Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: 36Ye67nMjg0OD2BpVpN1cdys1Goo+sEzDfXHhZlAdn8=
Subject key identifier: CF:95:39:9A:A0:0F:A3:83:0C:AA:4E:2B:97:20:D9:83:9C:CD:F2:1D
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 019CAAFD7F55B0B53CC8CC4AE5D518FB81E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 1101
Signing time: Sun 01 Mar 2026 20:01:05 +0000
Manifest this update: Sun 01 Mar 2026 20:01:05 +0000
Manifest next update: Mon 02 Mar 2026 20:01:05 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: v7Z1WxnrjmohvK+yCw8uaMNrNHwgfxNQEnYLS2815JI=)
2: uTD6khWcd31ZzRZAtfj7o4AtIHw.roa (hash: 69oOJR8ncC7sjtYVQ8SZHCT4Cq2KZtCn6uWehRleXPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7f:55:b0:b5:3c:c8:cc:4a:e5:d5:18:fb:81:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Mar 1 20:01:05 2026 GMT
Not After : Mar 2 20:01:05 2026 GMT
Subject: CN=cf95399aa00fa3830caa4e2b9720d9839ccdf21d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0a:10:3c:27:1a:6e:77:4d:e9:26:48:19:b7:
01:e0:bd:34:38:6e:2f:32:5d:73:25:93:c7:2b:f1:
e8:15:75:be:d8:1b:6c:b1:f2:57:0e:9d:0b:27:d8:
89:e0:c4:b9:ec:9a:72:57:17:99:4c:66:7c:51:ab:
58:40:e6:f5:66:91:a0:a6:af:8b:17:8d:37:5b:b1:
85:d4:f0:d0:41:92:b9:08:56:69:3a:f8:51:0f:5e:
a4:d6:e2:8e:fa:a8:55:00:59:88:aa:dc:6d:6f:65:
5b:5a:8c:88:36:e1:89:dc:91:38:7e:94:78:7c:3f:
b6:2b:ad:4d:45:90:9a:ad:38:7a:33:55:e2:37:e0:
f7:21:1c:a1:97:16:3b:bb:4e:d4:e1:78:a2:b3:4e:
12:ec:66:48:5b:01:6d:ec:12:93:60:6e:29:49:87:
64:68:f3:ee:c4:70:37:80:fb:37:3b:4d:31:e9:7a:
08:2d:29:cd:b9:11:7c:ca:54:ee:d8:d0:cf:ba:e1:
a4:ce:cc:ea:c7:47:f6:3e:53:01:b1:15:16:85:57:
fd:8e:89:e9:2e:0c:2e:e8:81:b6:a1:b6:7c:e1:52:
bf:3f:d3:0d:6e:77:4d:0a:5b:52:bc:25:48:65:23:
9a:d8:9d:41:87:5f:f4:a0:37:21:71:f5:73:7a:19:
1b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:95:39:9A:A0:0F:A3:83:0C:AA:4E:2B:97:20:D9:83:9C:CD:F2:1D
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:60:c8:40:7e:7e:bc:2c:2d:16:9e:c7:d9:f2:06:7f:b8:3e:
c2:c4:c7:73:76:46:f6:3d:63:f7:1d:5f:a4:88:d6:d6:6c:a4:
e4:78:ff:3b:d7:48:ea:c1:c5:98:70:cf:15:cb:6b:f3:69:c3:
d0:79:78:20:a4:a4:c4:47:7c:a7:3d:fb:42:03:c9:4f:b7:df:
3a:e6:e7:8f:9c:00:09:94:7f:aa:ac:41:b7:92:67:fd:a8:6d:
c5:f0:af:27:a8:fe:1d:46:28:86:a3:53:bb:1f:2b:36:88:ca:
bf:d6:4a:dd:ff:1e:90:64:9b:94:c1:c5:bb:21:a2:ad:ed:4a:
05:f1:08:41:73:8e:ac:d9:c3:25:9f:fd:1a:4f:b3:65:48:20:
2b:31:94:dc:84:a9:58:fe:13:ac:60:69:8b:72:ae:53:f2:17:
64:e5:c7:64:74:68:3d:e2:75:c4:9e:1a:8e:32:39:94:11:22:
0d:bb:36:7e:d7:15:3d:4c:eb:88:f5:a4:4f:91:ad:f7:71:17:
cf:31:02:66:26:dc:10:25:32:bb:98:a1:57:44:e2:2b:5f:8f:
b7:40:b3:5d:02:b3:d7:d3:8a:d3:08:02:65:75:ef:1a:5b:22:
2f:9c:af:fe:d4:e9:d8:ce:e7:37:a4:17:3d:2b:0b:af:6f:6f:
b1:0b:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:58 2026 by rpki-client