Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier: czYuE1L/VtQBbvF6fo3CYXY/5zuCwG1gqmnw6tnBIsE=
Subject key identifier: 8C:61:E7:2A:06:9C:E7:9F:DE:18:9D:48:08:08:9F:4B:32:89:56:95
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 019CA9B36DC48A70CD5EF9C582AD205FB24B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number: 1855
Signing time: Sun 01 Mar 2026 14:00:34 +0000
Manifest this update: Sun 01 Mar 2026 14:00:34 +0000
Manifest next update: Mon 02 Mar 2026 14:00:34 +0000
Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: 501eOjJ2QVIcMs8/RIWo9Av5x9kv8WB/le3atwVoSpI=)
2: 5d9WvtqIsOCyvbUcr5D_FRPH5Yk.roa (hash: yErbq7mA/v1CRRXIibE2b1jcvOm0eNRkCuG1G2/AujI=)
3: 7CZf3UnE-jA9uTeSjBMlOjjI3fM.roa (hash: MQOCesarhI3HhsKusfQyk40aeM8YtqN2eB0ejbnMM/I=)
4: Ac8vxDLO-J9cTY-JVdTmb3EHJDs.roa (hash: 2eX5MHu5LgyU0k8rt9ef2wRehXYhklKEAnQA55C4vII=)
5: IuFmJvsHD5o_taQdbTSGHbIC8dg.roa (hash: +9JczVarrdbSoQeefrGk4Nw/SgcDEq/FGN8i6yrs6mY=)
6: Z3lvH4I5-97Ow06XMqsLwVqp0Ec.roa (hash: iI/LC1PR16tGdeoQsiXBq2WLWRw9EPLyIdDe0SseMUc=)
7: bJ-s2NJ5eywWHFMovcD-LOMTmjU.roa (hash: xgxhhwvW3lfo02BHcwDD9zbM9SrnrImkop0rHRy8xrc=)
8: rM4I0AQSRdTKZg9T3uE_UJmHiKc.roa (hash: EFWnpWFQadvqrTtsamGKwLlcYP7tUkP3TN3iAl9gbjo=)
9: taGvD6SXjEvbaJGn53r208xaYEE.roa (hash: ZQ0KwDgCJCESxM+NdArXimzLNrqIKiJF2FQZvSP0rrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:6d:c4:8a:70:cd:5e:f9:c5:82:ad:20:5f:b2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Mar 1 14:00:34 2026 GMT
Not After : Mar 2 14:00:34 2026 GMT
Subject: CN=8c61e72a069ce79fde189d4808089f4b32895695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7b:d1:fb:0a:c7:f8:d4:6c:3e:48:50:a2:36:
20:d4:ce:ce:86:9f:56:dd:20:f9:f4:29:d0:a9:28:
ca:73:e3:9a:8c:6f:4f:3c:f6:d9:ad:e9:bd:3b:04:
99:a7:cf:57:17:05:92:d4:14:ef:ff:f1:54:55:dd:
e7:e3:4e:f0:1b:4c:c4:ec:b0:e9:20:af:cb:82:8c:
85:7d:32:2c:df:d3:63:55:14:b6:22:ff:ff:64:9b:
ce:e6:4b:c1:c0:60:b1:b8:d2:76:be:5d:14:7e:00:
d1:cf:fc:fe:cf:b3:56:78:61:a4:9f:ec:ba:48:a9:
16:d0:91:ed:ed:b1:4e:85:99:53:b6:c2:86:92:da:
fc:3d:ae:11:ce:8d:0e:02:7f:91:57:80:7d:61:39:
14:c0:7a:b7:9c:ca:b9:fd:3b:09:38:f1:62:ce:6a:
c0:21:39:01:79:be:93:bf:e1:da:40:ef:12:d5:17:
06:7b:0a:ff:b9:3d:b5:0b:f6:9d:8c:3e:e7:06:47:
d5:69:a3:9c:b3:db:6a:c3:a7:de:e3:ef:26:4f:23:
b5:35:67:ce:21:32:70:9c:82:0d:57:65:1a:39:ef:
51:b2:46:71:fa:a8:ab:f5:d3:7f:1d:9d:ee:ba:6b:
e5:d2:f0:fc:1a:1e:27:97:7a:e8:12:01:51:31:3c:
83:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:61:E7:2A:06:9C:E7:9F:DE:18:9D:48:08:08:9F:4B:32:89:56:95
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:84:38:b8:aa:a0:a3:0f:13:26:f9:1f:4e:61:38:30:b0:7f:
cf:2e:1f:10:f1:40:ce:6a:6b:82:02:b2:4b:a9:9e:ad:8b:6f:
1f:38:aa:3f:17:b7:6f:7f:7c:95:5b:02:d7:86:c2:d6:0b:6f:
83:4f:e5:f8:c0:4d:1c:fe:5a:a7:63:25:87:50:1c:79:01:48:
d3:69:fa:cf:1c:6b:12:ab:d8:9f:a9:62:f1:ff:26:8e:97:6d:
79:4c:44:0a:51:2a:1b:11:3c:ab:84:87:51:31:5d:3b:d2:cf:
bb:38:7d:69:30:ae:37:f5:d0:30:54:24:c2:de:e6:d4:11:ba:
00:04:bf:68:4d:15:73:c4:86:5c:95:d0:f1:e9:ed:a6:bd:49:
87:ff:9e:4a:ba:a0:af:d9:bb:44:4b:88:b0:38:d9:18:16:b6:
e7:a7:bc:74:4d:0e:ab:9a:7d:f7:0b:a6:04:a4:b1:02:9b:5f:
04:f6:1e:30:4c:10:9b:ee:52:04:0a:27:86:36:08:b0:56:89:
36:46:82:d3:3a:c6:3f:52:ec:7d:66:a7:b6:49:54:b8:3c:0f:
2f:f6:4b:3e:23:29:4a:45:c5:35:5e:4a:95:46:22:d3:4d:56:
c3:63:14:2f:75:c5:4a:92:0b:67:18:6e:6a:ed:41:70:85:3b:
8d:ab:87:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:12:56 2026 by rpki-client