Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File: 4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier: Q3Rm4jiWYtxvj+c7o9B4FM1zmQ+ZCtZSpWCZdE7HK2Y=
Subject key identifier: 36:6F:C8:C2:77:11:91:0F:D1:2D:05:7E:1D:A9:0A:E2:CC:D1:3A:DC
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 019D26281B0E8004D827BA12DDEC552F01F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number: 0C2B
Signing time: Wed 25 Mar 2026 18:00:55 +0000
Manifest this update: Wed 25 Mar 2026 18:00:55 +0000
Manifest next update: Thu 26 Mar 2026 18:00:55 +0000
Files and hashes: 1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: krv0zw0KhkXojJdXX/XAl4awWImkz8kDK/O7JGfZRBc=)
2: UWX8SxCjwL_qmxdOe6nySrZQC84.roa (hash: D5R5Nyowo4jjOW+4uW1uT9NqCdmsnMIgdkwB6H1oOfI=)
3: vAkRpmTvdjsWw_0AKaPQzFGQBZQ.roa (hash: 8oO/bPo+96+JLDumliudhdJVxtG8gpJVeHN/Dwo+7JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 18:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:1b:0e:80:04:d8:27:ba:12:dd:ec:55:2f:01:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: Mar 25 18:00:55 2026 GMT
Not After : Mar 26 18:00:55 2026 GMT
Subject: CN=366fc8c27711910fd12d057e1da90ae2ccd13adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:eb:36:2a:60:fd:03:96:f8:fe:81:58:58:
d4:95:dc:cd:6d:ae:08:c3:6c:11:ad:bd:57:2e:75:
5a:b8:94:3f:98:2d:15:d0:d7:f1:2d:73:7e:7d:14:
3f:1f:c0:35:88:91:09:1d:16:c8:73:b8:18:75:96:
9a:c1:37:90:f0:0f:51:75:03:cc:f9:ca:d9:54:39:
01:90:88:b4:7a:07:c4:9f:56:b8:1b:9a:c8:57:f7:
11:f4:ef:b4:ca:57:da:db:8e:b1:6f:fc:a0:4a:7c:
0e:5a:f8:f5:3f:76:35:57:25:ef:76:20:27:8c:c2:
2a:ca:8a:09:4e:fa:cf:f6:44:e4:fb:2e:af:61:b5:
2e:21:9e:7f:aa:5b:85:70:70:37:13:8c:1a:d0:7c:
c5:a3:78:df:1a:78:af:1f:90:d1:a4:8d:4e:80:4a:
27:ab:c6:da:41:ce:22:c0:a6:73:71:e1:91:ca:2d:
ca:c2:d9:33:cb:31:40:23:25:f9:84:36:e9:58:a4:
5d:5e:03:8f:79:5a:38:5c:ce:c9:eb:bd:f6:af:a6:
6a:8c:6f:30:d1:ee:8d:7a:c2:c5:b3:77:f6:21:6b:
87:17:ef:19:bc:73:85:a4:6d:16:4c:5d:83:39:35:
58:e7:21:25:64:57:d4:5c:26:4b:a9:cb:60:15:7c:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6F:C8:C2:77:11:91:0F:D1:2D:05:7E:1D:A9:0A:E2:CC:D1:3A:DC
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:48:03:d1:e9:3b:36:f6:98:3d:e0:8d:1e:31:b5:b1:12:c1:
7f:83:93:b6:04:24:f4:d0:0b:5c:ec:78:c8:a4:6e:97:0f:97:
08:3d:0a:bb:c3:4c:4c:80:73:0d:7b:69:e7:47:0c:84:dd:25:
d8:10:6f:43:8c:b9:39:2a:42:6f:bd:6b:b1:de:87:dd:cc:e6:
6f:36:bd:b1:c5:fd:f6:c0:1f:bc:47:30:ac:d7:e9:5a:e1:8e:
46:a8:a3:27:a3:bc:96:04:23:87:28:d8:8a:1b:dd:7e:6f:07:
e0:e1:58:cd:14:8e:e1:15:47:04:04:05:41:0b:90:20:5c:d3:
c5:6f:74:4a:5a:7f:b0:f6:e3:dd:d3:68:b5:0b:f6:66:a3:1c:
31:fd:75:6a:6a:a8:31:00:8a:6a:59:b3:ef:d5:c2:8c:64:d8:
ae:8f:de:a0:2d:d6:40:b7:4a:69:5d:64:aa:af:08:91:93:bc:
34:c3:c2:e6:d3:73:d0:42:7d:17:92:82:30:d3:35:24:bc:6f:
79:4a:d6:f8:6d:a3:3b:c1:78:38:34:c0:a0:1a:7f:03:de:be:
35:d1:6e:da:c8:be:b9:3b:90:c5:3c:2e:2f:e7:6e:2f:ca:f6:
c4:12:ff:7d:88:83:72:02:ac:2b:41:e0:ff:7e:41:c2:5e:cc:
15:85:0d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:53:13 2026 by rpki-client