Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: D/y190HacsQCROW9Mxz5rb1PdHQBUwCP+O6P+5NKdVw=
Subject key identifier: 6C:61:B8:DA:EE:F0:E0:A8:6F:B1:04:85:C6:3B:31:A4:48:D8:2B:F6
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 019D25F1F0844A66072C22B964508970663E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 1888
Signing time: Wed 25 Mar 2026 17:01:45 +0000
Manifest this update: Wed 25 Mar 2026 17:01:45 +0000
Manifest next update: Thu 26 Mar 2026 17:01:45 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: 0FRbmnyLcQ6uCxhWacNnoUIw9fWJLKjpzDHGFr+tiiI=)
2: BfP2bGOW8HthUfuXXggXfcuAbvE.roa (hash: dmLHFskk9KIm4+573JvglcI2K8WR/PAM7m+/RW2L1vs=)
3: Gqd_X9Cp3EkyhF_XljM8cJVBjSo.asa (hash: J5j3yc/QFcGihvZazzwI8F9VHttAgOTYUiy+DL6NbuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:f0:84:4a:66:07:2c:22:b9:64:50:89:70:66:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Mar 25 17:01:45 2026 GMT
Not After : Mar 26 17:01:45 2026 GMT
Subject: CN=6c61b8daeef0e0a86fb10485c63b31a448d82bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:64:d5:ac:53:98:af:66:2e:86:02:2e:d1:
08:7f:c2:ff:fb:3e:39:c7:a0:06:57:84:e9:f8:c4:
35:d5:bf:64:d4:e6:72:54:d3:a1:4b:4f:14:48:0d:
47:22:f9:66:74:9c:0c:84:f9:8b:46:3a:74:02:0a:
eb:92:de:18:0a:ce:fb:1a:52:57:f5:c4:3c:9d:8b:
03:97:43:41:50:12:bb:ad:04:56:46:b2:99:95:af:
16:68:cb:3d:fb:2e:92:ef:52:d1:bd:79:9d:25:cd:
57:4b:f7:ae:a7:6e:4f:aa:7f:1f:e9:e6:35:6a:dc:
22:60:53:04:ba:ad:e3:5a:e0:3d:64:d7:6f:fb:02:
d1:55:21:fa:03:2e:06:6a:fd:9e:4c:b6:97:06:2b:
99:99:61:68:c6:55:aa:f5:08:1f:cd:7d:86:67:8b:
26:47:1f:b5:01:50:8f:1a:47:12:b9:94:89:06:ae:
b3:fc:4e:68:0a:a0:16:55:40:bd:cf:8d:6c:91:db:
56:34:04:9c:ea:2f:b9:8f:84:3d:da:ea:0a:47:39:
9a:7b:cd:96:6d:7d:2b:0a:a2:b8:39:8f:d6:e4:f8:
7d:9f:91:65:ca:60:bd:74:7c:10:11:87:95:fc:c2:
0d:48:34:8a:6f:b1:3a:78:41:7c:a0:19:c1:cb:17:
26:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:61:B8:DA:EE:F0:E0:A8:6F:B1:04:85:C6:3B:31:A4:48:D8:2B:F6
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:66:91:75:01:12:d3:ee:4d:89:fe:e1:bc:0b:24:34:84:29:
7f:7c:12:1c:ec:a4:8f:e2:c6:4f:ed:0d:63:d3:1a:c3:62:18:
5e:38:bf:ac:ad:37:79:82:d5:41:d3:6c:77:d2:58:d0:08:86:
d2:9d:8b:91:3c:9e:eb:f5:66:17:ff:24:6b:9d:a4:5a:ab:67:
10:05:78:e9:2e:d3:46:70:1b:e8:fd:7a:8c:18:8f:34:dc:f6:
76:ab:c1:1a:c1:45:1e:91:c8:22:15:f7:33:90:76:bf:03:58:
45:15:c9:db:ca:00:72:7b:2a:dd:f2:a7:86:2d:34:70:58:ae:
84:4c:a9:7e:53:18:ef:bb:7c:a2:02:e8:d5:b1:1a:da:bc:4d:
90:f5:1f:4a:02:98:1a:1e:05:e3:1d:63:ff:96:3e:63:f4:e2:
9c:81:5a:8a:45:56:08:6d:e2:ba:08:62:5f:5c:7f:a8:94:41:
43:dc:02:97:18:a4:d1:d5:75:5f:9f:de:61:96:a1:63:ff:cd:
a1:40:4c:e7:c0:2e:94:14:b5:1e:6a:ab:64:b0:21:1e:3a:03:
f6:4b:1f:ff:d5:5d:35:d2:03:5c:54:da:48:dc:f9:31:d3:62:
85:be:a2:bd:9f:18:af:2e:ab:92:67:8a:02:be:da:bc:a3:b1:
9a:6f:f2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:45 2026 by rpki-client