Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier: 1roxyh6x42+RqGJksKvf3eAsPCv35VAYHUzRtAStSsU=
Subject key identifier: 65:50:53:0A:A9:28:B9:96:C8:9F:28:F0:FB:B6:5A:0F:30:EA:31:A9
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial: 019D24DEC4F44D72FCD0A6F4291973545951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number: 0C71
Signing time: Wed 25 Mar 2026 12:01:12 +0000
Manifest this update: Wed 25 Mar 2026 12:01:12 +0000
Manifest next update: Thu 26 Mar 2026 12:01:12 +0000
Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: E8HxFSvf0C18YiZOGgUQ4n2It7Tjkb8u05AhsResRkY=)
2: j_t_jFAta10RI31T6FonCloC3D4.asa (hash: Omact/OG1Vjza6tNA6dIAQIik0sg+Ex+j9k7Zm7x4yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:c4:f4:4d:72:fc:d0:a6:f4:29:19:73:54:59:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Validity
Not Before: Mar 25 12:01:12 2026 GMT
Not After : Mar 26 12:01:12 2026 GMT
Subject: CN=6550530aa928b996c89f28f0fbb65a0f30ea31a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a7:9c:d9:b0:aa:80:e3:31:5b:d5:10:46:14:
18:ad:37:21:97:fc:51:c9:f0:a7:18:e4:29:f6:fb:
ed:e5:8d:bc:e4:b0:52:f6:53:04:71:98:32:71:8f:
7b:04:1c:42:47:dd:da:17:31:77:a3:ea:5e:6a:6a:
7b:62:bb:41:ba:c7:b7:a5:d5:7a:ad:b2:b5:96:ba:
44:fe:d3:d9:cc:6a:ca:9b:67:be:a2:14:98:72:88:
18:26:b7:b9:2f:bd:5a:ac:f3:a9:b1:1f:01:6d:48:
b0:f6:b3:0d:2e:90:96:f3:64:fe:be:ef:f0:80:9a:
cc:23:3b:54:e0:d6:ab:10:d9:20:99:03:0a:b6:97:
32:92:0c:ae:0a:c6:c4:87:92:66:96:de:86:52:7a:
d4:0e:da:ec:21:9d:dd:08:92:3d:d9:48:46:17:72:
73:22:9b:5f:81:14:a6:0c:0e:d2:41:2e:b9:d9:fc:
a3:c4:9d:14:52:ef:ff:9a:a0:a4:6f:c1:aa:40:e7:
b3:57:8c:fb:17:d6:24:c2:52:a0:02:43:57:65:7f:
c0:42:4e:96:8a:58:b4:2a:0f:7f:e3:77:ad:63:a8:
d5:8b:a4:1a:81:9f:dd:0e:40:b5:26:d5:b0:35:2c:
72:0b:00:f5:54:b2:09:cc:93:fe:06:e8:5f:42:cc:
08:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:50:53:0A:A9:28:B9:96:C8:9F:28:F0:FB:B6:5A:0F:30:EA:31:A9
X509v3 Authority Key Identifier:
keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:68:98:23:bd:2e:d1:30:7a:42:f5:45:b1:7d:5d:de:4a:e4:
e9:26:b0:d9:19:87:f6:b3:90:56:1c:49:b3:2b:66:a2:ea:f3:
eb:c0:be:bb:6c:e1:62:8b:9d:c1:5b:f5:ef:98:e7:39:7a:2c:
93:f8:5c:6f:3e:6c:e7:7c:77:06:58:9b:e3:2e:8a:0c:07:4b:
a6:72:3f:d2:0c:09:4b:89:84:25:e1:4c:b3:0e:cc:03:df:99:
7b:f9:c6:af:94:7e:dc:29:04:8a:52:9a:70:ef:f9:dd:d9:91:
ef:8e:84:46:86:15:cd:fc:9f:93:32:a4:14:2f:35:12:6f:15:
f7:c6:ab:6f:84:02:a1:b5:7b:3a:0e:79:5e:1f:a3:db:f8:7f:
11:0d:8b:f2:d0:c2:66:93:e1:61:61:65:05:a9:ae:6f:96:00:
41:59:9e:4f:0f:88:b4:a7:12:e1:89:d0:66:08:a3:9c:dd:fc:
e8:bb:2c:3f:5d:78:8a:10:9d:07:9f:5f:47:ba:16:d4:7e:59:
29:2c:f6:6b:15:99:3e:31:85:4d:e3:7b:b7:6a:85:fb:ac:5d:
4a:30:42:eb:b0:00:60:53:b7:a9:72:ac:8c:33:69:e7:9d:e8:
e7:bb:3d:c9:6a:3d:5a:9d:21:77:5c:3f:fa:42:43:2f:ba:d9:
2a:b9:d0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:39 2026 by rpki-client