Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier: eYII7CwHZLXwAcnT7s1pDGNXwPA+rgGrArIta/Qeoks=
Subject key identifier: FC:9A:89:91:C4:E0:97:9C:D3:37:3B:8B:02:9D:C1:1A:9D:CE:06:E6
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial: 019D27724C87C459BEE98839711BA10E6D0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number: 06AF
Signing time: Thu 26 Mar 2026 00:01:35 +0000
Manifest this update: Thu 26 Mar 2026 00:01:35 +0000
Manifest next update: Fri 27 Mar 2026 00:01:35 +0000
Files and hashes: 1: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: xPesoqIDT35mw80dVXLbC/3+KqWNphXO99z2p5O993U=)
2: QzeP51koEMjHeE88RWvwCqM_qGQ.roa (hash: nwOrnYkRQHY2ElWIiV63spIPWkoVMJum1Nxinn4biHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:4c:87:c4:59:be:e9:88:39:71:1b:a1:0e:6d:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Validity
Not Before: Mar 26 00:01:35 2026 GMT
Not After : Mar 27 00:01:35 2026 GMT
Subject: CN=fc9a8991c4e0979cd3373b8b029dc11a9dce06e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fb:ec:f3:45:38:ed:09:d2:88:47:7c:a9:e8:
19:b4:a8:34:b7:0f:57:84:00:d4:4f:c6:a5:05:08:
e3:cd:60:b2:3b:0d:29:5e:0e:d8:a2:76:38:91:1f:
59:2b:0d:b2:17:c5:c0:c7:45:50:76:17:12:05:53:
5c:6a:46:20:39:67:71:4a:a8:ab:9e:6f:5e:1e:bd:
50:83:09:3b:01:14:02:5b:9e:bb:87:2b:62:8c:97:
e0:e9:fb:14:0b:3e:7d:43:73:77:61:ac:98:ac:a4:
cb:a5:9d:9a:51:01:d9:e5:eb:9e:46:47:19:9d:98:
70:22:8a:13:a9:fb:37:9d:dd:95:8b:d7:b4:f6:68:
92:ae:00:4d:13:ed:6d:b5:3b:af:13:43:41:f3:ab:
be:26:3e:04:37:87:52:f9:08:99:c6:b1:05:14:14:
9b:0a:7d:ce:86:a2:60:4e:3f:e9:ae:55:f0:b3:a6:
68:32:91:ea:9f:03:a3:bc:d3:46:a3:29:f3:d7:e0:
27:65:b2:f3:39:bf:e0:a4:08:93:b7:85:92:be:b3:
c5:61:ad:1e:62:0a:fd:f0:8f:5b:59:81:72:5f:19:
fd:95:7f:fb:4d:2a:81:43:4f:07:b1:00:05:60:e7:
6b:eb:8f:6b:6a:5f:b5:e4:44:b7:88:17:fa:5b:a1:
35:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9A:89:91:C4:E0:97:9C:D3:37:3B:8B:02:9D:C1:1A:9D:CE:06:E6
X509v3 Authority Key Identifier:
keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4d:f1:4e:af:23:6c:c7:ae:91:bb:94:64:ab:a8:aa:a9:ce:
bc:a3:f1:99:11:3c:f4:22:1e:96:37:69:86:eb:8b:4b:a1:c8:
38:e6:72:ba:c0:51:11:ca:71:f2:c7:c4:07:e2:86:f6:57:c8:
af:d4:e5:0a:2d:c7:97:f7:1f:26:74:02:9f:b4:bb:4b:8b:31:
ac:e7:df:ff:89:6b:97:c8:57:e8:ea:1e:ef:2b:1f:47:09:10:
bb:ae:8e:86:ec:47:0d:a9:da:a7:aa:e0:2a:c3:b9:3e:bb:24:
28:8b:4f:d4:52:f9:7a:27:43:95:e4:54:1a:06:50:4a:c8:ce:
0a:de:d7:7d:80:e0:ec:71:a9:14:0c:56:be:b2:9c:ed:94:6b:
f1:54:28:67:42:6a:d9:7f:b8:e6:3d:73:58:ab:a9:a1:84:96:
0d:c1:ae:00:20:5a:2d:6c:fa:59:15:5a:a9:54:eb:f6:41:f3:
65:e8:a1:18:58:7b:48:54:e0:03:a8:ec:0d:29:c2:cc:87:2b:
d6:ad:b1:07:93:ca:d0:39:77:e8:fe:bb:26:98:62:55:ec:98:
aa:e3:69:0c:0f:d9:ac:c6:f5:50:7e:23:ec:4b:4c:f6:0d:39:
a2:d5:40:bc:c4:43:d1:bf:e8:cc:10:4c:84:b3:1d:dd:d6:25:
bb:46:e4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:52 2026 by rpki-client