Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier: zMmBoKvrA4Spx0u2AELtiQuwn4CKI9KCL+TemgkNiRc=
Subject key identifier: FB:EA:F1:09:C1:C8:CD:D2:58:A9:40:3A:A3:9A:32:17:AA:72:34:42
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial: 019D265FE5475FD0F884631D922573539A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number: 0CB3
Signing time: Wed 25 Mar 2026 19:01:51 +0000
Manifest this update: Wed 25 Mar 2026 19:01:51 +0000
Manifest next update: Thu 26 Mar 2026 19:01:51 +0000
Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: 6SQIMd6E/+G5cVRjwGhgf2L+28UtZPNnlBiKqWkDj5k=)
2: xtYobtIx2W6_g9SOOJPQhPICYpQ.roa (hash: mB2srtxC3TvgB8CL9USorDjZQ7e+W7OquH6xXCy/qr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:e5:47:5f:d0:f8:84:63:1d:92:25:73:53:9a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Validity
Not Before: Mar 25 19:01:51 2026 GMT
Not After : Mar 26 19:01:51 2026 GMT
Subject: CN=fbeaf109c1c8cdd258a9403aa39a3217aa723442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:98:6d:20:e3:a5:88:7f:4e:cb:bc:a0:41:
ac:98:6f:53:77:df:76:e5:7a:d3:42:2f:c2:82:b4:
68:01:b8:c7:6d:0e:2f:ed:a1:68:ab:02:b2:6e:ee:
df:da:0c:ed:d1:c2:cf:68:6b:9c:f3:64:93:c5:14:
c1:a7:17:32:be:91:3b:1e:db:4b:f0:e4:52:91:14:
cb:2c:33:eb:a6:5f:4e:ba:e9:c5:ee:48:da:2c:25:
c4:b1:b3:6e:9c:7d:59:8f:39:b8:5d:98:e5:f3:60:
3b:c6:95:c7:80:a5:8c:f3:54:30:a4:9c:2f:87:e2:
56:25:04:64:00:68:33:6c:70:a6:75:f0:af:ee:c0:
56:73:43:d6:66:d2:fa:c8:4f:05:9e:97:d6:4a:b7:
af:c4:e4:77:21:89:64:83:73:ea:e9:b6:c5:eb:de:
c1:14:91:68:e2:0e:3c:af:b0:73:f7:0a:75:35:b5:
61:c7:97:02:57:5f:de:96:b8:59:e4:ba:ea:35:17:
fe:bf:da:fe:e1:ea:b7:cc:07:46:81:ed:6c:bd:63:
ad:77:e3:74:b2:4b:9a:b5:b5:96:6b:7e:d7:b1:89:
b2:15:cf:4e:fa:ac:cb:f9:a1:d9:63:29:17:d5:6e:
1a:b8:bc:0e:e2:e2:a3:64:9a:0b:74:00:e8:9c:f4:
ae:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EA:F1:09:C1:C8:CD:D2:58:A9:40:3A:A3:9A:32:17:AA:72:34:42
X509v3 Authority Key Identifier:
keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:de:4b:b6:b5:72:45:cc:f5:21:e4:c9:22:d0:7f:12:66:64:
af:17:b9:37:0f:b3:0c:a8:40:c5:92:fd:9f:ef:b7:0c:bb:e0:
1b:d9:11:4b:cd:d6:9c:db:c7:d1:9f:d4:fb:06:25:ca:a4:9d:
53:cd:2e:2d:fc:5f:58:ca:ca:9d:60:0d:f0:cb:07:fd:55:db:
bc:32:5c:e4:af:28:f6:ec:ff:99:b9:31:82:e0:1f:ca:6f:ed:
29:53:3e:bd:9b:10:a6:d6:09:34:d3:12:83:86:81:a6:f9:cb:
4f:4c:9d:25:fd:66:39:35:f1:46:01:d0:9b:70:da:56:68:c5:
80:0e:85:36:95:bb:08:65:20:33:ec:81:4c:ba:9d:58:b7:38:
28:7b:61:45:fe:17:39:94:1d:88:63:d8:32:c1:0b:23:b4:45:
b5:1c:4c:43:9d:2b:ed:fa:d1:86:de:d8:a9:50:c5:e9:d8:10:
f1:4b:4f:54:14:34:16:ec:1b:34:b4:aa:7b:65:53:93:f1:d9:
ce:9a:d4:3c:24:c1:ff:99:5b:92:09:a7:e4:81:43:24:3a:bb:
db:b4:e1:38:10:14:53:e8:ef:a8:ea:57:92:7b:64:f8:1b:80:
cc:9f:09:fd:98:bb:df:9a:ef:a2:e9:4b:f6:17:53:4c:97:18:
ea:30:d5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:32 2026 by rpki-client