Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier: MoMNnWhXcNb5tvUD/fdk46EC0SKzE6nH1vLfZ13d7QE=
Subject key identifier: 33:0C:24:53:1F:86:E5:5F:CD:4F:44:05:47:33:6F:14:4C:AC:57:49
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 019CAB34A2669832F8A1B1ADA9D2527595C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number: 147F
Signing time: Sun 01 Mar 2026 21:01:19 +0000
Manifest this update: Sun 01 Mar 2026 21:01:19 +0000
Manifest next update: Mon 02 Mar 2026 21:01:19 +0000
Files and hashes: 1: 3Kqw9tljPQG5d-js0HaYveBuk-4.roa (hash: D1nlz+BjAzn+Pt0loadLXbRjBXPaaFlVhaNwxEkZAGY=)
2: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: 8I20okLrpDIAfL5yUWtLOdkQtVIjjFzLjwr0GUPQIaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a2:66:98:32:f8:a1:b1:ad:a9:d2:52:75:95:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: Mar 1 21:01:19 2026 GMT
Not After : Mar 2 21:01:19 2026 GMT
Subject: CN=330c24531f86e55fcd4f440547336f144cac5749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:74:75:f6:4a:f5:f5:3e:36:e5:3f:59:a7:55:
e5:ca:7a:38:cd:46:05:41:9c:8f:b8:b9:e6:cb:b8:
bd:1e:db:f5:d3:e5:fe:36:1a:70:20:16:19:1f:0f:
f4:c5:81:7b:80:50:84:66:e2:db:ab:3f:8d:aa:0a:
96:52:ea:8d:a1:4d:1c:e3:ba:2f:96:a8:3e:dc:dd:
0a:19:70:1f:56:09:26:00:98:b5:42:4e:5f:2d:e5:
2f:a8:3b:95:37:eb:69:2a:63:c7:b5:3d:e1:b7:41:
13:6c:a3:7d:c8:58:f7:80:b6:09:f0:32:92:4a:2b:
bf:ed:c7:69:e2:13:29:04:08:38:01:3e:c9:fa:2d:
61:66:fe:f5:aa:1f:76:6e:ea:57:10:fc:d3:5a:f0:
9b:ec:d1:2e:08:37:6a:ed:7a:9b:42:ab:ff:61:26:
9a:5c:38:75:bc:be:16:d3:05:d3:59:07:4f:72:54:
52:1e:86:a4:32:7c:7c:2a:8c:e9:85:4d:c0:e7:f6:
43:a1:9e:51:2f:9c:6d:0a:4b:bf:61:9d:b0:db:1f:
c1:e6:fb:78:e0:5a:f0:f6:20:41:05:33:7b:5e:77:
1c:23:21:b2:ae:86:48:94:3b:64:24:c3:03:a2:9b:
23:d3:b3:42:15:19:10:4e:be:18:2c:06:bb:8d:60:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:0C:24:53:1F:86:E5:5F:CD:4F:44:05:47:33:6F:14:4C:AC:57:49
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:e8:9f:2e:91:28:fc:f7:d0:48:25:b4:06:90:a2:7b:15:8b:
ce:7c:e3:77:c2:96:b9:04:5c:c3:d3:9c:1e:f1:3b:53:92:54:
d1:9e:23:ef:d6:a0:d7:84:af:52:6f:99:90:d2:b6:1f:d8:09:
30:96:e4:8f:7a:f3:29:38:65:a8:93:ee:d8:4c:90:c6:0f:ad:
63:d0:5e:18:57:f5:d6:37:dc:8f:fe:e7:0a:5b:20:86:ab:21:
37:ee:af:3c:a0:fc:2f:49:e1:16:d8:6c:2c:b1:b0:7a:1c:1f:
1e:cf:f6:61:56:56:88:49:6a:96:cb:b3:4e:8f:5c:11:cf:2d:
d8:f7:08:42:d8:9d:21:9e:7e:90:b8:44:66:a8:37:10:19:36:
f6:e4:9d:0e:b9:b8:61:41:04:12:5d:1a:ad:9b:a5:9b:16:01:
10:15:8a:45:e6:e3:ce:eb:88:1a:6f:46:8b:49:3a:b2:ba:60:
90:0f:5f:2c:38:92:8b:52:f8:c6:af:13:fc:6b:d3:a2:64:0c:
6c:60:8e:14:fe:ab:f7:1e:8c:f5:63:3c:3f:11:6f:61:97:7a:
d6:f5:ef:11:9e:a2:9a:f8:7b:44:6b:7c:89:57:6f:d8:89:c1:
ff:49:08:24:5c:d7:48:7d:bd:2e:5f:cb:4e:04:bb:da:d8:99:
26:de:e8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:33 2026 by rpki-client