Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: /Jccjb6sJ1M4g914GXVug50rTOZJylAIgY6jYF1KOWg=
Subject key identifier: 0D:31:D5:2C:57:46:8D:4F:2D:D6:11:93:74:C7:6D:58:A8:37:86:70
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 019CACB47A31AD7F0DFAE09AFE1976BEE296
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 0A85
Signing time: Mon 02 Mar 2026 04:00:34 +0000
Manifest this update: Mon 02 Mar 2026 04:00:34 +0000
Manifest next update: Tue 03 Mar 2026 04:00:34 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: OoT91IN06ybhd5ly1HKr6inVX9vB8yGBoCKxQsCZ+UE=)
2: OPFTuLGWkU6mUdnCpgOtMP0wcEc.roa (hash: mYTV++dJNwiiA96b08GGaua3APnQu69gvPcnLc6GiRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:7a:31:ad:7f:0d:fa:e0:9a:fe:19:76:be:e2:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Mar 2 04:00:34 2026 GMT
Not After : Mar 3 04:00:34 2026 GMT
Subject: CN=0d31d52c57468d4f2dd6119374c76d58a8378670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c8:07:b5:bd:43:30:85:79:e8:25:e3:5f:cb:
e7:a7:22:84:17:3a:4d:3b:ad:49:da:25:14:6f:c3:
4f:76:00:34:b8:90:31:7a:3b:77:2a:54:50:d7:8c:
9f:37:20:cc:e3:60:3d:34:03:80:1e:37:79:3d:8b:
6b:14:2a:af:1b:af:e8:c4:61:82:6c:1a:2d:5f:27:
a1:8d:dd:46:e2:da:5e:7e:3f:08:70:b9:92:08:9d:
50:99:a6:07:45:97:58:fa:df:2e:17:7d:73:b0:f1:
4e:18:40:79:29:0f:1f:29:8c:c7:78:59:7c:6a:5a:
97:a3:ef:18:69:89:7d:79:c6:5d:e5:c0:06:5f:ad:
7d:7d:1e:fa:41:ff:91:ab:e1:ac:d4:b5:6e:6f:cd:
42:b3:50:b3:da:6d:ae:fd:aa:ec:8f:71:de:cd:54:
c7:8c:97:2e:20:10:49:7c:0e:8b:80:59:6b:5f:1e:
a2:11:26:e1:18:1e:bb:bd:c2:40:52:e9:94:16:a2:
c2:87:13:4a:13:12:5a:47:a3:1e:aa:79:83:63:a9:
24:75:2a:05:c3:bf:89:b6:e7:bd:fc:81:26:85:8b:
4f:2d:45:7a:24:de:2d:de:b9:67:6a:53:9c:2a:37:
62:cf:e8:4e:bd:09:77:81:0c:f0:ad:a1:54:f6:d9:
e7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:31:D5:2C:57:46:8D:4F:2D:D6:11:93:74:C7:6D:58:A8:37:86:70
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:21:25:3d:fe:4a:af:50:45:31:2f:11:06:00:20:3b:00:5d:
f8:9f:f6:25:82:2c:78:89:a6:bc:98:ac:48:e0:00:83:09:b6:
00:c4:07:b0:d7:18:88:39:2b:ba:ae:f7:5c:45:d7:13:53:a5:
64:3c:15:e1:cc:d7:fc:3b:5b:cb:4d:b4:50:33:5d:db:ad:d3:
c3:11:65:cb:cc:f7:4d:41:82:9d:f7:2a:d0:26:13:16:a0:6a:
98:47:22:22:0b:50:fa:1b:b1:67:ce:0a:8f:d0:9d:e4:c3:af:
b3:96:58:2c:d7:b9:46:9c:67:c0:59:d7:32:81:d2:86:f4:8d:
d6:cc:6e:8b:9b:3a:7e:62:d5:3d:75:42:b4:c3:84:8a:a4:06:
9c:95:16:ba:bd:ca:85:74:c1:d5:8e:fc:46:16:eb:17:12:ba:
7e:f5:2a:ce:6d:ce:52:cf:e1:68:c3:7d:14:df:87:8e:80:e8:
8c:47:88:30:56:1f:4b:b0:b2:1b:84:ea:23:f0:a2:01:0e:20:
26:64:6a:e6:c2:7c:66:20:9a:78:c3:9c:50:80:d8:7d:2d:12:
3d:57:95:68:1f:9e:a5:bd:35:65:6a:06:02:85:da:63:9c:c7:
02:7b:7d:6f:82:be:a3:79:04:60:5b:5b:95:52:04:1f:5d:ed:
36:06:23:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:43:51 2026 by rpki-client