Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier: 1mUAdjlOUQI5p5JozoaAfYpQVmvChN8fi4pSvST5ET8=
Subject key identifier: 79:29:2A:29:25:28:EE:EF:C3:70:58:F6:35:FF:EB:5E:FC:E1:91:54
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial: 019CAB3452F70686120BE866174880BB45A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number: 12D0
Signing time: Sun 01 Mar 2026 21:00:58 +0000
Manifest this update: Sun 01 Mar 2026 21:00:58 +0000
Manifest next update: Mon 02 Mar 2026 21:00:58 +0000
Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: MjvQHW2qRpEZtDyJEV9M1IulZQlRKLDaDL95+JZNaoU=)
2: _wcF9jM9pkn5W8HUmqNyP2YzoVE.roa (hash: YR4TzWwhbeU41La1eRUFtaH6lftYq8CO9g5moHbgBbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:52:f7:06:86:12:0b:e8:66:17:48:80:bb:45:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Validity
Not Before: Mar 1 21:00:58 2026 GMT
Not After : Mar 2 21:00:58 2026 GMT
Subject: CN=79292a292528eeefc37058f635ffeb5efce19154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:a6:ef:75:55:64:1b:23:6c:4f:8f:52:d0:
0a:35:e2:67:6e:53:7c:9b:71:56:2d:81:09:04:78:
1a:0d:3c:1b:5b:be:1f:09:49:79:4f:f5:51:a8:5e:
2b:ab:36:e0:2c:de:cc:25:4d:f4:86:ef:03:d0:40:
1f:76:7e:76:38:0a:33:fd:58:7b:33:8f:f9:27:5d:
0f:5b:5f:f1:ac:c6:03:8e:76:a5:ce:63:4a:3f:6b:
ac:54:7d:4c:5f:6f:b4:14:f9:46:43:a5:7e:87:52:
c4:49:b8:17:70:e1:bf:b0:b8:2f:9a:72:1b:c1:e1:
f0:ae:a4:21:0f:06:d1:fb:fc:96:64:5b:76:ba:73:
bc:28:14:c9:d1:06:5c:2c:d4:69:dc:47:b2:93:ed:
ac:4a:73:10:55:cc:21:b9:02:a7:47:ac:ac:c2:b7:
d2:84:0c:13:c8:00:86:24:b4:0f:95:15:d8:6c:68:
cd:f1:ec:03:90:f2:72:68:56:11:cd:25:57:b6:32:
3a:15:8f:72:c9:98:b4:bc:11:a3:0b:11:f6:17:0a:
07:24:3a:ad:6a:87:1e:40:26:9c:b6:08:36:b8:b3:
ba:25:53:62:c5:0f:17:af:1b:8c:9f:7a:e4:72:e6:
6a:ac:05:86:d4:37:ca:ac:0a:68:ed:97:5f:91:fe:
80:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:29:2A:29:25:28:EE:EF:C3:70:58:F6:35:FF:EB:5E:FC:E1:91:54
X509v3 Authority Key Identifier:
keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:93:90:ff:34:7b:26:bf:da:05:3b:26:b9:ee:4a:9a:30:91:
12:1c:cf:9f:90:d5:20:ee:81:91:66:dc:6d:2c:bc:7d:ab:b8:
eb:49:08:46:16:cc:db:a9:39:b1:ff:f1:33:ef:ca:9b:60:bb:
d0:7e:ca:aa:ac:d9:c0:17:5b:88:21:df:e6:91:a6:a6:08:9d:
4f:2e:9c:69:38:da:d7:b9:96:04:08:a0:fc:e3:ef:df:10:33:
e8:8c:2e:2d:a0:9d:fa:c9:b0:c8:9f:bf:88:1d:61:f8:ad:96:
17:8b:25:53:81:f9:4f:7e:b2:ed:4e:7f:b7:8f:43:a4:1f:e5:
46:1a:7d:6d:f6:4f:86:ba:ee:13:15:10:8a:9e:70:a6:ae:4f:
b5:15:69:69:97:b8:31:0e:5f:c8:04:70:f6:b7:17:3a:e4:3f:
66:30:9f:9b:bc:4e:29:f8:18:e9:1f:6c:3e:66:9f:7c:fc:df:
43:52:1c:7f:e9:0a:cb:73:a9:ba:39:cb:23:0f:78:7f:cf:cd:
e8:d5:e5:25:a5:5a:a3:d5:33:72:0e:71:13:32:ca:9c:ba:d7:
c5:40:0d:f9:17:8e:a5:bc:a2:28:8f:0a:d6:1a:5f:60:ce:6c:
33:9c:4c:2a:69:6f:eb:8e:79:b7:a0:c3:37:1e:27:a5:e6:ac:
34:a6:ef:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:23:23 2026 by rpki-client