Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier: FkLI8jAPHYuKZAgJBwHgF6a19FuZIfZePmYzv9pK8h0=
Subject key identifier: 8F:75:3C:FC:3C:FC:3D:80:EF:B0:25:3D:F0:A1:7A:0D:25:10:C4:41
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 019CAAC6B8B16CC05FE390A142F31B6058DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 19:01:15 +0000
Manifest this update: Sun 01 Mar 2026 19:01:15 +0000
Manifest next update: Mon 02 Mar 2026 19:01:15 +0000
Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: 4+jt1EEgIKgGdBARIg833d9F+8zdCvSqadQn0FuulJQ=)
2: PpggW4Z2oygN7a5ac0zakE7Pnfo.roa (hash: 22hm4c5Osenfb32qhznGQLzeTvo39sm+f1ynIhOO3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:b8:b1:6c:c0:5f:e3:90:a1:42:f3:1b:60:58:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Mar 1 19:01:15 2026 GMT
Not After : Mar 2 19:01:15 2026 GMT
Subject: CN=8f753cfc3cfc3d80efb0253df0a17a0d2510c441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:95:6e:4e:8e:a9:e9:1c:33:0f:06:5c:53:
17:bd:aa:b7:4b:93:75:55:11:33:41:8a:49:b3:2c:
f0:4e:ec:21:99:46:c1:72:e8:24:8d:d7:02:3b:09:
2c:83:b5:a2:a4:db:c2:0a:d3:ee:59:c1:62:45:3c:
73:0d:33:74:44:75:36:f5:01:f9:11:0d:94:74:f0:
2a:12:61:53:7f:9f:7e:2a:50:50:51:ce:25:bd:a8:
86:b6:5c:91:58:04:6f:08:7c:77:e1:04:14:47:ce:
86:51:c4:24:a1:86:f1:67:01:5b:2e:51:91:b5:61:
fa:a1:42:f9:f3:7d:04:2e:e7:65:0d:6c:2c:0d:6b:
fb:96:a5:da:3e:94:b8:59:fd:c8:eb:b4:6d:42:ca:
e2:a8:ad:46:f7:a1:63:d6:9e:3d:e4:36:5f:14:76:
5d:3e:85:44:c6:bf:d0:16:d9:04:5f:48:e6:d3:d5:
dc:42:05:28:7f:53:89:4b:77:9f:34:6c:a0:02:87:
cb:b7:83:74:dd:5c:b6:bd:c6:67:cd:e8:a7:e7:76:
a0:1a:b4:8c:e3:3d:25:ba:d7:bd:56:d9:de:c2:11:
97:a4:b0:52:be:de:1b:90:2e:96:01:5e:e1:de:7f:
13:a2:4e:a6:0b:88:67:a5:0a:49:13:ff:02:e8:6d:
99:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:75:3C:FC:3C:FC:3D:80:EF:B0:25:3D:F0:A1:7A:0D:25:10:C4:41
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:06:fd:2a:35:65:ec:93:2d:7d:bb:99:ae:18:22:fc:bc:d9:
0a:cd:c8:b3:f9:62:0f:ac:d8:99:7d:38:1c:63:15:fd:20:0c:
2a:a3:0a:be:64:b1:ac:6f:d6:a5:fd:cb:7e:9a:df:e5:fc:06:
82:b1:0f:62:9a:61:f1:59:b2:39:87:08:0f:89:f8:eb:cc:ce:
be:14:11:7a:d2:7f:d6:6c:d1:c3:a5:07:45:57:d7:45:4c:90:
80:28:14:4c:82:70:d4:45:fb:ff:f0:67:43:0b:a3:17:c8:aa:
61:4d:9e:a0:ff:f0:3f:ec:53:ab:07:a8:9d:bc:41:22:68:13:
40:f5:4c:10:0e:06:47:4b:c3:0c:5f:16:64:31:1f:1b:53:5b:
1b:bc:3a:24:81:27:f4:fb:f0:ca:47:a1:55:6a:c2:ec:09:7c:
86:b1:7b:e6:bd:11:78:ec:7c:04:b1:c7:d2:22:22:75:54:9c:
fa:81:8a:80:d0:78:c2:fa:35:65:ef:92:97:eb:4b:25:9f:23:
24:3f:73:1d:c0:50:90:70:65:a6:f7:8c:c5:86:b7:18:4a:49:
35:5a:8b:0f:04:63:73:67:f1:e7:53:4a:51:1e:80:5f:45:dc:
c0:54:b3:37:e1:50:6b:bf:10:a0:96:d4:f3:93:35:9a:1c:be:
f9:53:7a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:07 2026 by rpki-client