Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier: BPZxJ7G3VO5f63MsbFWBSnVeY4h3rFD4rcy9p4hqc+g=
Subject key identifier: 67:6E:A2:DE:EF:2C:64:55:B8:28:68:4B:A8:5C:2A:17:DD:EC:86:81
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial: 019CABD92BF8D7BE02674F12BCFF6752F117
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number: 0802
Signing time: Mon 02 Mar 2026 00:01:02 +0000
Manifest this update: Mon 02 Mar 2026 00:01:02 +0000
Manifest next update: Tue 03 Mar 2026 00:01:02 +0000
Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: 01Mcy4ScRTXG9iRAMslEcMrvtrSTSiT/Tz3vUh9XzEs=)
2: YcUnHKzg_WhzSXY6pBzamQ3-NNw.roa (hash: eZPIUTblrkYzTypRpx4By8fNDKQ5nNgHoQSpeVO227c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:2b:f8:d7:be:02:67:4f:12:bc:ff:67:52:f1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Validity
Not Before: Mar 2 00:01:02 2026 GMT
Not After : Mar 3 00:01:02 2026 GMT
Subject: CN=676ea2deef2c6455b828684ba85c2a17ddec8681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:fe:79:ad:02:e2:23:cd:4f:bd:a5:4a:47:
68:21:ae:fa:4d:34:76:b7:54:41:44:17:d1:e5:24:
e4:77:77:71:56:7b:ba:31:f9:d6:08:e0:89:7c:df:
c5:69:99:b3:f6:91:66:62:d3:d7:3c:99:c9:07:9b:
ae:22:a0:55:68:4a:9f:9d:78:01:86:1b:b7:ed:d8:
04:30:4e:cc:1f:80:7c:6a:d1:85:dd:fd:28:52:ce:
8a:59:00:70:ae:83:8d:fd:1d:00:9b:19:1c:61:bc:
84:df:5b:42:83:27:86:1c:91:bc:9f:d6:7e:f5:07:
83:c9:7e:79:93:2e:9f:d8:b2:2a:1f:95:e0:ce:95:
0e:8c:e8:04:48:75:cf:21:85:43:13:2d:f5:9d:6c:
3d:2a:d6:86:35:3f:8c:56:13:74:03:bb:a6:47:22:
72:e9:f1:e2:68:0f:e9:45:26:d0:96:31:6f:29:bf:
66:1f:db:c8:e4:27:08:4c:be:0e:c7:c0:e6:a1:cc:
7b:99:0a:b4:10:3f:3d:d8:5f:a8:a3:7e:25:8a:27:
28:52:66:9b:c7:b7:11:52:b9:84:6b:b4:e7:40:5b:
68:85:12:37:64:26:c4:23:31:34:ab:3c:79:f9:41:
3a:d8:8e:e3:d9:75:98:87:74:39:1e:89:ce:91:a0:
49:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6E:A2:DE:EF:2C:64:55:B8:28:68:4B:A8:5C:2A:17:DD:EC:86:81
X509v3 Authority Key Identifier:
keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:09:d9:e8:8d:1a:7b:2d:fc:6c:a0:8d:41:41:a2:40:90:a6:
b1:6e:f8:fe:e2:7b:ec:3e:96:70:74:51:e8:5c:04:fa:f1:5b:
0d:50:93:1e:9c:57:2a:a5:a7:be:4d:6c:c6:f9:cb:c7:56:e9:
cb:f9:e9:b8:d0:af:dc:ff:ee:7d:d5:22:ea:a7:aa:79:c7:64:
d4:73:a2:09:90:01:82:1b:24:39:08:e4:4a:27:c9:a4:99:ea:
5b:d4:01:f5:a9:0e:a4:13:e3:52:a9:aa:b3:43:6a:76:eb:f5:
81:59:dd:17:32:f7:19:49:fd:0e:5a:d9:11:66:97:19:74:aa:
67:6b:2a:5c:c6:6f:ca:75:69:0c:39:5d:80:53:a2:f7:0f:31:
70:ec:91:3f:66:69:05:f8:94:bd:da:03:05:2d:91:94:58:3f:
4b:ba:4d:b4:9e:85:6c:9e:b5:91:c3:5e:db:cb:22:ef:f8:16:
d7:58:81:6e:47:f6:2f:22:10:5a:8c:2f:dc:c8:7a:ec:24:16:
de:6d:e7:6d:7d:a9:e0:59:4a:46:1a:6d:0a:1e:83:01:8b:fb:
e2:ef:86:73:16:7e:47:87:00:6f:e4:cc:29:18:b9:c3:67:37:
59:5e:f3:ad:91:32:a5:36:0c:93:68:d8:e1:19:6d:af:1e:58:
04:9a:04:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:12 2026 by rpki-client