:fe:e8:6d:b9:9d:88:af:f3:
a0:4a:20:18:ba:cf:2a:35:ac:93:4f:19:7e:2d:62:
60:d0:2d:bd:2d:56:bf:b9:fb:61:94:9f:30:71:c3:
65:16:60:3e:30:24:50:bb:43:bd:c9:99:ed:1d:02:
33:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:40:DC:B7:74:D5:7E:7B:1B:50:E0:45:4C:7A:15:70:79:B9:B5:94
X509v3 Authority Key Identifier:
keyid:E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:9f:3a:b3:60:9b:05:9c:08:37:d5:d3:47:85:f7:ad:c9:2f:
a6:4a:5b:1a:2b:40:0e:2f:d1:a8:76:aa:aa:98:17:2b:b6:19:
27:72:76:e5:f4:5b:24:08:d1:9b:3c:03:ee:47:c3:4a:37:7e:
06:b6:f3:f5:d2:33:0d:86:6e:f2:3a:26:ea:cf:52:c8:8c:ea:
ef:2f:10:77:d2:64:fc:aa:c5:18:62:4c:27:ba:75:50:0c:29:
59:f3:39:97:1c:54:d2:f6:e9:f0:5a:30:c1:6b:2e:62:c4:60:
17:ed:e4:9c:1d:c2:5f:cd:c6:77:6d:79:a0:8a:52:9d:b7:23:
22:9b:8c:f5:8c:15:14:43:f7:4e:d9:b4:63:7b:9d:d0:47:7b:
09:de:64:ee:03:3c:19:ef:df:19:26:c7:03:4e:b6:a7:59:18:
57:fa:db:7c:9b:a5:64:1f:31:5b:24:c3:7c:8c:47:e7:f8:75:
c5:38:92:a9:7d:7c:42:ff:a4:3d:28:b8:de:0d:0c:7f:6d:5b:
c4:5c:43:2a:24:02:1e:b2:5a:e0:c0:3c:bc:20:48:ee:6a:c1:
c0:47:8b:98:cb:6c:76:29:c8:39:fe:2b:e9:f0:a0:0b:0b:07:
f6:61:be:08:5e:be:12:16:c8:aa:f5:57:42:c3:5d:50:a5:84:
a9:6f:57:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:52:39 2026 by rpki-client