Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier: YZg/Ma3Gabtlr0a/9+wMePOQ0h1ahDrWOrrjeZXejVU=
Subject key identifier: 9E:4C:C3:B1:DD:64:FB:AA:1A:03:ED:9A:98:67:E6:F8:6C:18:5C:66
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 019CAD230A383E6B398CF1EB53CE61F491B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 06:01:20 +0000
Manifest this update: Mon 02 Mar 2026 06:01:20 +0000
Manifest next update: Tue 03 Mar 2026 06:01:20 +0000
Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: 4hOxHd/aHsM0lcDzJQB3c7icVRg3/kTmigxuwvjBoYc=)
2: Dv6DzYWC8QD9B_MZto_ESNK4j6k.roa (hash: punip1kHRpKApQYHrsUHwLPlb8qszTQ5w8o2U1ESN+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:23:0a:38:3e:6b:39:8c:f1:eb:53:ce:61:f4:91:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Mar 2 06:01:20 2026 GMT
Not After : Mar 3 06:01:20 2026 GMT
Subject: CN=9e4cc3b1dd64fbaa1a03ed9a9867e6f86c185c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:75:1e:b5:66:1d:9d:25:2b:8c:f6:ad:9e:
d2:15:5f:49:92:84:d6:07:0b:86:0d:6a:1b:28:c0:
63:4e:28:53:0c:92:fb:a6:15:ec:c4:c6:29:32:35:
06:a0:b3:9e:70:15:e0:5f:9a:aa:c8:82:22:75:cf:
11:e4:85:da:3f:ac:e5:8d:39:e4:d1:02:e9:48:8e:
81:02:98:bf:1d:24:14:a8:da:11:ae:12:20:03:33:
e5:0e:36:5c:2a:49:d3:f0:18:f9:88:64:3b:a8:48:
5e:03:46:18:b3:49:e7:ea:7b:2b:84:58:58:50:f8:
b7:11:e1:84:b2:9c:c8:6f:e2:01:25:d3:c3:a5:76:
ac:77:a3:3e:f5:b0:1e:5a:15:f1:82:26:e3:7a:3a:
fd:83:41:bb:ac:f3:a4:58:da:7c:31:e3:e6:81:53:
52:5b:95:d8:92:90:b0:95:3d:83:47:e6:92:aa:29:
f2:03:42:3b:45:02:b1:f9:29:b6:00:c7:84:d8:f8:
07:c2:64:58:8b:84:43:16:c8:76:3f:19:de:82:5d:
94:91:25:75:68:36:98:e3:5a:01:31:25:cf:96:60:
c4:63:fb:8e:9e:47:e8:f3:f1:c4:9e:ee:81:c3:46:
f4:7f:76:bc:ee:ba:b0:e2:18:04:6d:63:35:ce:9b:
d6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4C:C3:B1:DD:64:FB:AA:1A:03:ED:9A:98:67:E6:F8:6C:18:5C:66
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:19:af:05:3b:8a:36:33:b9:61:65:55:90:d3:db:07:50:0c:
bc:37:66:e4:24:f9:08:11:e5:ef:72:3b:27:f7:2c:69:03:e0:
84:d6:52:6d:50:45:ed:40:db:c5:9d:5b:2d:94:07:83:74:ba:
b7:9c:ef:a7:5d:ed:f9:56:13:a8:9e:2b:32:da:fe:a6:5b:2f:
73:c9:80:46:92:8c:e1:81:37:a1:94:b7:28:cc:f4:13:98:47:
8e:ad:d9:78:44:7c:9c:11:5a:f9:d1:1a:59:b1:69:c1:e5:c4:
61:85:2d:35:d4:ef:e4:0b:4e:20:27:07:e8:a0:1e:02:9f:46:
81:17:c2:d8:23:ac:43:ac:12:ee:e3:48:bc:e5:68:7b:ec:be:
89:0e:c0:b9:68:db:f0:b4:fe:13:b7:d6:cb:a3:0e:44:f4:99:
60:4c:97:c8:7a:8f:bf:0c:6f:80:87:91:c0:91:92:27:fc:22:
9b:57:b8:39:67:ac:82:09:f2:0f:f6:ef:61:b1:5d:54:ec:2e:
17:7a:a2:93:f0:9f:62:34:78:4d:32:ac:cc:3a:82:10:74:d3:
0a:93:c1:76:1a:48:6e:26:b8:45:54:1f:63:96:42:43:33:9c:
60:32:81:64:78:5b:56:03:a9:22:3c:4d:63:5c:ca:ab:17:b6:
f4:54:e9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:54 2026 by rpki-client