Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
File: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft (raw, json)
Hash identifier: vtjmbo5nyVAEJit/IqiP0tBgYLkraMenQS0lYPY/MoA=
Subject key identifier: 11:B9:D9:D2:47:0D:69:5D:FC:3A:C9:E7:1A:BC:45:06:84:D2:08:0C
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Certificate issuer: /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial: 019D2771DAC0EF4C6B6A02FC227A1CBBCC2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
Manifest number: 1155
Signing time: Thu 26 Mar 2026 00:01:06 +0000
Manifest this update: Thu 26 Mar 2026 00:01:06 +0000
Manifest next update: Fri 27 Mar 2026 00:01:06 +0000
Files and hashes: 1: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl (hash: YTU+gjXYMSG76/QLRVm1YBj6V4YsfMSv0DdzHEiAbjE=)
2: DN7ZfyoDKyJXUkj1EC6pJ1I4DkQ.roa (hash: bY5wbQ98GBM8x3W74YxZg+qztKUip/POgTeTbjHHMZI=)
3: p6fcvhDFcw8Oq1fwe3BO8PpHz3U.roa (hash: 9OCWuqN8cdwaFpWbH6S/GLnMMyvjYjVk46dDsDdpR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:da:c0:ef:4c:6b:6a:02:fc:22:7a:1c:bb:cc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
Validity
Not Before: Mar 26 00:01:06 2026 GMT
Not After : Mar 27 00:01:06 2026 GMT
Subject: CN=11b9d9d2470d695dfc3ac9e71abc450684d2080c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:dd:44:b3:2a:a4:9c:ed:a0:61:1a:56:c8:da:
b3:d9:d0:78:9c:24:63:c0:cf:0a:a8:6d:f5:1d:b9:
25:98:3a:81:ff:62:bd:f0:b2:c2:65:81:5a:fc:c6:
8e:39:af:c1:e1:8e:d7:c6:e2:30:bd:2e:87:5b:bd:
63:be:c3:ed:e0:06:06:c3:63:6a:1c:ac:6a:33:3f:
81:3c:3d:28:3e:28:61:81:39:48:08:f1:96:87:17:
eb:4a:ef:e3:58:04:92:17:5a:74:81:56:c5:00:0e:
ac:67:d6:70:60:77:5e:c8:65:00:cf:e1:a2:1a:99:
f2:eb:b0:99:ac:c1:4c:a1:25:50:70:1a:35:f0:1e:
65:4d:6c:00:7c:53:12:73:51:5f:60:2f:93:a5:e4:
5a:95:b9:45:e3:f5:b4:28:db:72:58:66:8d:72:01:
2b:7d:cc:25:67:1d:6e:5d:1b:18:43:33:14:b9:b4:
8c:7b:44:84:25:62:3e:96:4d:b6:6b:b5:1d:27:98:
25:16:0b:63:51:1e:ff:3c:40:bd:f5:e7:24:67:85:
16:8e:1d:c4:b0:72:a6:ab:6d:ed:9a:2d:dc:f4:72:
f0:b7:27:33:bb:d7:7e:1e:36:9d:41:65:69:72:01:
25:e1:ab:33:54:2a:27:df:7d:eb:ee:67:05:28:50:
82:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B9:D9:D2:47:0D:69:5D:FC:3A:C9:E7:1A:BC:45:06:84:D2:08:0C
X509v3 Authority Key Identifier:
keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:12:38:b7:f0:04:18:cf:f2:ed:fc:5e:bb:57:c4:74:a0:ef:
a4:ec:f6:0c:89:f4:c9:15:f1:0f:e5:d3:a7:3b:2d:81:de:c9:
4b:19:c7:f1:18:45:f9:b6:03:78:c4:ca:b9:43:59:d9:df:79:
a7:d2:69:75:20:28:fc:3a:33:80:82:1f:98:ca:e5:6e:5d:cf:
76:9d:16:0e:dd:1c:82:69:dd:4f:30:44:5f:2a:91:27:09:99:
8c:53:41:9e:7a:20:83:d8:fe:77:f9:5d:5c:78:20:ec:6b:1f:
df:0d:6f:0f:6f:d3:ae:75:61:4e:de:ce:ff:37:60:8d:49:c2:
3b:65:05:1e:da:a9:3a:77:74:39:23:29:ee:3d:93:70:ef:cf:
10:4b:7b:8d:9a:09:8f:42:a4:d3:9d:3a:1b:dc:b3:40:b8:3b:
ae:df:47:23:7c:47:77:af:2c:6d:3d:85:31:fd:56:f7:c2:9f:
96:c4:77:7b:bd:29:c3:bc:e7:cf:2a:5c:66:67:74:48:d6:48:
55:0c:73:b1:56:7c:13:80:2d:f4:c5:5a:92:00:21:b3:96:f4:
fb:61:45:f9:c0:17:8f:92:db:5e:b2:75:2f:2a:fd:fd:b2:ce:
7d:df:de:2e:a5:00:47:49:33:34:9c:a8:a1:26:9e:2c:34:aa:
df:21:c3:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:43:42 2026 by rpki-client