Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File: 4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier: 5NUdIm8vg9ON4rk/Rd2+QLdiwBeoMx6l1Dee7JdJTeM=
Subject key identifier: 0D:6F:4E:62:A8:3F:9D:BE:4B:3C:BD:64:9A:34:74:FF:63:C3:7D:33
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial: 019D2A3C2FE047BCF4E2B5E4BA11410306C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number: 1149
Signing time: Thu 26 Mar 2026 13:01:20 +0000
Manifest this update: Thu 26 Mar 2026 13:01:20 +0000
Manifest next update: Fri 27 Mar 2026 13:01:20 +0000
Files and hashes: 1: 1OjQOklemE1c2Ofd7sEbtV6WCLQ.roa (hash: p8zMORBp4EwLrEV0pwePL8HYOl4fQLM1ray936MhnIo=)
2: 3gKR0cK9QoxfvHnSIiqY4bcG8ww.roa (hash: ZcGaXU4YPznoibhlbyhjzKqhwZf4BJJECm4SI2hoD/U=)
3: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: iZHSMFqorP9DdOEor3oDIZw5ZakyN9KCNBnDebuN0BU=)
4: 8tAmUasl9shJmzVr02QyR9gf1yg.roa (hash: 56dLPJcjlB89ljFKBrlBrzN9saKBJC9XHbbe4kgHJpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3c:2f:e0:47:bc:f4:e2:b5:e4:ba:11:41:03:06:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Validity
Not Before: Mar 26 13:01:20 2026 GMT
Not After : Mar 27 13:01:20 2026 GMT
Subject: CN=0d6f4e62a83f9dbe4b3cbd649a3474ff63c37d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:07:ca:a4:06:de:00:40:41:23:4b:2f:f9:6c:
66:01:a1:c3:c0:69:e2:fc:d1:95:69:77:60:7b:a8:
f4:37:07:ef:c9:b6:41:9b:46:d9:db:2c:b7:ab:c5:
ac:9b:97:6a:63:2c:39:bd:01:72:57:08:c8:87:23:
59:58:58:3d:63:ac:73:1c:9c:b8:2e:ae:1c:d0:dd:
56:34:fa:c8:ec:c5:4d:cb:8d:b9:44:fb:8a:88:08:
b2:c4:3c:7b:24:03:b9:64:89:60:23:57:af:db:4d:
25:36:b1:1e:5c:5a:e3:cb:2a:fd:35:33:05:99:ca:
6e:a2:52:7a:af:37:b6:80:5c:26:c1:a9:08:70:d1:
12:85:ed:fe:ae:17:ea:75:88:9e:13:89:4d:f1:23:
71:9a:e1:43:e9:a0:db:f6:1d:52:1e:43:bf:59:fe:
bc:5d:1d:69:90:7b:84:64:38:9f:2c:2f:7e:20:58:
59:c7:51:d9:71:59:4b:0d:d3:e3:33:54:e2:e7:93:
a9:b3:22:c0:38:57:e9:5d:c2:ff:13:ff:3c:61:99:
37:5a:33:0a:82:1c:33:08:f5:39:d5:da:e3:17:dd:
7c:6b:7e:f5:c6:50:16:e8:fe:a0:c8:ef:f5:da:43:
a0:7d:b9:02:6d:63:d6:12:8c:98:2a:f7:1a:33:9b:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6F:4E:62:A8:3F:9D:BE:4B:3C:BD:64:9A:34:74:FF:63:C3:7D:33
X509v3 Authority Key Identifier:
keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b0:da:db:d4:9f:1e:42:a1:5e:d5:0e:f1:33:25:3c:4c:d4:
f8:08:c4:03:86:f3:aa:88:25:4d:bf:03:01:c3:6c:12:63:b5:
ac:03:7e:59:9e:b5:8f:a9:c4:df:e9:21:56:8b:c6:dd:01:d3:
41:16:7b:78:17:00:45:5f:f8:5c:00:c9:65:1c:14:67:5f:a9:
54:0e:f6:bb:90:b5:22:55:99:d1:c2:40:50:15:08:c5:59:88:
26:f4:6d:43:46:2a:9f:eb:09:cb:1c:04:fa:59:18:e1:c7:ec:
f5:4c:8a:49:62:4f:04:16:2a:2c:a3:3e:15:ce:15:2a:57:4a:
88:68:c0:97:ca:bd:a7:cd:e8:47:4b:57:3b:f0:e7:ef:36:9e:
f3:d3:ce:ec:d7:6b:2f:28:41:0c:72:4a:bc:c6:1c:74:c7:f2:
a1:49:9c:45:d6:6b:ce:ee:a3:ac:e0:21:38:0c:08:96:35:c4:
5c:19:89:eb:be:0e:c7:77:69:59:15:bb:02:74:ae:fc:3d:d0:
bf:6a:a2:06:f9:ef:c4:75:9d:ab:65:a3:00:48:b7:13:e6:27:
9e:63:0b:e4:db:bb:a3:32:73:f7:f5:11:76:67:8c:06:3b:ef:
85:d1:47:dd:a8:d1:64:77:b4:c1:0a:a4:09:db:43:ad:92:b6:
3d:61:34:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:33:53 2026 by rpki-client