Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
File: 4McMwtIdqMLqZIFTT0jaSVqoS90.mft (raw, json)
Hash identifier: QxqCpr3SZsQa6qtZZkCtcBZJH+SMdyrR2ETRtWoBFjY=
Subject key identifier: 99:84:65:1D:45:97:10:D7:60:FE:13:80:E8:A1:8A:4A:5B:17:53:5B
Authority key identifier: E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
Certificate issuer: /CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Certificate serial: 019D27720D7874CDCF428AE5FC434E23F259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:01:19 +0000
Manifest this update: Thu 26 Mar 2026 00:01:19 +0000
Manifest next update: Fri 27 Mar 2026 00:01:19 +0000
Files and hashes: 1: 4McMwtIdqMLqZIFTT0jaSVqoS90.crl (hash: yBjTZFPwZvPK8FnptHEeUx1a6f9xAf+DFoXc/rdFuaE=)
2: Rn2NWJkYlmshYFgoPzIuXMYWVGc.roa (hash: JJzFZmd7A4HTxXMIGqGZ67CiVP4Sj1WJIj0x7HOLtqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:0d:78:74:cd:cf:42:8a:e5:fc:43:4e:23:f2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c70cc2d21da8c2ea6481534f48da495aa84bdd
Validity
Not Before: Mar 26 00:01:19 2026 GMT
Not After : Mar 27 00:01:19 2026 GMT
Subject: CN=9984651d459710d760fe1380e8a18a4a5b17535b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:78:69:03:ce:86:ce:18:66:17:9f:44:b5:
b3:c6:ba:7e:be:ce:e7:5e:a8:11:61:28:80:ac:83:
86:d5:99:a8:48:41:53:92:c6:a4:69:8c:b1:9d:f8:
0b:fd:8d:84:bb:ae:42:20:d9:d4:06:6e:6e:cb:7b:
43:10:80:7d:82:9e:5e:7d:6c:40:fd:fd:13:4c:06:
41:99:8c:e3:64:53:12:95:ec:72:19:03:2b:bd:1c:
0e:a9:0d:d0:89:ac:4b:1d:4a:48:4b:14:a9:31:68:
b2:93:ca:0a:86:7f:d8:c7:7b:76:85:1c:42:8f:bc:
98:bf:9b:b2:fc:09:e2:0b:73:16:f5:8d:de:2d:cf:
34:ac:01:b3:ca:81:18:ad:60:98:9f:62:35:26:a5:
74:b2:9b:85:f5:3a:15:96:3f:16:d7:40:ce:dd:dd:
b1:8c:28:f7:ca:28:87:77:97:75:91:7b:6c:76:1c:
a8:c0:2d:6b:a7:7b:b5:3d:5f:04:e1:f8:50:9e:3e:
61:e8:17:d6:1d:65:50:4c:4c:34:4f:c8:f7:8f:0d:
c2:d8:52:fd:a3:33:f8:40:fb:8e:a7:3b:0d:e1:80:
83:0d:25:d5:e1:70:60:30:37:2d:cf:d0:a4:6a:c3:
70:1c:ab:b9:e1:bc:6d:97:f2:82:20:4f:e1:bf:31:
31:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:84:65:1D:45:97:10:D7:60:FE:13:80:E8:A1:8A:4A:5B:17:53:5B
X509v3 Authority Key Identifier:
keyid:E0:C7:0C:C2:D2:1D:A8:C2:EA:64:81:53:4F:48:DA:49:5A:A8:4B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4McMwtIdqMLqZIFTT0jaSVqoS90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/71033c-0b6a-46e6-a5fe-329a99f0f1b5/1/4McMwtIdqMLqZIFTT0jaSVqoS90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:e2:b8:43:a5:45:22:fc:fe:2f:13:70:53:ef:15:24:f3:3c:
0d:f3:ca:12:b1:2a:30:b8:e4:6b:7d:64:32:6a:87:d8:a9:bc:
4f:35:29:aa:62:12:93:06:90:63:a6:ed:41:ca:6a:a7:64:49:
0f:40:2d:27:64:be:c8:34:51:c3:07:47:64:41:f7:08:e1:10:
a3:e2:73:be:60:a9:cb:cc:39:1a:30:9f:e4:d9:03:90:73:bc:
c2:ad:75:ff:1f:02:95:d3:b5:4b:75:8a:de:c9:9b:69:c8:36:
9b:d2:63:f5:6f:0f:08:63:1d:bd:1f:9e:b9:3c:d6:7e:44:ac:
90:af:41:d1:40:dc:4f:5d:b9:ed:b4:b7:e1:39:f5:17:82:b3:
1a:dc:3e:3b:b2:ab:b9:1f:78:ff:06:e6:d4:14:80:61:12:a9:
f5:25:69:bc:62:58:98:47:8b:72:bc:61:0d:4e:70:48:0b:2d:
f2:54:b6:8a:fb:e0:44:8e:0d:3b:f6:84:60:ef:5f:3d:38:f2:
42:98:b0:97:d6:e2:9e:63:78:fb:10:d1:ab:a9:eb:a2:1c:a8:
de:83:ee:65:30:01:45:13:cd:33:d0:67:d8:6c:04:d1:bf:0f:
0c:12:83:08:f7:00:06:25:6f:11:cf:ff:17:cf:fa:c5:bc:96:
ab:f2:3b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:53 2026 by rpki-client