Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: g2rzyUPLWX5OFVmwq6kjxf56XgqMBYfFh1lquu4OvTw=
Subject key identifier: EA:17:64:9A:7D:1C:AA:62:DF:89:44:78:99:D4:BA:05:5D:B7:EF:B4
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 019CAB6B8A8C59103265E075C441D8173B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 0712
Signing time: Sun 01 Mar 2026 22:01:17 +0000
Manifest this update: Sun 01 Mar 2026 22:01:17 +0000
Manifest next update: Mon 02 Mar 2026 22:01:17 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: a3nxmHow8DsFDGF98RlUJM4Zucc7HlE2hZNEajNmxO4=)
2: AHfZCvtyXR1N7LVfRri-RiC1E6I.roa (hash: Rc0GVzYrZ//kqYZ3Jv1c6BblzqpktiqTIXdTmceeo7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:8a:8c:59:10:32:65:e0:75:c4:41:d8:17:3b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: Mar 1 22:01:17 2026 GMT
Not After : Mar 2 22:01:17 2026 GMT
Subject: CN=ea17649a7d1caa62df89447899d4ba055db7efb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:99:11:66:1c:59:39:52:2f:e3:e9:9d:07:
d4:ad:65:c5:12:23:ed:64:0e:bb:4f:97:a9:b0:d6:
1b:07:38:39:50:39:df:50:b5:98:b3:7b:ec:dc:9a:
d1:50:a8:dc:85:52:69:71:ec:8f:47:3a:25:74:f5:
61:5f:64:bf:a0:30:8d:1d:8a:5d:27:40:3f:f5:a7:
fd:e9:eb:42:f1:74:c3:75:c3:ea:ac:4b:49:58:28:
4b:f7:3a:32:ff:52:93:ae:e2:a2:86:58:ce:91:af:
e3:02:4f:9e:b1:58:55:5b:1c:37:bf:23:40:01:eb:
18:03:5b:80:0a:34:f7:f7:2c:6c:76:d6:90:b3:ff:
a0:5b:49:63:3d:2a:52:bb:e0:1f:ac:c0:cb:f4:00:
89:7a:3f:3b:65:2f:86:5f:4c:a5:4f:c3:7f:40:08:
85:f4:47:12:b6:e8:87:d0:5b:dc:ae:8a:5b:66:00:
3d:dc:fa:83:35:3b:fe:34:77:8e:1a:99:da:c8:8e:
28:72:5d:ad:41:0c:b7:af:bf:19:d3:a2:0a:c5:e8:
58:07:68:e7:63:ce:1f:9a:f2:ac:1a:e7:89:36:cd:
58:4a:75:8f:76:a3:74:5e:73:48:1b:65:99:de:bb:
a3:b3:c2:6a:21:d3:5b:33:6c:d1:9d:d9:a2:72:9c:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:17:64:9A:7D:1C:AA:62:DF:89:44:78:99:D4:BA:05:5D:B7:EF:B4
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:3e:e0:58:7d:46:7e:3f:91:25:fd:90:48:51:c4:1c:fe:e1:
ab:2e:3b:74:58:21:60:f4:8b:51:db:08:6f:42:7e:b4:4f:5c:
ee:6e:fb:fe:c5:b6:7f:31:e1:fc:41:40:dd:21:b2:17:ff:11:
a9:3b:d5:60:5e:fd:da:6b:1e:fb:16:ae:b9:19:5c:e4:cb:1a:
40:06:1e:75:36:9e:99:94:c1:85:23:d3:20:fc:75:56:f1:d0:
ec:f2:3f:2b:f1:21:2a:7f:cb:41:e6:5d:06:05:bf:84:9c:29:
64:19:eb:b2:41:c0:b6:3e:78:77:72:f0:8c:25:97:9c:51:c3:
65:b0:4e:2d:b9:67:0f:33:05:56:98:9d:0a:b0:39:02:3e:d1:
2c:ae:93:db:cd:a2:9c:ea:c3:b6:2a:70:8f:30:c3:43:46:0c:
28:b7:83:ae:f0:25:b7:d4:4a:d8:a8:d9:aa:b3:02:26:28:82:
21:02:70:b3:e4:39:b7:f7:5b:3b:ad:e7:09:38:49:44:06:76:
3c:91:61:d4:b8:20:1d:fe:51:51:a0:0c:08:14:56:0d:b8:1c:
60:b1:65:ea:d7:3c:ff:ae:12:20:f4:a0:2e:c1:b6:28:ff:ec:
c0:b6:48:cf:c4:97:38:e5:23:cc:2f:74:08:90:ad:5c:70:e1:
37:57:c2:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:20:03 2026 by rpki-client