Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
File: 4qv2099Tm7fBaE-09GF50NoGsIM.mft (raw, json)
Hash identifier: gnoebojfWRVeg3dq/DfgOfwwuQ08k6WBPkLJ6wm9SYs=
Subject key identifier: BD:A1:34:74:6F:F9:C3:6C:C5:04:44:68:C6:14:F9:77:15:E8:C2:12
Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
Certificate issuer: /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Certificate serial: 019CA9B377AD3D25A2A6D36DB304866ACEA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
Manifest number: 0F26
Signing time: Sun 01 Mar 2026 14:00:36 +0000
Manifest this update: Sun 01 Mar 2026 14:00:36 +0000
Manifest next update: Mon 02 Mar 2026 14:00:36 +0000
Files and hashes: 1: 4qv2099Tm7fBaE-09GF50NoGsIM.crl (hash: YdgTKC1m3+B1xZ/RQyHDCObKnnzLStCv+OnUG/3Bo/c=)
2: GBj2xnkuHNgnAUINodxwL8rUWI8.roa (hash: Hvt6O7hlsMwc4JJYGSfH5m3V5DBbM1bLZ9uAWK2548s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:77:ad:3d:25:a2:a6:d3:6d:b3:04:86:6a:ce:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Validity
Not Before: Mar 1 14:00:36 2026 GMT
Not After : Mar 2 14:00:36 2026 GMT
Subject: CN=bda134746ff9c36cc5044468c614f97715e8c212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:59:e3:87:be:02:aa:15:8b:c3:fd:3c:88:
60:a0:77:f1:a7:59:95:23:5f:9b:27:52:48:67:ef:
7e:97:5d:62:2e:56:bb:62:36:05:74:8b:64:8f:7b:
76:de:3c:a1:36:c7:63:7d:e1:df:2d:b3:00:85:87:
45:4c:33:db:ed:aa:1d:30:a1:94:6b:ba:51:44:13:
d4:52:17:a0:a4:3d:0d:91:3b:84:0c:7e:72:31:65:
b4:22:06:c6:a2:94:cb:8d:c1:f9:21:fd:8a:4b:53:
9c:0f:f5:2f:fa:75:8e:21:32:b2:6e:ed:24:10:13:
ba:e4:55:f8:d5:22:fb:6b:03:29:59:99:12:75:de:
7a:58:8b:69:d9:02:3d:b0:a6:88:0c:b1:6c:84:b4:
eb:33:db:54:6b:58:74:91:0e:f3:f2:82:16:f8:e6:
9f:55:d3:25:66:f5:38:ab:2a:76:de:bb:f6:7c:46:
09:cf:9e:05:be:b3:c2:f0:f1:a0:28:e8:d6:99:36:
c7:2c:65:81:86:0c:01:ba:51:de:dc:75:7b:7c:6c:
25:97:76:ba:72:07:98:19:ce:36:3d:fe:8a:9f:68:
a9:96:68:35:4a:16:62:2c:87:fb:84:e4:96:6b:14:
2f:0c:dd:43:49:14:8e:f4:2f:1d:a8:f9:2a:c5:df:
2d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A1:34:74:6F:F9:C3:6C:C5:04:44:68:C6:14:F9:77:15:E8:C2:12
X509v3 Authority Key Identifier:
keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:0e:c9:ce:0c:77:79:a1:26:23:82:7d:95:af:cb:af:3d:e5:
f9:23:e7:e7:2c:ae:a0:10:f0:19:e0:45:69:8d:10:84:1f:d4:
7e:6f:a4:d3:62:b7:d0:fb:3a:0a:46:5d:69:7e:d4:ee:e9:68:
57:61:db:61:d7:88:f5:92:04:98:1b:6c:2b:2c:2c:0f:46:d9:
dd:95:ab:51:90:eb:57:c6:97:c7:73:a9:1c:19:b3:d8:af:44:
86:cd:13:95:ca:5d:86:9f:e0:09:b6:b1:d0:44:70:e8:27:9d:
d0:a8:38:a1:4b:50:83:b7:89:98:43:74:4e:b9:c4:16:25:74:
5c:ea:43:fc:59:18:ee:46:06:57:64:19:67:50:b5:fa:46:5b:
f0:ba:3e:26:86:4f:63:b8:f2:62:1b:e4:49:05:c7:9f:72:7c:
f3:e7:25:c7:2f:8f:62:26:70:9f:59:a1:9e:d5:b5:c2:16:4b:
bd:26:07:6c:ea:af:f3:c8:7b:64:aa:51:d8:ac:aa:c2:4c:fd:
3b:e6:1a:ab:49:8e:ce:32:fb:9d:78:66:2e:91:b4:77:4f:06:
6e:0d:3e:46:d1:3e:b7:d0:39:3b:a8:82:b9:b7:0d:6c:cc:a3:
eb:5b:c9:aa:a4:b6:7a:2a:4a:de:38:ba:67:21:e8:67:47:82:
fe:89:20:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:44 2026 by rpki-client