Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
File: 4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json)
Hash identifier: Ks+HWcmZYE0gtt8VPHV8f4hNtdetsamrnF2iHW5tE6I=
Subject key identifier: 7B:2C:43:70:69:DB:1B:0B:29:47:6B:D4:8A:BC:B0:2A:B2:50:74:EC
Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
Certificate issuer: /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Certificate serial: 019CADC7B755E061C02D8191EE57120F043B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
Manifest number: 0ABD
Signing time: Mon 02 Mar 2026 09:01:12 +0000
Manifest this update: Mon 02 Mar 2026 09:01:12 +0000
Manifest next update: Tue 03 Mar 2026 09:01:12 +0000
Files and hashes: 1: 1-8kJiWXbzYyQn9Z_qYA1FhOH3SQ.roa (hash: sbcGPB93z3YNWrVB4YHHakteB4jeVAtpbXTGFYuXZTU=)
2: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: bZmnhFrvI/qNN5xmHGjciZ8CG41W0Oy/2zh8CcPD+EY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:b7:55:e0:61:c0:2d:81:91:ee:57:12:0f:04:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Validity
Not Before: Mar 2 09:01:12 2026 GMT
Not After : Mar 3 09:01:12 2026 GMT
Subject: CN=7b2c437069db1b0b29476bd48abcb02ab25074ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7b:e8:d9:6d:2e:04:34:24:9d:ff:7b:78:ab:
3e:e0:63:df:47:22:ad:db:57:75:cc:69:8a:c8:f6:
f2:14:ba:7f:40:d0:dc:e5:bf:f0:3a:d7:89:4c:29:
bf:7c:97:a1:95:0b:5e:39:42:f7:ff:6a:08:58:ce:
7c:32:bd:c5:32:a3:cd:e1:da:c6:b8:99:9d:35:ba:
07:8d:15:87:65:34:2b:7a:7e:49:86:9f:3f:06:0b:
b1:54:6a:89:b3:65:8f:f8:b4:34:37:7d:ae:60:1f:
2e:1e:63:8e:86:f6:5e:b5:e1:f5:c3:dc:84:6d:07:
5c:be:9e:b6:64:d6:b9:1c:cc:ef:d6:29:76:2c:69:
5d:d9:b5:af:22:c0:ac:6d:1b:45:9d:7c:b4:8b:8c:
22:07:2b:c3:e4:70:1c:6c:fb:35:9f:88:75:1f:05:
a1:49:39:e5:40:35:e5:82:ee:41:ca:06:75:87:c6:
e5:51:6c:47:cd:cf:2f:05:53:4b:18:ef:33:f6:43:
05:8d:cd:1f:13:25:c9:61:5e:fc:96:cb:02:36:73:
46:43:6f:3e:7c:28:d0:74:a6:54:39:bb:a7:8a:4e:
09:ba:68:94:0f:e8:96:fb:86:1a:69:68:00:43:22:
cf:44:cf:f9:87:bc:1b:de:14:63:f4:f9:f9:3c:9a:
1f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2C:43:70:69:DB:1B:0B:29:47:6B:D4:8A:BC:B0:2A:B2:50:74:EC
X509v3 Authority Key Identifier:
keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:ed:72:0a:9c:f4:37:0e:57:8b:14:66:12:92:ef:0f:a8:c5:
12:cb:a7:5a:d1:1c:93:e0:d9:0d:85:47:5c:29:38:b6:18:0d:
2d:6b:48:e0:38:2f:b7:8f:80:23:6c:b3:01:22:44:48:0f:dc:
cc:33:e7:72:ca:e1:95:4f:f3:ae:3e:fa:e6:fc:3b:3a:d2:34:
e1:e3:56:6d:2c:be:ba:1e:57:6f:bc:3a:a0:41:b2:c9:d7:9a:
e9:31:0d:4e:9a:27:64:75:78:cf:8a:38:11:68:6c:ef:cf:a2:
63:c7:4e:c1:e0:b1:d9:7f:59:20:2b:7a:18:52:ef:95:b0:42:
37:5b:b5:22:90:2b:de:1d:cb:7a:de:6f:0a:8d:13:9e:bc:2d:
2c:c3:a0:f5:bb:52:b0:81:34:35:e1:11:22:4b:ad:8e:42:c1:
d9:e3:a0:5b:8e:06:86:dd:1b:a2:a9:41:15:9e:95:9d:ca:93:
c1:4f:f2:c7:71:e7:e5:2c:ae:ae:7b:ec:c3:d9:97:6d:9f:ed:
0f:1b:20:82:3b:2b:94:10:53:e6:ca:91:8f:e2:53:6f:b9:67:
ff:44:f3:73:63:73:24:08:de:54:57:a7:82:93:dc:8d:ae:9d:
a3:7f:17:2d:8f:87:d7:9d:d1:b4:43:2d:6f:5e:65:2c:b2:cd:
80:45:6a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:16:06 2026 by rpki-client