Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: TLqEurZ2PbDw9fZsp3tvprI90Hp46jtGbfF+AD5QA6o=
Subject key identifier: CA:0F:BC:13:D1:CB:A6:5E:02:2E:1E:2F:6E:4C:9C:C4:CA:22:2A:79
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 019CABD9CD551265224318C7BDB52ED55BE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:43 +0000
Manifest this update: Mon 02 Mar 2026 00:01:43 +0000
Manifest next update: Tue 03 Mar 2026 00:01:43 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: Dek/3wkdQn6Li4+Xw0A9aD3KbxZ2wPteL4AV0BMQCpo=)
2: CTp1GS2fYaQIruu9tWpwYU6UL5U.roa (hash: 1woVFgn9dNEGbuwWBJn4MG4ChUl6MAOmb6s5dU16yL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:cd:55:12:65:22:43:18:c7:bd:b5:2e:d5:5b:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Mar 2 00:01:43 2026 GMT
Not After : Mar 3 00:01:43 2026 GMT
Subject: CN=ca0fbc13d1cba65e022e1e2f6e4c9cc4ca222a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:4d:af:c5:05:23:0e:08:78:19:bc:43:80:
2c:f0:09:02:8e:27:72:18:0c:3a:28:58:bc:91:8d:
69:ac:9b:ed:4d:cc:9c:df:ba:cd:e5:2a:8f:9c:85:
9d:f4:46:a4:76:b1:dd:55:d9:38:3e:f9:1b:e3:ea:
a3:ff:f2:23:4b:d2:81:08:82:83:05:74:d7:86:6a:
0b:77:f4:ef:f5:7d:7f:e7:62:da:f7:99:7a:1c:af:
25:71:10:1e:67:63:aa:8b:7f:89:81:a7:6f:34:3f:
b5:30:db:0b:2a:6e:79:59:fb:34:b1:c7:95:56:38:
92:a5:e2:1d:ee:30:b0:56:b9:e5:0f:a0:45:c9:dd:
e3:99:ab:6a:3e:da:c7:00:e1:97:59:c2:a1:98:f2:
ca:77:4e:6a:fd:7a:a9:29:c5:3f:59:bb:f9:ca:7a:
09:b6:69:e9:66:2b:cf:81:ef:69:19:53:1d:b7:23:
06:5e:7e:8e:ee:5d:f1:93:02:a1:3c:42:ef:95:04:
2a:7e:6a:1a:f2:82:70:fb:37:3d:87:fe:10:c4:1d:
5b:83:c0:2e:6f:ba:04:54:8a:65:ba:3c:ef:f3:92:
91:72:1f:d3:ae:2c:46:50:e8:5a:a6:dd:43:1c:56:
ea:b3:6b:4c:95:dd:0a:59:5f:af:a7:f2:07:e8:9b:
e5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0F:BC:13:D1:CB:A6:5E:02:2E:1E:2F:6E:4C:9C:C4:CA:22:2A:79
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:7d:21:c8:84:a9:e5:f5:23:fc:b3:d5:72:37:fa:ca:04:88:
21:7d:c0:81:99:e6:9a:f4:40:25:e2:e0:d3:62:61:0d:a6:ca:
ff:68:65:20:c1:ca:6b:c0:55:4e:cf:6f:fb:53:d2:a1:7e:50:
c6:52:f1:4b:a3:1e:25:44:95:51:3f:33:9a:74:d0:5f:3e:b5:
6e:0d:59:a3:90:97:b1:46:50:58:63:8b:61:5f:83:72:e6:99:
78:c6:2d:1f:9f:38:bc:a7:1b:41:fd:7e:79:5a:58:8d:e8:9a:
e4:92:b0:64:37:84:6b:8d:98:a3:09:33:f0:37:2c:2d:8d:51:
36:05:0b:6d:f2:19:c0:a5:96:cd:1b:18:a4:11:fe:e7:11:b6:
21:d1:31:45:ef:be:df:18:29:24:ae:9a:39:ed:80:32:2f:7a:
7f:fe:65:a1:b8:49:2b:08:69:87:ee:40:c1:33:5c:f2:bd:45:
32:4a:ee:6c:bc:69:8d:b9:56:0f:b0:53:77:c8:1a:c1:43:93:
0d:9b:bf:0e:26:ad:56:5e:29:ee:d6:24:68:79:fb:9a:a9:7e:
e6:f2:b3:f0:ab:a7:b9:fd:47:66:02:42:88:ca:08:6f:25:bb:
1e:ed:bd:4b:e1:c5:11:8c:63:23:3a:ab:10:46:45:28:8b:ed:
a6:31:d4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:56 2026 by rpki-client