Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier: t/gERlQVoQmeQwgE0+r+bx6cva2jSsZJnTsilvYmsk0=
Subject key identifier: 2C:88:8F:C3:93:30:3E:38:D8:BF:6B:05:9C:37:14:20:7D:C1:32:06
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial: 019CADC82B4BE000201CBC4CA4B796269FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number: 0974
Signing time: Mon 02 Mar 2026 09:01:42 +0000
Manifest this update: Mon 02 Mar 2026 09:01:42 +0000
Manifest next update: Tue 03 Mar 2026 09:01:42 +0000
Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: AhjVh/ZJtWf7Y3RcoI28AhPRYokI+OHyYozVrwDsdjc=)
2: MPWn9lYh7Ig78eg1IuFu_hQVgcY.roa (hash: iyM+MzYg4hUTkqmFv32rNevlyEv/xOwD98IypdwiHXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:2b:4b:e0:00:20:1c:bc:4c:a4:b7:96:26:9f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Validity
Not Before: Mar 2 09:01:42 2026 GMT
Not After : Mar 3 09:01:42 2026 GMT
Subject: CN=2c888fc393303e38d8bf6b059c3714207dc13206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:27:ca:a6:54:65:90:59:5f:e6:7d:95:62:99:
18:44:9b:d3:d1:4e:4f:2a:18:c2:a6:80:c7:87:64:
dc:a1:30:dd:49:e1:7f:e8:ed:f2:63:90:9e:ec:47:
8e:fa:33:f5:2c:98:31:29:fd:81:2d:6c:a2:2e:c4:
d6:6c:91:3c:c1:ca:6c:9f:a7:59:4e:b2:a9:4c:7a:
77:c9:dd:a1:dd:c0:f0:a4:8a:53:03:75:35:bd:87:
ea:10:3a:93:be:ca:5b:61:63:11:74:44:d1:1c:10:
4a:d9:d5:92:0e:91:c9:91:0b:48:6a:6b:89:64:cb:
a0:b8:47:8a:61:fe:b9:20:bf:8b:22:a2:ef:9e:2e:
b5:46:54:62:49:8a:9d:12:74:0d:ad:67:21:d7:1b:
90:f8:db:20:de:c4:c8:82:fc:5e:56:f2:18:9e:e4:
fe:39:e4:26:e9:f3:96:49:23:a0:65:55:21:f3:d1:
26:6b:5f:26:46:ba:31:59:3d:d4:96:a9:28:14:2b:
29:0e:b9:d3:2f:3a:29:1c:43:12:c5:86:6a:98:0c:
05:1e:0b:80:c6:fb:6e:80:70:4c:6a:e0:3a:15:f2:
26:c3:8f:94:35:b6:0b:dc:c0:6c:57:a4:88:71:99:
0a:a8:5f:fe:37:e9:f8:14:b0:93:6b:b1:ca:79:bc:
d4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:88:8F:C3:93:30:3E:38:D8:BF:6B:05:9C:37:14:20:7D:C1:32:06
X509v3 Authority Key Identifier:
keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:15:58:66:d7:1a:d5:61:51:7a:33:0e:81:dd:51:68:5f:1a:
18:d8:e0:d1:fe:51:0d:26:a6:8f:d1:07:d0:d5:40:43:b0:81:
74:b5:00:19:ae:b0:12:21:51:1c:6d:e3:b7:70:4e:c1:cf:40:
3e:51:25:67:23:e8:51:e2:21:fb:64:1c:93:56:de:85:17:97:
fb:a9:74:25:d0:76:63:c6:cb:43:b5:98:5a:dd:56:f2:cd:b5:
36:6e:13:e7:78:51:94:e8:2c:84:30:02:42:f2:4f:30:7f:0a:
c5:9f:56:8e:aa:46:fd:aa:bb:06:56:e1:44:c9:c3:a9:ac:f6:
a7:70:54:91:b1:ce:fa:e0:1b:86:3c:63:9b:1e:15:4e:29:c4:
2d:16:88:ce:e9:7d:76:01:fe:07:92:11:be:82:e1:80:2b:18:
fa:b9:ab:b3:2c:84:98:94:d0:b8:76:88:6f:81:66:57:50:b8:
42:72:19:6f:47:b9:ef:0b:91:d8:07:f8:73:5b:1d:7e:a1:c4:
eb:2c:9a:bf:5d:8f:03:30:59:27:b2:7e:b7:10:b9:bd:0d:9a:
d7:4f:7b:05:45:2b:b3:8f:30:bc:fe:c0:d4:53:09:9c:42:31:
ac:f5:39:e7:6f:d4:65:d0:fb:da:75:72:bd:bf:c6:ff:d4:c5:
86:e7:4f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:28 2026 by rpki-client