Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier: QtsasUtmxIsGb49v5DJLFt50kcgWKiJESVIGM+l1nRE=
Subject key identifier: 4D:09:C0:E6:F0:99:A2:0E:09:18:F7:8F:BB:8E:34:DB:95:A5:FA:49
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 019D2BBCA3160259021A8EC4C80B3BBDD7E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number: 0D2D
Signing time: Thu 26 Mar 2026 20:01:15 +0000
Manifest this update: Thu 26 Mar 2026 20:01:15 +0000
Manifest next update: Fri 27 Mar 2026 20:01:15 +0000
Files and hashes: 1: 2mbNbpusYk6iw7nI_ZoVXkx25Kk.roa (hash: jECrA0GxGXQNN5tkvnTh0W3htAuhM6FaT6MhUte5d2Q=)
2: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: 1PwqP8I1NELLRq+JLVahSNlZ1EG4k1eGk77blJmTPOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:a3:16:02:59:02:1a:8e:c4:c8:0b:3b:bd:d7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Mar 26 20:01:15 2026 GMT
Not After : Mar 27 20:01:15 2026 GMT
Subject: CN=4d09c0e6f099a20e0918f78fbb8e34db95a5fa49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:9e:8a:ca:91:4e:ab:92:d8:37:00:5c:6d:
21:30:85:c9:39:4b:8c:87:09:9e:8e:5f:60:9b:66:
1c:94:6d:97:55:4c:20:4e:0e:88:70:e4:e4:b3:1c:
dd:d5:49:90:6f:93:22:1e:20:a7:93:ed:de:d1:81:
92:85:4c:ab:7c:40:35:bf:64:93:35:ae:43:b7:9a:
27:cf:de:f2:0c:72:ae:bc:9e:b9:03:68:77:36:a7:
d9:1b:36:ec:98:28:2e:a3:3a:6b:e1:a4:99:30:d3:
88:0a:9b:52:7c:b7:48:f2:9f:7d:6a:e9:3d:d4:f8:
1e:66:26:c2:0b:f8:b9:35:7d:cf:d4:78:50:99:a3:
f8:15:57:ed:bb:82:4d:6d:f6:fc:04:d3:5d:bb:61:
83:9e:56:4a:90:a3:0f:cc:77:7e:50:53:af:48:13:
12:4e:ab:80:40:fd:63:6b:81:d5:df:e5:71:88:1c:
72:41:36:b3:d1:2a:38:48:a9:04:6a:6a:8c:a3:a8:
fb:97:2c:9f:8d:fe:33:d8:ca:36:b5:9c:d4:f1:78:
25:bb:3e:ef:b2:e1:8d:d1:1d:b5:47:73:72:0f:c2:
66:07:89:86:8f:63:3b:66:92:98:da:1c:cf:20:f2:
4f:6a:fd:16:d1:10:07:ee:40:8e:16:7f:d6:33:0d:
48:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:09:C0:E6:F0:99:A2:0E:09:18:F7:8F:BB:8E:34:DB:95:A5:FA:49
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:6d:95:4b:97:e7:45:5c:80:4f:a2:ab:1a:92:da:26:f8:45:
2a:7e:30:48:3a:d1:9e:23:c1:25:0f:63:54:ae:8e:bd:b7:ab:
be:25:61:69:4b:f0:7e:cd:7a:f6:df:07:98:50:b2:4b:26:73:
95:9c:4e:e4:bd:3a:ce:54:28:1b:b5:27:f7:61:6d:2a:3b:25:
25:e6:93:0a:98:1d:9d:bd:22:65:ed:f8:72:c4:b8:66:26:69:
28:6d:66:fd:e1:5f:c8:b6:06:3a:bb:3c:0b:75:66:34:14:df:
63:1f:42:f4:91:8e:25:46:ea:08:f7:54:68:0c:33:10:ef:de:
f7:56:39:f6:52:fe:4a:c4:79:94:48:91:bb:20:ea:57:86:b6:
74:20:51:f6:73:23:8b:26:7e:aa:9a:e7:98:cf:32:86:ab:09:
88:57:55:cd:50:7d:bc:f5:24:e0:52:02:bf:1c:af:c1:eb:ef:
17:74:65:5c:12:2a:ab:ce:89:fb:be:4a:c9:8f:ac:93:26:40:
08:d6:95:c0:05:c8:c3:ba:cd:ec:0e:b2:82:ee:09:8d:92:9f:
c9:63:ec:b8:f3:2a:14:cb:a5:89:40:92:c4:cc:21:6a:03:26:
49:cf:3b:2b:8e:ee:e9:df:8e:f9:d5:60:ef:aa:9b:98:0b:58:
67:6c:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:36:58 2026 by rpki-client