Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier: L+/qQMs4mhnB3+9LTNV4kXDtdmDqn8iuYRvw4NaSm7A=
Subject key identifier: 13:EF:A9:E8:4F:86:90:CD:9A:EE:D6:F5:99:C7:13:5E:7E:3B:DD:45
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer: /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial: 019CAAFCFDAE9A5B30CEC91B0E8535D5A913
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number: 0828
Signing time: Sun 01 Mar 2026 20:00:32 +0000
Manifest this update: Sun 01 Mar 2026 20:00:32 +0000
Manifest next update: Mon 02 Mar 2026 20:00:32 +0000
Files and hashes: 1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: dHc7FC0sCM3MGwX1UYRBM8MLObfK5jgT3usxIkq979w=)
2: gVfdWm0UhTm-_kYhCxfI_PPh9pQ.roa (hash: KPBhQabvMXA3ivJ7vLYo7qGQjlOgp6mXdXBE/OSlu9M=)
3: wZ9RkRMpZ0zSJRETkyLZujvEe_A.roa (hash: 8sVpKy5s2khImy6cMRVFY6mSlDYqhzQpPN1YY16omwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:fd:ae:9a:5b:30:ce:c9:1b:0e:85:35:d5:a9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Validity
Not Before: Mar 1 20:00:32 2026 GMT
Not After : Mar 2 20:00:32 2026 GMT
Subject: CN=13efa9e84f8690cd9aeed6f599c7135e7e3bdd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c0:b6:ee:a7:2e:91:92:c6:20:a1:7e:5c:6e:
d2:80:f9:b0:f2:dc:19:3e:c8:7a:c5:39:35:42:f1:
17:37:75:e6:8f:e3:f8:e2:55:c8:8d:54:a8:76:30:
34:2f:41:cf:5d:12:20:4b:d2:c3:7b:c1:78:a4:b8:
ea:c3:13:21:f1:96:17:db:90:5d:3d:33:6f:45:01:
b9:be:f8:60:1e:4a:73:af:5b:d7:d4:ec:b7:c2:39:
8a:f2:79:bf:3f:32:bc:24:3f:47:87:4e:32:e3:de:
34:e6:5b:1d:e6:f5:52:20:fd:91:c9:ce:33:a6:19:
06:ef:21:8b:94:4d:5c:7c:e5:12:e7:a5:2e:28:3f:
fd:75:87:7d:07:66:ba:fd:a2:f0:51:da:0c:b1:1a:
95:14:6b:7b:c9:5a:b7:7b:f0:99:b9:ba:a7:02:dc:
d2:4d:ab:32:bd:a1:3c:9f:25:71:63:99:a7:c9:15:
84:e7:dc:a7:c0:a8:2c:35:f0:25:81:3d:72:ad:a7:
bc:b8:09:9a:83:4e:9d:50:53:06:d7:85:7c:b8:b7:
5a:f3:12:d4:b2:9e:0e:f8:2a:3d:a8:5b:e5:56:72:
ae:1d:67:4f:39:82:b1:fe:14:15:bc:ae:d9:62:83:
48:30:d3:46:0e:db:97:68:28:aa:db:d4:8e:a3:0e:
8d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EF:A9:E8:4F:86:90:CD:9A:EE:D6:F5:99:C7:13:5E:7E:3B:DD:45
X509v3 Authority Key Identifier:
keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:86:7c:79:99:92:60:f3:70:4f:ce:08:0e:73:50:ac:9c:c3:
b2:12:22:2e:94:e9:2e:80:7f:35:25:7c:8d:a3:0b:ba:3b:d0:
2a:d7:93:9d:e4:3d:63:3d:c5:e0:e8:0b:82:eb:e1:ce:6b:b0:
c9:fa:31:87:45:0e:da:d5:a0:a8:f7:bd:d0:c9:b6:32:0a:78:
fc:36:f1:7e:fb:ab:eb:a9:1d:ae:77:c6:d8:1f:d2:41:fa:50:
09:1a:cd:5a:73:e3:01:44:c8:44:1c:96:8a:2b:84:93:4f:f2:
23:db:a3:f6:44:77:9d:df:0b:4d:6f:d0:26:b5:32:17:20:e5:
f2:e1:81:40:88:32:33:eb:3c:b2:c1:af:85:bb:51:64:29:c4:
01:8c:47:fb:7e:31:63:20:fc:a7:58:4c:93:e2:a6:68:30:58:
5c:e6:61:b1:14:65:3e:ed:ff:15:50:29:4b:e0:c9:53:c2:da:
a3:6d:06:f3:05:84:ff:4c:c8:77:dd:38:be:15:b9:b7:df:4b:
0c:28:9c:e1:19:80:f4:b0:68:23:f4:99:16:95:5d:2f:a2:ac:
49:7f:05:fb:7f:41:64:ff:27:ed:f1:ca:f7:fc:43:44:69:d7:
15:c3:b0:f8:5c:d7:63:6e:ac:4f:9f:c2:20:ec:24:c5:48:10:
c7:94:be:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:28 2026 by rpki-client