Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
File: 4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json)
Hash identifier: adSrbChm4WD/pLqWApKV1h6GlgNQVjVihv2n/EUNsrk=
Subject key identifier: E1:87:9C:38:CC:DF:70:54:A2:A1:21:D7:77:8A:0D:D6:52:5E:BA:18
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Certificate issuer: /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial: 019D27E06062D61E03354C31BA5E7C7ECF50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
Manifest number: 085E
Signing time: Thu 26 Mar 2026 02:01:49 +0000
Manifest this update: Thu 26 Mar 2026 02:01:49 +0000
Manifest next update: Fri 27 Mar 2026 02:01:49 +0000
Files and hashes: 1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: tB+GZcvwfQ8qhfOLUlh1t3FjjPCnviKNg9ZROKYa6U0=)
2: xsczLZy6vYyowOb8czcl6wqwt9w.roa (hash: Mvlo5cxvh4qQACxtbdlZhswtrG2sScu72g8Sl/rtq7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 02:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:60:62:d6:1e:03:35:4c:31:ba:5e:7c:7e:cf:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
Validity
Not Before: Mar 26 02:01:49 2026 GMT
Not After : Mar 27 02:01:49 2026 GMT
Subject: CN=e1879c38ccdf7054a2a121d7778a0dd6525eba18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0d:75:e4:40:6a:12:f5:60:82:d6:f9:af:68:
db:9c:cc:3f:c8:fd:3a:27:15:42:b1:ed:40:f1:db:
40:a1:b2:8e:18:29:cb:24:dc:a2:ec:90:57:e4:32:
70:c6:ea:e5:df:ea:8d:59:e8:af:6e:26:46:1e:8e:
4c:84:23:b5:04:80:78:38:48:89:1f:94:dd:39:a6:
31:b1:1d:7f:35:9c:22:a8:d7:db:48:07:02:44:8c:
73:de:9f:de:99:05:88:f9:75:3c:3f:80:43:fd:a6:
4e:9f:ec:7b:69:f0:b1:2a:af:c2:ec:98:9b:f8:f6:
ca:f5:7e:55:87:54:e8:d5:be:1e:66:05:e3:d2:53:
b7:a5:71:8a:47:3d:eb:5d:56:9d:8b:a4:5d:61:16:
13:18:60:d8:f9:ff:1e:8a:aa:b4:56:95:62:6e:bf:
8a:6c:ac:72:59:d3:a4:43:ae:39:f5:23:06:82:05:
27:2e:23:fc:b1:88:5d:be:0b:be:a5:97:a2:d5:bd:
27:3a:bb:af:1d:59:22:c0:b8:aa:a1:dc:9c:cf:fb:
d5:48:8e:d2:c2:90:9a:31:e3:a7:aa:32:24:ef:85:
f5:6d:f9:39:aa:5a:a2:3d:10:8b:6f:4e:bd:86:57:
2a:7d:42:98:47:1d:2e:8a:f6:ef:d2:e8:6f:6a:6e:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:87:9C:38:CC:DF:70:54:A2:A1:21:D7:77:8A:0D:D6:52:5E:BA:18
X509v3 Authority Key Identifier:
keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:32:bb:f6:c1:d6:ca:7b:71:a9:f8:04:07:99:17:58:9c:57:
56:8d:f8:0d:96:97:ef:f4:bd:87:65:c1:25:66:fb:d5:0c:a0:
93:59:c0:02:36:a9:e0:7e:f2:09:10:75:b7:a9:6d:5d:14:64:
0f:06:8f:fc:1f:2d:d4:d8:cf:b3:7b:91:ee:77:2f:70:cf:3d:
85:6a:63:33:29:fc:38:7e:5d:a8:39:46:01:81:53:50:09:bb:
93:f7:d3:7a:07:7b:1e:00:05:93:d6:a5:e9:f4:7f:13:a4:3c:
5b:96:24:8a:34:41:99:3b:12:20:4e:f3:c9:e6:45:5e:10:e3:
6a:76:7e:7f:9e:13:dc:dd:cb:b2:f3:ae:22:59:1d:24:06:ea:
89:80:c6:e9:d7:b6:86:49:8f:2a:9e:ae:02:98:8e:11:be:d3:
2f:fd:2b:dd:e1:74:7f:cb:a2:a3:11:8d:a3:61:27:2f:ce:cc:
f4:ea:d9:93:cb:e1:36:68:2e:da:fd:71:14:2f:94:6e:99:93:
0e:66:b5:2d:25:3d:2e:5f:b5:71:d5:28:16:65:c6:a9:fc:9c:
ad:75:7b:4e:94:86:e8:f3:1a:5f:c0:72:8e:36:da:a5:6d:74:
69:66:d5:7a:aa:e4:a7:a3:b0:ed:22:01:3e:33:3a:a5:c5:98:
d8:7f:cc:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:28 2026 by rpki-client