Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: LrfdUT4dLLysxDGAy7Zd8hX7RYpfXFpLqOIqowJN4pU=
Subject key identifier: DC:A6:05:FD:37:C9:EA:F3:00:6B:0D:19:22:7B:50:F8:30:66:64:83
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 019CAAFCF56B53C228F1EC0F667949CCE858
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 20:00:30 +0000
Manifest this update: Sun 01 Mar 2026 20:00:30 +0000
Manifest next update: Mon 02 Mar 2026 20:00:30 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: NQND7X+l2MvlJAcvEKW8WclbgVV3qVi3lW6kAdTKWtY=)
2: KUodnXGsFwyNehqN551Z9d54ZJM.roa (hash: 6vmbRe0Gw7jdU6fIKbRaOK9xmSJJHl1pGRS+mY2Td7Y=)
3: RxQknk-i6X3uYtHklAq4xTvLElU.roa (hash: e3Fk8UZszFvxL51DyoJ+zqnCymh1Yk5n+ob0FV7BX9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f5:6b:53:c2:28:f1:ec:0f:66:79:49:cc:e8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Mar 1 20:00:30 2026 GMT
Not After : Mar 2 20:00:30 2026 GMT
Subject: CN=dca605fd37c9eaf3006b0d19227b50f830666483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2c:25:41:a9:60:c0:1a:29:f0:cc:04:eb:92:
41:19:27:f8:26:9a:a9:19:cc:3d:c5:59:ad:05:8d:
1b:a6:c5:01:0c:63:e3:d9:fd:30:0c:09:cd:9b:a6:
b7:4a:45:58:17:3a:c3:87:de:68:12:9f:f0:ca:aa:
1f:f1:00:87:41:23:2c:9e:7d:3a:9f:4c:04:a8:52:
6e:98:1c:16:7d:ed:51:db:39:9a:51:14:d6:99:4a:
60:14:32:d9:c5:70:e9:d6:c7:76:4a:90:2d:a7:5b:
28:e8:9d:dd:46:2d:98:a1:7c:0e:cb:93:38:9d:02:
2c:6b:1d:7d:01:6e:ec:8d:65:d4:98:b4:99:74:ad:
fc:7a:08:d3:81:4f:ca:a2:cb:69:e6:01:14:5e:e9:
0d:23:45:20:90:45:f8:3f:2e:11:13:a7:ac:11:d7:
cf:0b:4d:e9:ac:07:7c:42:2b:4f:45:7b:27:20:fa:
e5:a9:e1:4c:0d:f3:15:90:85:20:12:8a:c1:b6:41:
7b:7c:94:b7:d3:fe:9b:8d:c6:8e:dc:f0:87:47:9c:
1b:9d:db:3b:6e:b2:a7:47:db:0f:fd:8f:0a:fe:d2:
d2:ab:4b:74:83:60:6c:91:9e:cd:a5:47:7c:f2:ad:
78:57:4f:63:72:b5:25:fa:88:43:54:0b:bd:3a:98:
50:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A6:05:FD:37:C9:EA:F3:00:6B:0D:19:22:7B:50:F8:30:66:64:83
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8b:88:b3:61:ba:6f:f1:22:8b:26:e5:62:25:d0:95:dd:e2:
06:79:76:aa:91:f6:b6:1d:d3:f1:3f:30:dd:5f:34:7d:a9:2e:
b9:e3:02:17:c7:b5:bd:6f:bf:94:35:f1:8a:c1:da:fa:0d:c4:
75:7e:c3:9b:30:dc:1e:01:af:f4:3c:95:79:b6:82:26:2b:83:
da:da:90:31:7e:17:a8:0c:94:fa:d2:db:e5:6f:61:7b:b5:13:
ca:a3:d4:8f:10:fb:e2:17:b0:fb:6e:fb:bd:b4:16:fa:76:0c:
46:01:0c:04:0c:49:c0:1a:ec:15:d5:79:74:36:2e:f2:1e:49:
45:82:f7:56:fa:63:09:0b:b2:f5:c4:77:50:94:74:ad:59:a9:
76:bb:9e:86:6c:7c:69:68:24:ce:38:5e:41:c3:69:b1:ce:da:
74:77:91:3c:70:de:9f:f0:00:76:99:a1:66:5e:44:d9:f7:0e:
a1:4d:fe:88:35:88:0f:23:51:f6:cf:05:20:ea:95:9c:02:f9:
11:31:0c:11:70:d2:8d:a2:5c:c0:d4:4b:e0:91:ad:b3:8a:9a:
4b:7c:85:65:9c:60:d0:94:42:cd:1e:31:3e:7e:91:04:47:df:
d4:37:35:2b:94:35:17:1a:ae:8c:f5:b4:18:ce:b0:92:f0:02:
07:83:a4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:37 2026 by rpki-client