Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
File: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json)
Hash identifier: X1Q1CYJEl40dublnlEus0aw6eo1bWB3Rvd5p5vTOcCY=
Subject key identifier: AF:BC:BB:BB:17:43:8D:D1:CB:73:50:71:75:D4:E0:CF:72:FD:46:59
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial: 019CAC47303C71AB53DCD845F86617F66885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
Manifest number: 0E8F
Signing time: Mon 02 Mar 2026 02:01:12 +0000
Manifest this update: Mon 02 Mar 2026 02:01:12 +0000
Manifest next update: Tue 03 Mar 2026 02:01:12 +0000
Files and hashes: 1: 0gBlJTwbURvMna08HGkpbxF3GuY.roa (hash: +AHpd/2s8j+dmg3ibj8zF8ms1DXXH4Z/pjBe0gUwZIo=)
2: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: UlMLLjXH/9XjjP1rrDv+OFtXjmVdxG9PYIgAxCan/Bw=)
3: olTnJZOeBxSGSHdFIbwThqvRrwM.roa (hash: 7ZVXpb1BUMxPZ9Jc/FGOlyUwvnj11IZVQ1xQChFmpVk=)
4: v41zPODCDOKyhQh2VYGpMRTzGHg.roa (hash: 9WUhwKCjU+8D4DCY2CpCRa3hsSY6UWz+kGJAJ8Vl43I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:30:3c:71:ab:53:dc:d8:45:f8:66:17:f6:68:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Validity
Not Before: Mar 2 02:01:12 2026 GMT
Not After : Mar 3 02:01:12 2026 GMT
Subject: CN=afbcbbbb17438dd1cb73507175d4e0cf72fd4659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:ec:32:c7:3d:3a:c2:6b:75:e8:4b:17:78:
40:d2:f6:0e:f5:af:bc:b2:c7:27:79:a8:10:aa:fa:
bb:e4:29:2e:a1:12:f5:6e:a1:90:30:a4:5f:89:ff:
98:17:31:82:c5:ae:f3:d1:d7:ba:2a:b8:a9:7e:f4:
a3:0b:0a:b1:ed:c0:90:90:dc:85:4a:71:ff:2d:98:
97:70:3b:a6:7c:e8:fa:ec:b1:ae:d0:b2:7b:e8:f9:
56:15:87:85:a0:d2:90:67:1d:f7:e6:0a:59:37:f9:
47:48:4c:e9:70:a8:f3:be:f7:b0:f9:05:a2:ad:a2:
6b:23:02:f1:73:f0:49:87:d8:fb:c1:dd:b5:4d:47:
38:7a:b5:c6:26:88:b4:d5:fa:9f:93:e0:28:0d:fb:
d1:73:7c:b1:e3:69:71:6e:0b:08:e7:85:67:2e:3e:
b6:60:70:71:91:43:a2:d1:eb:24:2d:dd:e6:09:d9:
e8:41:9f:c5:70:2b:b7:80:2b:4f:4d:84:7f:eb:f3:
00:cb:66:40:9b:e2:1a:63:71:cb:35:14:59:10:de:
f7:69:f3:de:7d:d0:39:e5:81:01:8b:ff:11:cd:65:
b3:7b:b6:1e:fe:43:cf:a7:61:69:27:74:4c:f6:cd:
fe:1e:8c:83:1f:68:af:00:56:c1:6d:4a:82:12:ff:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BC:BB:BB:17:43:8D:D1:CB:73:50:71:75:D4:E0:CF:72:FD:46:59
X509v3 Authority Key Identifier:
keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:c6:e1:3f:b4:eb:7b:cc:8b:b1:13:53:ac:56:4b:c4:81:e2:
48:56:9b:d4:a3:ef:9d:ea:c3:a4:3a:00:f5:60:2e:c5:59:4f:
a3:99:e7:dc:41:5a:09:d0:bd:4f:43:e0:9a:81:8c:ee:94:2c:
7f:da:a7:60:7c:90:b9:76:15:99:d6:c2:95:d4:fb:bc:0d:3b:
27:e0:78:11:0a:d3:48:ff:30:34:ae:eb:af:b4:b2:4c:6d:13:
c2:cc:49:c1:2c:f8:23:19:07:53:44:d6:4f:78:3c:46:a2:4c:
29:df:07:b2:ab:53:7c:5f:12:f7:60:09:1f:bc:64:69:66:f0:
cb:d8:3b:e6:98:35:80:1d:40:69:c6:e1:16:b8:c8:82:b7:8b:
09:98:e4:fa:ee:f8:48:58:e5:58:56:0d:44:bf:08:85:2d:92:
e3:dd:b7:25:e9:58:7e:0d:57:fa:69:3f:90:fa:aa:63:fb:8b:
0c:5b:6c:09:7f:83:6b:2a:bd:2c:e7:a7:e4:e5:ec:03:fd:d6:
89:9e:05:50:c5:50:06:e3:57:c0:db:53:e9:48:85:42:f4:03:
f0:d2:6c:fe:b7:ec:07:27:a2:21:fb:e1:f4:6c:d2:54:d0:36:
8d:ad:50:b8:3e:ee:1c:69:97:cf:86:45:bd:62:16:9e:b4:88:
d6:97:96:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:39:04 2026 by rpki-client