Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
File: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft (raw, json)
Hash identifier: 1HbvU/UY2TXQtAHO4QR5LSWaNeGsuhQr7JcqS9jxr0I=
Subject key identifier: 4A:E6:E2:75:9C:A6:0D:F7:CF:4C:E4:A9:FF:01:8B:99:24:28:7A:1D
Authority key identifier: E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
Certificate issuer: /CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Certificate serial: 019D27046A996E9830E0A28D15CE7356B88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:01:33 +0000
Manifest this update: Wed 25 Mar 2026 22:01:33 +0000
Manifest next update: Thu 26 Mar 2026 22:01:33 +0000
Files and hashes: 1: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl (hash: 4omPzBa7WdNLyPmayXuXU12Ce3/Dk+y3KxfOrbpVYlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6a:99:6e:98:30:e0:a2:8d:15:ce:73:56:b8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Validity
Not Before: Mar 25 22:01:33 2026 GMT
Not After : Mar 26 22:01:33 2026 GMT
Subject: CN=4ae6e2759ca60df7cf4ce4a9ff018b9924287a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:ea:84:d6:c2:d9:62:e0:06:96:47:b9:4d:
fa:b7:52:53:0e:b5:b6:9f:91:1b:03:e9:f9:77:86:
dd:6a:06:d4:79:83:e3:52:35:1c:38:2e:22:fb:7d:
c8:39:14:83:b7:ad:9d:56:5b:c2:24:7f:24:a9:52:
d2:44:e8:16:8c:15:3e:d3:28:57:17:04:fc:7a:da:
d8:91:b0:0f:98:dd:26:37:fc:4a:c1:eb:68:6c:c8:
0f:9f:d7:db:27:c2:31:d6:3a:73:63:3a:8a:83:c5:
78:72:cf:6d:b8:e9:58:7f:71:86:4e:d3:1a:10:3d:
71:0c:5b:8d:4c:b2:10:e9:e2:06:93:05:58:5f:3b:
2e:10:e6:24:5c:fd:91:9f:da:b4:23:16:20:eb:f1:
61:ab:ff:b7:04:64:ee:ac:1d:05:53:d7:51:c3:b1:
90:8b:ce:61:79:47:57:e4:0d:c1:6d:a2:aa:f1:43:
3c:e8:c9:94:2f:81:4e:a4:9d:cb:ba:c0:ea:b9:a8:
1b:9c:19:1d:db:9f:1c:f5:9b:4f:7e:49:c1:f4:0e:
67:32:05:a0:43:55:27:56:72:96:01:60:cd:df:0e:
78:fc:ca:38:24:8b:fd:e6:5b:b8:c2:e3:95:71:27:
26:fe:f6:e8:a0:4c:7e:e1:10:0e:19:ce:0f:7e:4e:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E6:E2:75:9C:A6:0D:F7:CF:4C:E4:A9:FF:01:8B:99:24:28:7A:1D
X509v3 Authority Key Identifier:
keyid:E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:d6:3f:d8:08:c6:33:b2:13:7b:b8:34:16:8b:17:10:74:5f:
3c:04:60:91:c3:3c:35:0f:e9:d3:6c:9e:64:c2:08:45:7f:4b:
71:58:94:e3:76:bb:54:3d:86:cd:41:e4:91:c7:ab:ac:c6:13:
9f:7f:ac:02:8a:66:60:ce:0b:e2:59:56:29:79:11:dd:82:11:
c6:4c:fe:cd:8e:a7:70:3f:8d:76:57:7b:9d:fb:87:3f:3b:c6:
c7:0b:01:28:0b:c6:d8:00:6c:e1:07:34:6c:b4:f2:9b:7d:b6:
95:45:90:44:ab:aa:0e:62:b3:40:78:e3:d3:e4:eb:eb:e9:58:
a8:2a:e4:0c:e7:2b:16:43:d6:97:f2:df:f3:9c:d1:69:6d:9e:
b0:ce:ae:43:32:d1:c4:23:83:c6:fb:c9:42:a9:28:25:54:91:
5d:22:0b:26:61:a0:38:48:43:4d:ed:39:67:35:54:e9:0f:a7:
70:1f:a5:98:ad:82:42:c1:d4:90:9a:c6:f6:64:cb:f5:fc:d1:
54:31:f1:33:c2:8b:a1:5a:98:a0:66:d6:be:16:28:30:d5:de:
4c:5c:de:ee:c2:b3:34:d3:15:65:7f:78:58:5d:50:bb:9e:d4:
a7:2d:57:99:03:6e:ef:35:a6:c1:c1:7b:34:11:d0:db:d2:a9:
1d:8f:2f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:39:37 2026 by rpki-client