Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: 6cLR1esDMkYs3kzznbzSJMs/PbcVid46DI5kvXh79So=
Subject key identifier: F7:D1:FB:FD:42:C3:5B:E4:BE:D9:FC:A8:69:CA:C9:D4:A0:39:D1:CA
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 019D25BAA94895C7827EAA009D6306EE8B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 16:01:23 +0000
Manifest this update: Wed 25 Mar 2026 16:01:23 +0000
Manifest next update: Thu 26 Mar 2026 16:01:23 +0000
Files and hashes: 1: 102rhK3hZolwzCt7IJfuq8GdQf0.roa (hash: YO/FD+MWLi1I9ePrVvUS7xZGRfMEMrX2LxQRpa4cPxs=)
2: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: CFMsrdvaf3hQPIjN5SMLdamZ5v0a9Cul3j+HIbS2wwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:a9:48:95:c7:82:7e:aa:00:9d:63:06:ee:8b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Mar 25 16:01:23 2026 GMT
Not After : Mar 26 16:01:23 2026 GMT
Subject: CN=f7d1fbfd42c35be4bed9fca869cac9d4a039d1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:80:29:80:43:34:6a:10:7f:02:03:04:8d:1f:
cd:55:b4:dc:d1:77:a0:d8:ef:b4:48:39:3c:5a:cb:
25:7d:5b:1b:41:c0:ed:82:80:71:2a:81:2b:a2:43:
ee:9d:45:09:b2:31:e9:71:a3:74:b4:e2:4e:b9:5f:
96:d9:e0:53:2a:31:44:fd:94:3e:9c:e9:3a:77:11:
f6:cf:83:26:19:36:5b:97:49:03:67:00:8b:8c:ea:
71:d0:2d:58:30:87:47:7e:c6:58:3e:69:80:f5:a5:
3b:a0:cf:82:a2:74:80:83:7a:79:9c:49:3c:c9:86:
3a:9a:9c:28:61:3e:e3:d8:15:ce:76:ba:ef:db:b1:
c1:51:29:a5:33:52:cb:8f:92:ec:02:f6:54:f5:28:
c7:51:ef:0c:4c:19:f3:ae:eb:54:4c:1f:08:78:38:
64:18:d3:c5:60:a9:05:d4:a7:74:c9:ba:ab:04:5d:
b5:7c:bf:21:01:2c:84:84:ca:39:f1:d8:b0:fe:68:
c6:d9:54:6c:cc:5c:c0:8e:94:5d:25:4a:b8:1c:81:
c9:17:25:1f:68:8e:1f:73:a8:42:15:02:33:e8:27:
9f:e4:d3:91:46:4f:3f:f4:0b:7d:c2:b1:ef:22:bb:
cb:c2:50:91:a4:61:4f:fd:8d:4f:4e:92:52:35:d9:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D1:FB:FD:42:C3:5B:E4:BE:D9:FC:A8:69:CA:C9:D4:A0:39:D1:CA
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:4b:6c:48:d1:1f:8a:25:bb:f9:b9:7b:27:4f:e5:07:ed:0d:
2c:86:79:8d:ea:9d:b5:0e:eb:9c:47:2f:1f:a2:40:17:a3:46:
18:15:a4:cb:8f:0f:d0:2e:c8:bb:07:f4:b9:6f:37:b2:46:67:
dd:0b:b4:bb:d3:ac:1e:86:ef:61:93:48:05:fc:f6:2b:cb:8a:
9a:ba:18:7f:0f:06:f6:a0:9f:b4:22:14:77:0c:c4:ff:7e:57:
00:1d:40:2d:5c:62:7c:71:39:de:aa:2f:b8:0e:0b:8c:d7:29:
42:73:1f:7b:e5:e9:1c:ce:a7:77:d9:56:7a:ac:95:c8:db:dc:
94:e3:49:00:32:41:d7:a7:f3:66:8c:84:bf:28:04:54:ac:3c:
ad:04:19:15:77:0d:eb:84:9e:3a:df:9e:81:05:85:9a:22:9f:
88:de:a8:38:ca:29:4a:72:6b:61:68:e2:35:f7:e0:0b:c4:b2:
95:5d:02:2b:5b:10:22:a0:b7:1d:e5:9d:c2:8a:5c:fa:51:9c:
46:27:96:85:d6:f8:0f:55:46:a6:c4:d1:87:6c:6a:98:f6:68:
23:12:8f:30:5a:fd:04:56:45:ef:fb:82:a5:83:02:cf:11:54:
e1:cb:14:bb:b9:1f:68:a8:5b:6e:96:6e:1d:84:93:3a:d8:0b:
a6:e3:85:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:17:10 2026 by rpki-client