Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File: 4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier: hu67hNl/YTVz0GSePM8Wq6qp/4+SM97Kp/IiKQrCQ4g=
Subject key identifier: C9:AE:90:51:EB:53:EE:69:FA:22:CF:6C:47:70:27:78:50:CB:9C:DE
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer: /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial: 019D28BBA0E45AF861685062A6CA71D26B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 06:01:18 +0000
Manifest this update: Thu 26 Mar 2026 06:01:18 +0000
Manifest next update: Fri 27 Mar 2026 06:01:18 +0000
Files and hashes: 1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: 0gsiW/T8oU2YbrLiDwQiApqnCcbidHAYmTcAK4n4ecA=)
2: EC4GBb1LJjJ7pV8_x0txKCEIXSg.roa (hash: 9oW73pfxOP8M7veC/PL5Kk4ZUA5njttoIdfA+gSwRO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:a0:e4:5a:f8:61:68:50:62:a6:ca:71:d2:6b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Validity
Not Before: Mar 26 06:01:18 2026 GMT
Not After : Mar 27 06:01:18 2026 GMT
Subject: CN=c9ae9051eb53ee69fa22cf6c4770277850cb9cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ab:37:28:79:5d:20:b8:67:a8:80:bc:61:0b:
53:b7:b3:65:37:57:04:a8:b4:af:e5:ce:18:f4:5c:
c1:ac:c1:7d:d8:cc:e4:2a:68:ad:c3:4a:0d:a2:20:
fa:2f:c9:ef:f9:aa:e4:b4:f6:b7:cf:35:3f:23:c5:
12:85:9c:f7:1c:f3:5e:ec:63:66:4d:8a:25:3f:bd:
83:9b:32:03:8e:d9:a1:5a:1b:6b:ad:f6:d1:5d:51:
e6:94:6d:d1:fd:19:d6:90:47:f1:ef:e8:3f:81:cf:
56:19:e4:56:35:6e:31:f0:e8:4a:57:58:46:88:d0:
81:b2:31:72:d8:9e:29:2c:58:3e:8e:9a:53:8d:dc:
88:da:41:71:0f:7f:2b:1f:0c:95:30:cd:f9:dd:87:
b3:e5:83:0b:d9:51:74:c5:e5:8c:5a:95:57:b1:72:
3f:43:dc:23:6b:68:77:d9:34:e5:3e:15:65:0e:b7:
e8:f6:1d:5a:3f:59:b6:15:8c:ff:38:e5:28:ef:43:
02:ba:e8:15:dc:bd:cd:be:53:69:83:97:e7:08:95:
90:8c:43:fe:d4:39:b3:10:fd:69:73:c3:23:d0:e1:
f5:7e:2b:43:87:0f:a8:e8:40:0b:32:4e:6b:e4:03:
61:54:6c:76:ca:1f:c5:c4:32:31:a3:2b:74:4e:e9:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:AE:90:51:EB:53:EE:69:FA:22:CF:6C:47:70:27:78:50:CB:9C:DE
X509v3 Authority Key Identifier:
keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:2e:30:fb:49:14:c5:75:f3:b6:c6:5b:95:66:83:40:09:51:
93:35:47:e8:44:99:37:a6:13:a7:f4:ae:f4:b6:14:49:f1:f5:
71:2e:d3:03:f8:23:37:04:c7:fb:c1:62:bb:f6:2e:ca:74:8e:
90:f9:6a:f8:d7:0a:cd:44:fb:be:76:91:7d:7b:86:c7:8d:85:
54:23:43:5f:36:e3:6a:c8:77:03:f5:15:51:e7:e6:63:64:0f:
bc:bb:de:b7:f5:cd:bd:64:86:66:12:6e:35:1b:97:b4:00:54:
a4:6a:4d:16:80:86:01:3f:90:25:1e:c0:b0:19:23:59:68:bf:
d1:43:10:2a:26:29:7e:fd:1b:bd:eb:b1:29:d2:69:28:ce:00:
ad:0e:ec:97:dd:0e:57:3f:26:50:50:f9:eb:1c:4b:ce:c5:7a:
ba:db:c4:e1:d2:53:0e:f8:63:ce:9a:e5:72:a0:c0:08:d7:02:
51:97:a4:d3:ac:b3:3d:af:35:55:1f:b3:91:a7:bf:98:be:ec:
5a:0b:64:b1:f2:45:1b:31:e5:f3:87:43:06:64:f8:5f:6f:e5:
d6:b5:93:7d:71:61:00:83:80:16:1d:6a:7e:e3:43:be:d5:49:
76:75:ee:c6:ad:ba:f9:0a:64:10:63:11:dd:49:01:da:d1:8d:
20:c0:83:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:36 2026 by rpki-client