Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier: wZRIHYZDXcEIyCfzZqCLM2cz5ci4VUlcNpvF6IM8pK4=
Subject key identifier: 01:0A:77:14:93:D1:BA:57:5A:1E:5F:15:4D:3A:EA:F1:C2:92:8C:AA
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 019D29CEB31404B484D73CE221C60EFA598C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number: 0B0D
Signing time: Thu 26 Mar 2026 11:01:45 +0000
Manifest this update: Thu 26 Mar 2026 11:01:45 +0000
Manifest next update: Fri 27 Mar 2026 11:01:45 +0000
Files and hashes: 1: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: e9A42d1A3Taw6NPyveU4Qsy5ZC5wWwYl3Id3TUQ0QCg=)
2: 5F_Lv04RXNd_Y46Aej2XB7OXRCs.roa (hash: OFOrOgL1BwCDJs6vNTJlxJXJgyRTHA3y/UE7TO8d/LM=)
3: oil7N-Cu9Bp_DmPdE_j9IZL0Ozo.roa (hash: sJuR4lvRXMBU3fcQ7PumT3oOEz1g58/Vsv/QWac8Orc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 11:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:b3:14:04:b4:84:d7:3c:e2:21:c6:0e:fa:59:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Mar 26 11:01:45 2026 GMT
Not After : Mar 27 11:01:45 2026 GMT
Subject: CN=010a771493d1ba575a1e5f154d3aeaf1c2928caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:4a:e1:73:9e:4c:7e:2f:a7:3a:a3:c3:82:
c5:ad:24:7a:b7:02:05:89:b8:9a:61:6b:d9:1e:64:
18:53:c8:be:b4:8f:6d:fe:3d:d8:cc:87:a4:eb:e2:
f9:16:96:99:0b:51:7f:10:70:d8:a3:bd:4d:ad:b4:
2d:2c:cc:a7:29:90:09:0a:86:4d:91:af:81:29:c7:
27:89:40:ff:a2:05:1a:1a:8d:57:91:e6:f1:dc:35:
b2:87:2a:2d:2c:b0:bc:45:05:8f:1e:5c:29:f8:75:
84:c0:77:3b:c1:8d:0a:67:6a:c0:16:08:13:33:e0:
99:a7:cb:5f:18:bd:5f:d8:6e:0e:30:5d:5d:8a:09:
04:77:20:0c:57:b0:44:8f:c0:6b:ea:fb:c4:d8:47:
af:a3:54:fb:ec:62:5c:e1:7c:f0:a4:be:44:44:ca:
1b:7a:b4:2e:02:c1:48:96:c1:a5:c0:b8:10:3c:74:
fb:4f:90:c0:ca:f4:7f:b5:2d:9b:9d:2b:1a:d0:87:
ed:73:75:8c:7f:9d:34:a4:57:1c:33:97:c4:0d:83:
f6:3e:13:5f:4e:09:59:ae:ca:4e:af:ba:23:95:0f:
4a:ed:71:c7:5d:cf:22:24:77:5f:b5:17:42:c6:bc:
87:e2:01:05:a5:21:20:92:82:02:aa:5d:f4:56:2a:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0A:77:14:93:D1:BA:57:5A:1E:5F:15:4D:3A:EA:F1:C2:92:8C:AA
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:77:ec:b3:ce:72:98:92:ca:f4:2d:42:30:cb:37:2f:24:20:
9b:f2:17:07:fd:bf:16:a0:e1:6e:ad:e3:f9:73:90:73:84:b5:
05:f0:a1:91:2e:9b:bb:fd:d9:9a:c9:f1:3f:bf:d7:a8:8f:86:
d1:39:2d:4b:2b:03:86:9b:14:51:ee:1a:8a:28:32:67:fa:75:
e9:41:42:4d:02:a0:13:43:5c:b8:c7:b6:fc:45:0e:17:d9:ec:
99:d5:81:00:3c:c6:8c:78:cf:db:64:a2:7e:a9:40:c8:e1:f5:
cc:1b:77:02:04:23:e3:f7:33:ee:0a:72:4e:05:23:e1:25:9f:
32:3d:c6:a4:f7:47:33:74:3a:e7:ba:ba:37:9f:08:d0:e7:a5:
0f:0b:19:b4:2f:b1:e5:a8:93:2b:e2:86:12:37:0e:9c:9a:74:
6d:c3:10:ae:b4:a6:1b:b9:6a:56:fa:89:c7:ac:48:59:fc:7e:
03:5a:4d:82:e0:bf:a1:bd:3c:54:b9:ce:ab:43:ac:16:2c:49:
50:be:ea:86:5c:8d:27:65:2e:92:f5:19:1a:85:c3:5b:67:7b:
f8:28:b6:e6:d0:04:0b:a9:11:03:c4:fc:ea:cb:02:2e:35:1b:
9e:4b:44:99:b6:29:02:0d:83:d0:0a:fc:ce:61:2b:be:59:9a:
a8:e2:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:58 2026 by rpki-client