Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: hJQPIPoOWgi23q01u3rwA2nND+PmhrgK7XPDcwPc7to=
Subject key identifier: 4C:D6:26:CC:EF:67:47:32:AC:BE:1E:5D:AB:04:CB:5A:85:B5:DD:7E
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 019CAD90C2B81EE30B83D7B3A5993FFE67E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 1559
Signing time: Mon 02 Mar 2026 08:01:11 +0000
Manifest this update: Mon 02 Mar 2026 08:01:11 +0000
Manifest next update: Tue 03 Mar 2026 08:01:11 +0000
Files and hashes: 1: 1eykC-2BnVsWo7Ye-BCUzkQkUoQ.roa (hash: XORzzia+v0TQle6S3eSeTmbfXijHFXJwl9VwUUmAcRw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: /Vav/xDpS84C7qkVuIrYlh6jG9vbpwyCNeGSXkRRzf8=)
3: NJ7RBZaPFrtdiuUdVgaQ-xGvohc.roa (hash: 3elpIcyAaRbsEU++I8EIRcmrePMiDX7Ycf8Xs+7sNy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:c2:b8:1e:e3:0b:83:d7:b3:a5:99:3f:fe:67:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Mar 2 08:01:11 2026 GMT
Not After : Mar 3 08:01:11 2026 GMT
Subject: CN=4cd626ccef674732acbe1e5dab04cb5a85b5dd7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6d:35:c5:d1:38:b2:2a:23:71:e8:65:94:16:
4a:72:07:23:ad:b0:5f:a3:42:82:0f:33:5b:f6:d3:
01:38:67:e5:50:2e:ac:90:5d:f7:b2:28:6c:a1:cb:
25:0e:3c:1a:b6:39:3e:2e:ac:e6:56:57:d0:1f:9b:
7d:95:89:c9:54:dd:5e:71:7d:d4:7c:4b:a2:fb:18:
06:d4:66:12:b6:e0:67:fb:f4:50:15:77:42:51:3f:
31:6a:03:4c:69:60:02:28:ce:cf:4e:c3:d0:7a:71:
18:81:e6:91:77:03:0d:10:7f:5a:ea:57:24:42:f1:
11:9c:0f:5a:d4:40:20:87:c9:06:70:29:d6:56:02:
ea:30:e7:8c:62:64:dd:d1:b9:a7:0a:b9:d0:0e:f5:
90:db:e5:f9:15:8b:f5:eb:63:7c:cb:b8:73:81:96:
bc:f3:94:46:5c:d7:5e:93:2d:d7:60:55:7f:20:05:
85:14:ac:01:98:e1:bb:a9:69:12:03:82:23:03:5a:
a8:1d:7c:19:27:3e:26:b9:03:09:80:2a:c1:0b:ab:
48:e1:b4:a0:3d:df:84:f7:4b:b5:e4:71:8c:d8:49:
e1:f4:0b:27:51:2e:2b:09:60:37:69:70:36:02:57:
1b:c0:1a:e2:9a:22:48:4a:7c:eb:6b:f6:9d:2c:7e:
05:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D6:26:CC:EF:67:47:32:AC:BE:1E:5D:AB:04:CB:5A:85:B5:DD:7E
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c3:0c:2a:c9:d5:71:9f:ae:b4:de:28:a1:87:20:b1:ef:13:
2c:bb:70:81:d9:71:b9:3c:ab:d6:ad:0d:54:4f:d9:f5:34:03:
8e:11:ef:91:9e:f3:26:93:0a:ff:00:27:ab:0c:41:48:22:17:
f8:7c:53:cd:d6:52:ff:7b:c6:4b:ec:0e:0b:bd:3e:4c:9b:8e:
84:c4:71:4e:2b:49:5c:4e:a1:c2:4d:22:97:33:a7:41:8a:c9:
61:53:77:bd:46:be:8b:27:bc:b6:21:47:19:55:f8:fe:15:41:
cc:87:70:4a:cf:c0:cf:c7:48:d4:9a:b7:7c:70:6f:d1:5d:f7:
75:60:0e:a3:f5:d7:ec:af:b4:d5:64:13:0c:e5:ac:98:5f:21:
c5:c6:15:ec:ba:b7:56:fa:4f:b9:d7:0c:1a:8f:fd:57:e3:ed:
15:27:20:42:56:94:6a:a0:d5:6a:f5:7a:7d:ff:3f:d8:e2:16:
76:e9:88:e9:a3:5c:67:2e:a0:12:ae:b0:99:99:6b:f3:4f:4a:
9b:63:a7:df:4a:ab:da:c9:41:71:cc:c4:e4:70:df:af:6b:38:
3c:1c:60:bd:f9:fb:47:ab:b4:98:47:61:f2:de:50:08:99:34:
64:be:de:e4:f5:83:61:94:c7:b4:3b:46:70:0a:0f:5a:20:43:
0d:aa:c8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:44:02 2026 by rpki-client