Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: mb/XngRZSG9rwI2sqzs3UCksiZiKPwcXBrx5IYDP1eU=
Subject key identifier: 72:D7:CD:49:BA:5D:B7:80:F5:24:A2:2F:7D:C1:4E:2A:9D:73:93:6C
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 019CA9EB42EAEF907150E428522806269923
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 15:01:33 +0000
Manifest this update: Sun 01 Mar 2026 15:01:33 +0000
Manifest next update: Mon 02 Mar 2026 15:01:33 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: w5NApbdwN9DSjp9shrDlAXx0yF2v/JLIY7ZlTxHJ6CE=)
2: CTp1GS2fYaQIruu9tWpwYU6UL5U.roa (hash: 1woVFgn9dNEGbuwWBJn4MG4ChUl6MAOmb6s5dU16yL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:42:ea:ef:90:71:50:e4:28:52:28:06:26:99:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Mar 1 15:01:33 2026 GMT
Not After : Mar 2 15:01:33 2026 GMT
Subject: CN=72d7cd49ba5db780f524a22f7dc14e2a9d73936c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a4:9f:4b:60:8a:88:1e:e8:c4:77:be:f3:02:
51:fb:9a:ec:c8:92:23:f6:b0:23:5c:92:22:12:e2:
9c:75:3e:a9:78:53:69:df:27:cb:ce:57:54:6f:ad:
f8:b3:9d:e0:1b:7f:ea:67:30:92:51:d7:e9:56:ca:
70:2d:a0:02:ff:0e:d8:d0:bc:53:6d:74:fc:e1:93:
23:42:74:f0:29:f4:28:8b:1b:4b:a4:8e:16:55:f5:
a1:75:46:bd:cb:6b:5a:3b:e8:7c:7e:4b:b6:d3:04:
e7:c0:74:58:94:66:fb:c2:18:43:3f:0a:b2:56:12:
45:b8:78:9a:ae:c7:4c:b2:0b:51:6c:8d:16:04:d8:
a7:8e:23:d1:68:29:25:4b:05:1c:28:1f:a2:10:d7:
f4:28:44:dd:d0:2c:ab:92:f4:67:20:7d:c3:63:2c:
78:8f:1b:ea:5d:90:e6:da:3b:1a:2f:9a:19:5c:4f:
2d:be:cd:b6:71:61:59:2a:c0:24:7a:95:d9:5c:0e:
8e:18:d3:53:37:14:e3:8a:06:74:50:c4:29:2c:80:
71:e1:88:e9:b8:15:97:f9:b4:4a:b4:06:8d:64:5b:
16:a8:7e:75:01:e9:0f:c7:52:3e:1d:bf:8c:4f:fe:
b6:ed:f1:e8:0d:bd:84:a3:fa:ce:1f:17:c5:8d:fc:
60:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D7:CD:49:BA:5D:B7:80:F5:24:A2:2F:7D:C1:4E:2A:9D:73:93:6C
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d5:8c:11:b7:36:d8:75:63:a0:b3:4f:64:5d:3f:03:0b:9c:
3f:36:8a:b5:82:87:d0:5d:72:78:c1:8a:78:fe:eb:ce:65:42:
a3:2f:03:0d:98:e5:1c:de:9b:62:bc:3c:0b:67:7d:65:7a:a3:
4e:77:ae:90:53:c2:5c:e8:b0:6a:d4:a8:24:3e:2b:0e:3e:fe:
be:dc:d5:33:dc:7f:7d:57:a7:6e:0d:88:77:15:18:cb:e5:e2:
56:f5:f4:27:11:73:6f:35:79:50:40:f0:ca:ba:a4:b5:87:e9:
03:a7:9c:98:b7:e8:d2:02:01:16:6e:e2:e7:5c:d2:37:8e:5a:
62:2d:3d:71:cc:7c:ee:0a:fe:4a:09:2f:3b:c6:41:fa:3e:78:
e6:ef:4d:82:c8:6c:45:b4:d0:90:07:dd:ed:ef:e2:e4:c7:44:
80:07:4f:1b:7b:58:19:42:ae:0a:00:cd:22:0f:a6:84:34:09:
0e:e7:73:d0:83:af:ac:47:0c:b8:8d:bf:dd:d8:94:fb:c0:95:
dd:6d:52:24:5e:25:ca:b0:64:30:ad:8e:ad:f7:cf:f2:85:da:
2a:0e:48:a2:79:7c:29:fc:20:23:7d:c4:47:ab:ab:d0:a0:0a:
be:55:15:00:49:58:bf:22:28:4e:ab:61:27:2d:b0:92:1b:90:
2b:8f:bc:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:45 2026 by rpki-client