Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier: XeBixnQ275A/Cx1T85g9KMtqqHHy3YAy7YFT3QlS6FI=
Subject key identifier: 47:08:19:CF:8D:58:37:B7:1F:DE:29:64:02:A3:49:6F:D9:29:D6:1A
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial: 019D2A04C23AD3E2BBF17A091C8D4571575A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number: 055D
Signing time: Thu 26 Mar 2026 12:00:48 +0000
Manifest this update: Thu 26 Mar 2026 12:00:48 +0000
Manifest next update: Fri 27 Mar 2026 12:00:48 +0000
Files and hashes: 1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: ++kJiGqAUly/YVGCW9yYK3Eii65B1hlQ8arOJUb3U2A=)
2: kAQRnXnn1bepnTjDte_6dOnnntw.roa (hash: fvCT2Eh+lUDVebIFnLuZITE86ooUogC2tmwd5l7+wO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:c2:3a:d3:e2:bb:f1:7a:09:1c:8d:45:71:57:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Validity
Not Before: Mar 26 12:00:48 2026 GMT
Not After : Mar 27 12:00:48 2026 GMT
Subject: CN=470819cf8d5837b71fde296402a3496fd929d61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b4:17:ce:5b:de:9d:0f:ee:06:bf:70:dc:39:
17:6f:9c:39:58:41:98:ea:33:05:a3:72:b8:18:56:
04:3e:55:96:04:7e:a8:fd:ca:6b:b9:92:75:93:52:
30:73:45:37:af:ed:d5:77:c0:f6:4a:b8:d0:10:fb:
31:1d:bb:29:7a:72:50:6e:42:d6:22:ec:15:51:9a:
7e:b3:83:08:fa:a5:1d:8f:bc:a2:75:0a:74:0b:bb:
47:17:cf:ee:18:e6:aa:dc:ae:83:1f:b0:40:2f:b6:
aa:19:97:71:20:f2:63:38:ca:15:43:69:9f:11:3b:
69:7e:bc:68:94:b8:b6:2f:9b:fa:7b:f1:52:25:1e:
17:65:26:aa:d0:94:97:e8:03:97:96:09:89:9e:b4:
02:a1:a7:09:c4:ea:cc:f3:92:1c:8a:90:d1:3f:e2:
e6:ff:8b:39:62:ec:2b:17:63:72:e8:7f:83:f9:08:
f4:f9:9c:f1:59:1f:38:69:32:27:f6:c9:85:32:4d:
d6:5b:79:a7:69:6d:4f:ba:64:a7:56:4e:9a:56:d3:
61:28:b4:77:e0:1f:c6:67:60:b4:d1:b9:94:db:50:
88:d8:11:12:99:2f:b6:d1:8d:ac:a3:72:06:f0:fb:
52:d9:83:4c:c0:7b:2f:fd:4a:ff:a5:6c:3a:0a:08:
cd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:08:19:CF:8D:58:37:B7:1F:DE:29:64:02:A3:49:6F:D9:29:D6:1A
X509v3 Authority Key Identifier:
keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4f:76:c4:54:2f:50:e0:6d:a6:6c:1b:6b:8d:66:56:94:68:
0d:8c:d6:43:83:b7:61:1d:0c:44:17:b6:c5:fc:fe:19:c5:a7:
00:89:3e:a5:24:28:01:b9:ef:1f:0b:9b:fc:3f:70:48:5c:d8:
de:dd:ee:a2:e1:fc:31:d3:2b:d5:a8:8f:f5:9b:c3:6f:94:0b:
0c:07:9f:8d:17:ad:f2:50:42:21:4b:80:e0:f5:12:7f:2d:37:
70:93:ed:2f:69:b7:31:5b:43:d0:ff:d9:42:5f:b6:86:ab:7b:
1b:06:17:94:e2:d1:61:84:b9:18:6b:d1:cc:38:db:35:46:28:
c2:b8:34:06:0a:0e:19:3e:78:71:a1:12:e2:96:fd:50:77:8c:
93:f7:e6:82:98:88:f0:bd:02:31:c7:a5:74:0e:57:07:33:5c:
97:69:17:bc:b9:d7:a6:8a:d1:9d:d0:89:b7:c9:60:f8:21:cd:
07:ea:3f:ff:81:16:65:bd:d3:7b:c1:bd:fa:14:95:1a:00:1c:
32:cb:45:6d:b1:c9:07:cb:30:5d:5a:c2:84:b6:37:29:a9:cf:
bf:e9:e4:23:d4:a9:06:dd:a8:92:ae:7c:5f:ea:09:36:0e:18:
d1:76:08:61:c0:7e:bd:ae:7c:fe:6b:ae:29:9f:62:62:85:c6:
ba:c7:3c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:24:31 2026 by rpki-client