Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: ObZvzuZ5gfr5ToqhVm6JT2eB3ClvfFRCi/En1WY3rPo=
Subject key identifier: C8:96:33:76:E0:39:4E:88:1D:42:63:EF:81:5E:6D:8D:06:D7:BD:6B
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 019D29613B5D1D0DF8F473DA9BE9EEFA97D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 1892
Signing time: Thu 26 Mar 2026 09:02:11 +0000
Manifest this update: Thu 26 Mar 2026 09:02:11 +0000
Manifest next update: Fri 27 Mar 2026 09:02:11 +0000
Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: c1XLJjfwQZAfasMqpYcj4qGQBqIO6awpDtSsWSLCj08=)
3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:3b:5d:1d:0d:f8:f4:73:da:9b:e9:ee:fa:97:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Mar 26 09:02:11 2026 GMT
Not After : Mar 27 09:02:11 2026 GMT
Subject: CN=c8963376e0394e881d4263ef815e6d8d06d7bd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9e:8d:fc:13:5a:e1:b8:60:c4:cf:a9:4b:c6:
9c:f2:1d:c8:56:d7:48:c4:3a:30:dd:7c:79:1a:b9:
e0:16:ac:22:c5:9e:35:61:dc:8f:c3:0a:c8:22:ef:
ed:9c:0f:4f:cb:cc:6e:43:d3:3d:0b:42:15:d1:4e:
54:8e:e3:43:74:0e:61:89:09:b1:4a:90:1d:a4:62:
8b:04:41:5b:93:d9:57:57:2d:c9:4b:94:d5:2b:bc:
b4:ff:23:a2:da:71:e5:6f:4c:d6:cf:95:dc:57:3e:
db:86:0f:b8:a8:f7:25:02:f9:8b:c0:7a:f2:f5:0a:
18:06:d0:fd:29:11:a8:10:1d:29:0e:33:67:e7:f8:
2b:da:87:35:30:5e:0b:b7:28:e8:07:22:d4:00:4e:
01:79:6a:2d:6c:29:c6:70:bd:68:94:21:20:01:86:
bb:71:c2:bf:3a:41:42:be:68:23:ed:32:eb:ab:17:
55:08:2b:5a:8f:ca:85:72:91:09:70:00:eb:4f:87:
ee:ef:5a:e6:b1:a2:c0:6b:37:7d:75:52:64:18:e6:
5d:3c:44:41:d8:44:04:0d:b1:b7:28:06:1d:8d:06:
78:2c:cc:e4:7f:bb:4b:81:88:d9:71:f8:29:f7:6a:
92:a8:98:9a:4a:28:d8:80:0f:d3:79:d6:19:a6:65:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:96:33:76:E0:39:4E:88:1D:42:63:EF:81:5E:6D:8D:06:D7:BD:6B
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:97:9a:b0:ad:09:77:12:17:99:50:b6:18:b4:de:d0:32:ca:
9c:20:11:76:d8:62:64:08:a0:54:68:cd:a9:d5:f7:79:7c:c6:
86:b4:95:8e:48:38:5d:0b:b6:36:7b:5f:7a:05:7b:29:b3:8a:
f8:d5:b0:88:78:81:99:a1:2d:86:8b:d7:c8:c3:cd:28:d8:d9:
f2:c3:8d:30:55:5e:2c:64:e2:a8:ba:0b:15:f3:60:90:b9:d8:
98:5b:4b:8b:c1:99:f1:08:a1:07:ec:25:ee:36:f3:5c:02:e9:
bb:15:9a:b1:a9:4a:fe:5d:41:bb:d4:1e:b7:11:f6:0e:e9:4f:
d1:71:a1:a0:07:bf:12:1e:dc:e3:1e:12:bb:3c:a6:df:e1:7d:
95:cb:63:f5:00:d9:97:06:76:02:0d:87:6f:ca:73:c8:6e:7f:
6f:c0:7f:af:80:3c:2f:f0:c1:23:df:a3:53:b6:55:05:5e:65:
51:a7:17:81:ab:98:ff:28:fe:0c:95:29:35:58:cb:91:81:bb:
f7:64:aa:ff:01:d3:a4:32:a5:93:6e:2e:69:2f:15:b9:ca:19:
e1:c4:36:c3:be:95:4e:1b:95:d9:4f:dc:bf:86:df:2b:63:73:
ea:00:07:e6:5b:19:79:be:98:51:e5:ac:37:5a:00:ae:8a:aa:
91:b3:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:35 2026 by rpki-client