Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
File: 4ucXSfgCklOQH3HUZBA56Q8al_o.mft (raw, json)
Hash identifier: ahGBcMNMQV2NQ1eZU+cIZQ1jv7r2wdJG28dpCxCV3jA=
Subject key identifier: 43:8C:5C:EA:DF:C5:E6:02:1D:6F:4E:44:11:64:9D:DF:E1:BC:F3:83
Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa
Certificate serial: 019D2583936E60B32A6C8B06FE84D957ABC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
Manifest number: A9
Signing time: Wed 25 Mar 2026 15:01:13 +0000
Manifest this update: Wed 25 Mar 2026 15:01:13 +0000
Manifest next update: Thu 26 Mar 2026 15:01:13 +0000
Files and hashes: 1: 4ucXSfgCklOQH3HUZBA56Q8al_o.crl (hash: HHGzOWC7AUOzgM0T+jrsAUgtTBJ/AhySrxDWtGbnpD0=)
2: JcRsIAV11TxO42T56xBXGNtE8kc.roa (hash: 3pabyOSkwOQBV5aehMnDFgC88a6tehv2gFnKarnZZow=)
3: XbFlHyCBOID9fwZAWWJUvKR3I1U.roa (hash: d1XG1P6bU90g/zeLcvn00HiiT+uT6qBEWhZA1fPBjyc=)
4: ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa (hash: Ilz4iptmtb2hDf1QiYufOvE04YvbCXcLVA+AVaG4uKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:93:6e:60:b3:2a:6c:8b:06:fe:84:d9:57:ab:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa
Validity
Not Before: Mar 25 15:01:13 2026 GMT
Not After : Mar 26 15:01:13 2026 GMT
Subject: CN=438c5ceadfc5e6021d6f4e4411649ddfe1bcf383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:28:96:32:66:f5:4c:a6:f4:ff:7e:f3:d3:b6:
8b:7e:29:af:c5:c5:99:3b:49:62:a6:89:98:ad:fd:
46:32:49:85:dd:1b:f9:04:b3:a7:e4:06:9a:27:f8:
a0:79:26:b3:f4:f7:72:96:b5:65:5f:3b:ca:16:b9:
2e:dd:a1:04:2f:aa:b8:28:49:6f:78:19:97:15:fc:
ae:67:ad:73:c7:f3:f6:8c:b3:d4:64:40:9a:7d:e6:
36:eb:e7:4f:d0:d0:9b:7b:57:b4:9b:be:17:a4:d2:
10:02:a1:c8:9f:21:a2:00:84:4f:f0:f7:38:9e:98:
78:ec:0b:3e:d0:c3:f7:da:6d:1f:f3:84:34:e4:26:
3d:90:4c:e3:8e:4a:28:14:b3:3d:53:5d:c8:5d:85:
2f:01:04:61:18:a2:a5:56:5c:bb:bb:7f:9a:78:21:
b8:68:ca:d1:1e:db:44:c7:76:ea:13:a9:1f:9d:d7:
74:6a:18:b2:f9:26:16:d0:72:13:b0:99:07:77:37:
8a:21:43:e9:78:91:c2:fa:35:c1:42:1d:8a:01:27:
d3:88:08:94:7f:01:6b:b1:58:c7:51:db:0a:be:09:
36:fd:15:eb:93:ab:b0:02:4f:7f:24:23:51:ff:c4:
a2:cf:25:27:55:35:af:3a:86:a3:25:31:e8:56:6b:
41:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8C:5C:EA:DF:C5:E6:02:1D:6F:4E:44:11:64:9D:DF:E1:BC:F3:83
X509v3 Authority Key Identifier:
keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8a:35:d1:91:24:26:8d:f8:c6:73:0f:e2:3e:96:11:a7:d7:
97:7f:6a:bb:03:b3:e2:ca:7e:0f:76:84:09:c3:df:94:16:ee:
56:ea:3b:1f:74:f9:db:6a:b0:e4:40:54:b0:8e:a3:34:65:3e:
91:40:fc:a7:47:68:fe:8e:7a:36:97:e1:83:f4:20:6f:52:09:
97:14:f6:b1:94:d3:b2:b3:ba:64:52:82:7e:19:ab:64:5d:3b:
05:fa:f8:65:54:76:c7:85:3a:74:37:2d:08:0c:37:dd:ab:c8:
fb:42:5f:d5:2d:73:4d:01:1a:48:37:14:1f:af:a0:c9:91:3f:
8d:03:8e:40:42:db:13:54:d1:e3:a3:bc:b6:fb:09:90:a6:e0:
f2:ec:f2:fb:4a:5b:3e:af:1c:be:19:a0:0d:8f:f2:1d:70:58:
0a:00:a5:be:ca:bd:9d:58:97:1e:be:19:0c:28:f7:6f:5b:57:
a8:23:25:c6:e7:48:4e:b2:cd:73:af:b2:db:62:d4:ea:01:42:
88:14:7e:8b:50:eb:50:9f:54:2c:04:df:32:27:72:bb:ff:80:
9b:2a:f1:75:bc:f9:e4:cb:ef:99:62:e7:ae:90:32:7c:78:fc:
b9:ef:03:91:11:13:74:db:37:68:e8:4d:9b:97:de:e5:a0:5c:
bf:6f:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:21:47 2026 by rpki-client