Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: 6/THftOgALdYhvmQoq5DwW2YaD2aRDptgkKZZmjWG+k=
Subject key identifier: D0:01:32:36:B3:C3:EC:79:68:1A:CF:0A:DF:39:21:9D:F5:38:F0:57
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 019D26CD7AF647DFC1A85A1973AB5F7F1D96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 1385
Signing time: Wed 25 Mar 2026 21:01:33 +0000
Manifest this update: Wed 25 Mar 2026 21:01:33 +0000
Manifest next update: Thu 26 Mar 2026 21:01:33 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: ZNRP8WgnJRRhs7XGMrKczkKg9VNN4Dxe5iJqh3z1hNY=)
2: 5BcZMkFK4H4HzeU32Pg9Et5_SQ8.roa (hash: yDr7OimE93R5A5WQDfIWvLQYnSnCYBj7r4S1yWKb1hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:7a:f6:47:df:c1:a8:5a:19:73:ab:5f:7f:1d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Mar 25 21:01:33 2026 GMT
Not After : Mar 26 21:01:33 2026 GMT
Subject: CN=d0013236b3c3ec79681acf0adf39219df538f057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:10:c7:b6:5e:0d:d2:7c:e5:e0:33:bd:83:61:
7f:ab:8e:6b:ed:bd:03:73:d7:a1:6c:9d:64:75:8d:
8b:e2:8f:ae:4f:3e:95:0d:17:74:17:4b:a9:57:51:
34:29:70:2a:99:39:02:47:91:aa:6e:2a:0e:92:e7:
21:7b:01:c0:b0:64:21:ed:75:0f:39:da:28:96:26:
e4:96:03:be:72:9c:77:e0:37:2a:98:73:fa:5e:07:
82:f4:3c:86:93:b9:0f:b9:e5:49:c4:d6:39:ad:f3:
cc:28:b6:78:5e:94:0c:80:7a:20:6d:9e:da:ca:31:
cb:7d:06:1c:6c:18:d6:d6:5f:7a:13:0a:b8:5f:19:
cb:ab:99:5b:ce:cd:de:f2:c9:df:b9:67:3c:0d:92:
cb:e8:25:04:14:4d:37:df:84:eb:f1:74:de:a7:17:
96:5e:2a:c2:b5:ad:d0:41:bc:a5:2f:88:62:0a:63:
e3:c5:5f:db:dc:fc:4e:a2:65:2c:da:c5:4f:b2:52:
a5:93:3f:0e:39:13:ba:4a:e8:7b:fa:93:03:94:ca:
69:43:16:1e:f6:4e:7c:e3:dd:26:b6:2e:27:7f:bb:
4a:83:b9:52:c8:2c:c6:ae:a3:b8:0a:7e:49:07:41:
c1:a3:5c:80:3e:4d:47:53:4b:b7:e6:d1:93:2f:23:
8f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:01:32:36:B3:C3:EC:79:68:1A:CF:0A:DF:39:21:9D:F5:38:F0:57
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:aa:a0:9d:a1:08:b0:eb:ee:ca:31:4d:a8:8d:27:5f:4d:95:
8c:67:1e:99:86:d9:28:82:01:cf:e6:8a:d4:24:8f:fe:65:f9:
f9:8b:cc:12:75:8d:8e:82:83:03:79:0e:97:88:4c:00:5b:18:
ff:b7:42:5a:a7:d6:1e:da:45:20:85:2a:c9:d2:4c:e9:35:24:
d6:61:2c:ac:58:fd:90:e5:e0:26:21:c8:51:e5:c5:75:27:03:
7b:ef:7d:11:6c:3c:a6:8c:72:24:46:bf:06:dd:47:7f:06:a5:
6b:3a:df:4d:a5:35:34:fc:c5:10:bd:0a:00:02:db:91:f4:32:
5e:8d:ac:03:33:c0:1e:fb:56:82:3e:ae:37:ea:24:18:b0:14:
6b:21:07:de:d2:bc:3c:70:38:ae:28:86:b7:86:e4:ee:d4:d7:
a3:ab:58:c2:51:70:10:30:f7:8f:ee:f4:a5:40:68:ab:76:71:
14:55:65:30:a1:76:a8:2f:3e:5d:b2:2b:5b:c3:7c:ef:67:76:
04:a0:e5:04:21:d1:26:6c:b7:64:ee:ef:95:ef:d6:74:d3:ac:
9f:96:9e:53:2e:58:36:2f:78:6c:36:50:72:d6:06:1a:2d:f4:
a1:c3:ad:a1:a4:67:16:84:c2:6f:b9:7b:38:cf:1a:e0:6d:3b:
bf:dd:3e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:31:14 2026 by rpki-client