Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File: 4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier: xayAAyXy5cYdW4gOr1llDoGiIpT+R498fTUbmcRkmmU=
Subject key identifier: 65:0B:F7:4A:46:2B:AF:08:9F:24:09:9A:A5:E5:AB:EA:EE:D2:73:14
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 019D2AE07D65E91BDBA757AF92F82ECFAA3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number: 04EC
Signing time: Thu 26 Mar 2026 16:00:48 +0000
Manifest this update: Thu 26 Mar 2026 16:00:48 +0000
Manifest next update: Fri 27 Mar 2026 16:00:48 +0000
Files and hashes: 1: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: Fl80enToDkV5NNYiloE6+g8TI/+s+nwLexDjihUpJXs=)
2: lmDwmz-GtyiaNLLugK40qWh_h8s.roa (hash: v9wEGxooeJNf+ZcLBoaKH/aJqtCxaC4olgQz9drbKc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:7d:65:e9:1b:db:a7:57:af:92:f8:2e:cf:aa:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: Mar 26 16:00:48 2026 GMT
Not After : Mar 27 16:00:48 2026 GMT
Subject: CN=650bf74a462baf089f24099aa5e5abeaeed27314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:e3:5d:7d:12:de:80:c9:71:a8:c7:e2:4e:
f3:83:18:69:57:99:70:6f:0e:b0:52:c9:b4:68:0e:
57:1d:77:b0:f6:b6:64:41:ba:1a:1f:7f:1b:5e:6a:
73:6d:8c:01:ea:d0:fa:43:55:16:e8:4b:87:1f:dd:
59:e5:94:b3:8d:1d:86:e0:cd:5a:fc:a3:4d:f3:50:
35:6c:9d:d6:a6:df:c6:80:63:ae:d1:33:0a:8b:b3:
ec:3a:a2:73:36:ab:9e:c5:a6:18:94:c8:19:d3:8d:
a1:3e:be:97:5d:5e:11:9b:6e:09:b9:27:74:7c:2f:
0b:75:67:cd:ea:8c:1c:b8:e0:fc:80:e1:be:9c:b4:
07:bb:00:20:4a:77:ea:e1:f8:61:85:bd:79:35:83:
1a:67:52:15:19:00:e6:4e:11:96:48:7d:9f:8b:bf:
0f:bd:e2:ca:ea:be:b4:a6:16:d9:26:06:c9:11:02:
f0:2f:fd:b5:43:20:68:4d:1e:32:fc:cd:d2:0f:33:
8d:59:47:7e:74:f5:4b:a4:bb:2b:ee:93:49:e2:5e:
77:1d:7f:25:9b:1c:6e:0d:cd:de:04:be:0d:2d:ea:
e4:e8:db:0b:44:9d:42:43:3a:f9:3f:bb:44:d2:5f:
02:13:fa:85:dc:eb:ee:47:0d:b3:48:41:14:57:1a:
31:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0B:F7:4A:46:2B:AF:08:9F:24:09:9A:A5:E5:AB:EA:EE:D2:73:14
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fa:a3:f8:62:89:03:ea:3f:65:78:59:db:d8:f6:87:51:9b:
df:66:5b:23:ed:d9:f6:e7:7c:ff:4a:0a:ff:6b:89:57:e1:1b:
e4:e8:9e:dc:46:8c:98:7f:35:0a:60:ea:25:81:ee:d7:85:64:
f3:8d:04:c5:3d:ea:11:a9:56:dc:18:e0:91:6c:c8:bb:7a:1b:
51:c1:54:2f:1f:9c:cf:3d:ce:be:0d:21:65:26:0a:3d:ec:d8:
af:5c:d3:5f:00:c9:a9:9d:ae:ed:88:c5:2d:59:ba:84:f2:73:
e3:fe:4e:6c:6c:aa:69:71:a3:c2:0c:2d:12:12:ae:d2:f9:6a:
1c:53:9c:00:42:e6:d9:24:44:30:97:1d:85:b4:25:57:09:4b:
1f:ea:39:eb:94:41:03:4d:46:d7:24:0d:a5:3e:f7:e0:84:5b:
30:b3:f6:c0:a6:ed:de:88:72:57:6f:70:8d:42:48:99:46:00:
51:27:43:8a:15:93:8c:04:2b:8f:3c:bb:27:b5:92:83:c6:2e:
7c:7a:07:be:70:4b:ca:75:5c:27:20:6a:d4:c2:b9:ca:d1:9d:
98:33:4b:7c:91:34:e0:64:fc:74:ad:f9:59:cb:37:e7:6d:f8:
b6:87:c3:10:fa:24:18:8f:79:d2:7b:7a:a9:dd:26:3f:d9:ee:
c5:f0:31:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:03:37 2026 by rpki-client