Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
File: c4DHWfVY-ca-iN0iakOdmcnqzww.mft (raw, json)
Hash identifier: C+hFKD1DFswLCNsxzk+G+q9ZIUSPKYoBVRLUG7AQHfk=
Subject key identifier: 68:98:4B:E8:4A:CD:40:FB:75:BA:45:4C:1D:35:7F:2C:C1:A5:1C:80
Authority key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
Certificate issuer: /CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Certificate serial: 019D2704B38640603E94D0591BC7215DC63A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
Manifest number: 0FB8
Signing time: Wed 25 Mar 2026 22:01:52 +0000
Manifest this update: Wed 25 Mar 2026 22:01:52 +0000
Manifest next update: Thu 26 Mar 2026 22:01:52 +0000
Files and hashes: 1: SyzDr7afLaGB0eh8BGltmqw92Ho.roa (hash: 050EI4bgC2uJSD8MPwN8yNb/BaQ/4SeM3IGk1KBixYk=)
2: c4DHWfVY-ca-iN0iakOdmcnqzww.crl (hash: 2Pqdj1FIUBa/dONRS3x6yQAUtrcIcJVXBNR00mnQcz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:b3:86:40:60:3e:94:d0:59:1b:c7:21:5d:c6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Validity
Not Before: Mar 25 22:01:52 2026 GMT
Not After : Mar 26 22:01:52 2026 GMT
Subject: CN=68984be84acd40fb75ba454c1d357f2cc1a51c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c5:67:7c:16:6f:58:95:02:94:57:f5:8b:d9:
d2:56:13:07:a6:2a:d6:fd:ba:84:54:64:34:b8:a9:
31:11:86:9a:df:ee:07:36:23:4b:5c:ce:0e:f3:91:
73:de:34:61:e2:3f:de:14:81:36:74:53:ee:91:25:
e2:a9:c5:2c:24:bf:94:75:75:13:3a:51:39:a2:52:
46:aa:a4:b1:ed:d5:5b:52:94:ee:05:4e:4d:1b:ca:
df:f1:79:3f:3a:6b:2a:66:00:cf:23:e7:f3:a3:7c:
2b:e4:3c:c8:aa:ce:d5:92:1b:84:24:b0:d9:43:ed:
c7:92:99:d5:96:db:a6:b6:2b:72:33:90:a8:6e:72:
3f:5a:29:36:52:c3:55:38:b6:c2:78:88:9c:db:cd:
85:dc:a0:04:d1:01:e3:b5:6c:c3:e2:19:71:f6:39:
34:53:f9:ba:7f:90:6c:ab:a7:cb:d4:e0:00:19:0d:
41:ea:a3:fa:9f:9f:88:3d:d4:da:33:5e:06:97:bb:
51:8b:69:e2:83:28:4f:43:4a:6c:7b:c2:0a:ea:c4:
a9:d0:90:52:50:8f:4c:98:94:e7:f5:cb:68:8f:f6:
a0:ea:c1:d6:47:ec:24:9d:9e:24:26:a9:ac:71:0f:
15:e8:99:db:47:ea:40:29:f5:90:5b:26:b0:c2:f4:
67:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:98:4B:E8:4A:CD:40:FB:75:BA:45:4C:1D:35:7F:2C:C1:A5:1C:80
X509v3 Authority Key Identifier:
keyid:73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:85:85:cd:75:53:20:3d:b8:1c:ae:a8:d5:59:c3:30:6c:a8:
26:ed:48:1a:4f:75:98:83:99:50:0e:98:40:86:e9:5e:d7:08:
5a:25:d9:3a:fc:07:de:80:87:29:63:bf:23:29:eb:e8:fd:9e:
13:b1:e3:9c:3d:89:53:c7:89:e5:cf:53:f5:53:1c:81:67:f0:
a6:c9:d3:4b:fc:fd:31:0f:42:1e:61:db:89:7e:ed:1d:9b:70:
e7:b4:11:40:e5:15:ac:06:26:43:90:eb:3c:6c:ad:11:e0:ae:
85:95:72:10:83:11:1d:13:c5:6c:cc:0f:fe:d7:c5:a1:a9:ad:
88:0f:1a:44:5d:0b:64:1d:67:e5:c4:9a:8b:72:3b:b6:22:4e:
b1:c0:13:33:93:9d:0a:f6:b8:3f:ee:ca:79:19:70:75:b2:4e:
f9:90:8e:21:2f:a0:b9:d3:da:68:84:ab:ab:1d:fe:7c:a6:55:
19:cb:c7:3a:45:20:5a:dd:81:5e:61:37:b7:4b:3f:e9:79:37:
12:89:4f:fa:f1:9f:91:c0:0c:bd:4b:a5:11:9a:d3:bb:c8:eb:
64:5a:02:e8:6f:58:c0:d5:1a:86:09:6c:a1:6f:d2:5c:5d:35:
86:3b:d5:23:e3:cc:d6:a0:10:92:bf:2c:aa:2e:55:96:ab:b1:
d5:0c:82:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:53:31 2026 by rpki-client