Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
File: 4toj07kw1MHzrHMGXXGmB8NdKQA.mft (raw, json)
Hash identifier: BjfMoef4MJfdvgT+lzdvNRjBWPoaqOQ+yJIlvWtUn2I=
Subject key identifier: B7:EE:48:96:71:25:05:09:CE:B8:0E:83:97:3A:A5:30:3F:39:50:5B
Authority key identifier: E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
Certificate issuer: /CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Certificate serial: 019CAD9076AFFF8A1AE1C2421BD62A3DC30C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 08:00:51 +0000
Manifest this update: Mon 02 Mar 2026 08:00:51 +0000
Manifest next update: Tue 03 Mar 2026 08:00:51 +0000
Files and hashes: 1: 1-ZObGXZbr8QMqAx61fUCBd3oEIk.roa (hash: mNfBmy+QZavj44C/mg50P1ETt/knXxq4fEIaA8TAW1A=)
2: 4toj07kw1MHzrHMGXXGmB8NdKQA.crl (hash: loaigygLSCze52Uxr9LUxvFqEhJ3574UBCrdDQmHXRc=)
3: 5aSu5rDgohcAcFRBlVeL4KQf-Bc.roa (hash: TBrAPV4bOwpXI3ikK/+R0NLpPd2CyHMsQiSsoHb0Hng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:76:af:ff:8a:1a:e1:c2:42:1b:d6:2a:3d:c3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2da23d3b930d4c1f3ac73065d71a607c35d2900
Validity
Not Before: Mar 2 08:00:51 2026 GMT
Not After : Mar 3 08:00:51 2026 GMT
Subject: CN=b7ee489671250509ceb80e83973aa5303f39505b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:3c:80:57:b9:95:19:f1:bd:2d:c7:07:ad:cc:
cc:f7:60:cc:ed:d2:35:d9:2b:01:78:d3:b5:4f:71:
df:82:83:29:12:8f:e6:e3:81:e3:0d:a8:03:47:d5:
15:b0:72:47:e5:64:7c:91:bd:54:07:96:cb:5d:01:
f5:20:1a:72:e0:ea:66:b9:65:fe:59:d9:cd:7e:1f:
2e:03:28:61:40:cc:79:86:fc:f8:35:dc:38:29:98:
90:16:96:c5:ba:20:43:ad:b7:8e:61:63:90:3a:77:
d7:14:36:20:9d:f8:95:86:13:ef:67:be:15:cc:9f:
94:81:e9:53:b3:40:80:55:37:63:f1:5d:35:05:19:
9b:62:04:a3:c3:d0:18:03:fd:68:91:87:6f:f2:e9:
27:4c:60:36:d4:eb:07:78:36:fa:11:03:bb:10:00:
6f:5b:5f:4a:a2:95:2d:b5:15:da:5d:c4:64:38:47:
65:17:e8:43:5f:7f:13:97:63:42:d1:b2:d1:b1:a2:
0a:03:93:d4:d8:9b:d3:4f:d6:64:7b:9c:56:4a:a6:
06:d0:34:f0:cc:59:2f:30:5a:d4:ca:3c:96:94:2f:
b5:d9:95:2c:f3:e4:e6:c4:3c:37:60:23:9b:fd:cf:
b1:8a:fa:cb:f4:92:a9:c7:b0:18:bc:0a:be:fa:7c:
cf:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EE:48:96:71:25:05:09:CE:B8:0E:83:97:3A:A5:30:3F:39:50:5B
X509v3 Authority Key Identifier:
keyid:E2:DA:23:D3:B9:30:D4:C1:F3:AC:73:06:5D:71:A6:07:C3:5D:29:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4toj07kw1MHzrHMGXXGmB8NdKQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/deebb8-ae86-4694-a972-827a0ac04a9d/1/4toj07kw1MHzrHMGXXGmB8NdKQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:b7:9a:5c:f6:eb:62:ea:39:eb:22:f2:86:0f:60:08:7a:63:
c6:7c:94:0f:2e:a0:09:2c:17:9c:0f:60:87:0f:b0:0e:96:ed:
89:5e:30:74:61:9c:49:eb:17:60:ad:34:da:3e:1c:b8:a5:59:
02:ff:52:45:2c:23:5b:4d:c1:30:5c:87:dd:52:93:5b:5b:2b:
0e:2a:89:bd:81:b5:63:84:41:6f:58:bd:df:73:7b:a5:cb:5a:
72:30:d4:0d:a2:ff:51:c7:aa:32:fb:42:86:4c:ee:da:bc:35:
ba:82:09:8c:a5:53:b9:40:0b:9d:15:db:6d:d5:33:6d:1f:df:
23:67:e4:ab:d5:43:0f:84:3c:16:b3:66:28:52:58:20:b6:a4:
17:8a:c1:d2:df:2f:1b:47:c6:9c:71:aa:57:da:56:9b:85:a3:
56:98:6c:dd:6a:70:3d:bd:a8:97:bb:19:11:c1:9b:fc:4f:59:
6c:71:3d:76:4a:a6:6c:bf:f2:f5:8d:f1:42:12:41:34:3d:06:
ff:0e:64:ee:7c:76:ad:79:fb:1c:c4:f7:93:40:e5:62:b3:43:
d4:ad:d8:1d:c1:ba:dc:69:29:74:05:6f:37:60:90:72:c5:ce:
af:02:a1:54:0e:b7:cd:43:17:a6:bf:c3:49:3f:55:87:ca:7c:
af:a9:e6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:37:08 2026 by rpki-client