Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
File: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft (raw, json)
Hash identifier: MS+BO/ruRuq6Jd9Q7LhOEBIWya1I2T9vPb3+4pho4GA=
Subject key identifier: BC:A3:83:43:CB:B4:7E:6F:99:B9:E0:15:2C:9C:38:50:B3:79:2C:34
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 019D28845D68995F327082C3B18C20BE3C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
Manifest number: 1887
Signing time: Thu 26 Mar 2026 05:00:56 +0000
Manifest this update: Thu 26 Mar 2026 05:00:56 +0000
Manifest next update: Fri 27 Mar 2026 05:00:56 +0000
Files and hashes: 1: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl (hash: IZF1t1md69wSLTyOjQy8w0Lr2lT9LN6d2XgK1tXekxw=)
2: Xw8MVRQJpk47EKjQkBC2UTNVzic.roa (hash: 8j4isUf9xLJyeuJnVvuAvOsNA+t8iB00CcKI1JNi3Vg=)
3: qpReQJ4ra9EFepoIvfI-wRbEIOI.roa (hash: rfltCZyFcGQYfJJgi8SKKMqLHfq7fdrz+C8KH3BEHFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:5d:68:99:5f:32:70:82:c3:b1:8c:20:be:3c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Mar 26 05:00:56 2026 GMT
Not After : Mar 27 05:00:56 2026 GMT
Subject: CN=bca38343cbb47e6f99b9e0152c9c3850b3792c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:22:94:b5:e3:2c:20:4f:8a:5a:bd:44:60:
bb:7b:46:64:cf:2a:bf:6a:dd:0e:5b:54:4b:d6:d9:
65:9c:23:98:fa:2f:78:78:22:83:1e:7d:d1:f3:8b:
2f:74:c7:47:5e:0b:f9:3c:2a:85:27:2d:1a:ed:0d:
32:4f:f8:03:66:85:09:57:98:43:b2:09:4b:8e:f1:
a0:93:0c:47:69:2e:79:c2:07:24:80:0b:a3:48:36:
4d:c1:15:ce:46:3d:79:aa:28:4b:1e:92:f1:a8:9c:
4a:d4:bc:88:6e:e6:a4:5d:40:fe:92:78:b6:9e:37:
8e:28:ff:04:19:cd:80:c9:ad:0a:4e:37:65:06:61:
60:e0:ee:5b:32:b6:18:12:bb:ed:8a:67:2b:19:f6:
42:00:78:55:f4:09:e6:0d:6f:d0:cc:84:97:bf:1e:
3d:57:8e:b9:fb:89:5b:40:3e:86:97:15:73:1a:72:
fa:62:bb:e9:47:c7:95:4a:3d:6a:05:81:b0:9b:db:
07:a7:e1:20:28:7d:49:9e:94:5b:c0:2f:52:c1:86:
80:6f:c0:2e:80:e2:9a:2d:9f:47:ef:b1:1a:92:95:
fd:a6:6e:38:33:8d:59:82:f6:ea:51:26:e6:f8:1e:
32:0b:0b:bd:9e:81:39:0f:a3:48:19:0e:58:bb:d2:
89:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A3:83:43:CB:B4:7E:6F:99:B9:E0:15:2C:9C:38:50:B3:79:2C:34
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:8a:2c:63:aa:8a:92:fd:42:e1:ca:d6:92:42:9f:23:fa:6f:
a8:35:ff:55:6a:55:56:04:22:5f:c4:e7:8b:c2:4d:43:53:dd:
54:8c:16:fd:d2:84:66:b4:71:92:a0:c2:5e:d7:fc:09:e6:13:
c1:c9:fb:a8:cf:4f:ed:35:b5:05:07:2d:2d:0b:4b:7b:ac:8b:
70:b5:61:61:ab:d8:35:80:ed:c3:21:77:6a:81:80:f2:70:99:
99:5b:ad:66:df:70:d6:6a:00:9c:e5:cf:45:11:cc:a6:a7:8d:
a8:23:e3:cb:ee:3a:dd:27:a7:7f:c4:72:14:58:f1:38:d1:52:
43:a1:22:3a:00:29:00:25:b2:20:8c:f1:e4:95:a0:37:44:22:
4a:5f:d0:b8:68:7d:d3:2c:1f:13:9d:7b:cf:58:49:4f:fe:d4:
fb:69:cf:c3:3c:ce:5b:95:6f:5c:c7:a7:cb:86:6f:10:cb:3c:
7a:08:d0:ad:97:5a:7a:b3:b6:74:ee:29:8a:71:b1:ce:3c:64:
01:0f:14:09:6b:ec:2b:43:56:84:89:a4:f5:8b:f9:42:83:d6:
34:b8:dc:f5:4b:df:fe:c8:dd:77:6e:64:b2:1c:a3:63:6b:b0:
a0:8a:08:ce:7d:6c:0b:98:b4:3b:a3:16:39:6d:e4:73:0b:ba:
6b:de:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:28:27 2026 by rpki-client