Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier: IHL2EF9ONE/PV0/EdUZdueuE8aNZ14AKEjq5MXoRy7Q=
Subject key identifier: 89:99:B0:27:F1:7A:26:97:8B:45:1E:98:11:48:31:06:E8:04:E4:AA
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial: 019CAAC60D5F9BE799533296E56CFA2EB81C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number: 184C
Signing time: Sun 01 Mar 2026 19:00:32 +0000
Manifest this update: Sun 01 Mar 2026 19:00:32 +0000
Manifest next update: Mon 02 Mar 2026 19:00:32 +0000
Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: C7KARvwVGEGmH20G+XgnH/GsSbtkrZ46p24IZ82Mk2E=)
2: oxOUpQ0FwseclzcVvtlkSLjr_aM.roa (hash: 39PmeADT0B2o6dhGdHc5CXRqYkD6fuj6z5G5c2KqgVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:0d:5f:9b:e7:99:53:32:96:e5:6c:fa:2e:b8:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Validity
Not Before: Mar 1 19:00:32 2026 GMT
Not After : Mar 2 19:00:32 2026 GMT
Subject: CN=8999b027f17a26978b451e9811483106e804e4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:89:51:a6:c3:29:01:23:c0:ea:3a:bd:d9:92:
01:f8:57:2d:b5:11:dc:1f:61:b1:f2:4e:5b:ff:65:
d8:60:0e:36:a1:ed:cd:05:2d:c2:99:79:b3:8f:6a:
0b:ed:ff:80:99:65:68:c7:7a:f8:f2:2a:50:4c:79:
84:6d:05:0f:05:a0:f1:a1:1c:06:8e:7c:3a:cd:fb:
78:a6:44:df:fd:37:92:02:d5:51:e3:08:bc:b2:da:
6a:44:3d:c4:a5:f2:86:a0:ec:9c:46:e0:12:88:8f:
1c:b1:92:4b:11:44:60:e7:81:76:91:27:fa:3a:37:
13:58:95:b7:60:55:8e:82:f0:02:dd:d9:0e:c2:e3:
ed:f3:d4:81:f7:02:df:0b:29:af:08:dc:91:34:ae:
76:ab:64:2f:a5:ac:c1:20:fa:50:e5:51:3f:ca:c7:
ad:a7:33:65:14:26:6a:27:e2:a6:7e:5d:8f:eb:51:
38:61:fc:b4:e6:cd:65:92:e8:32:01:2b:49:56:03:
5c:11:3e:9a:fc:fe:af:26:30:50:ff:8a:77:9d:7b:
9e:cb:aa:50:ec:8e:ff:3b:e8:86:58:15:4c:35:94:
ca:fa:7d:ef:18:b9:9b:59:bc:04:17:6c:9a:3e:4a:
f5:a9:a7:b3:37:9c:70:e9:f3:48:e3:c8:2f:84:50:
69:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:99:B0:27:F1:7A:26:97:8B:45:1E:98:11:48:31:06:E8:04:E4:AA
X509v3 Authority Key Identifier:
keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:e0:91:89:8e:0c:0e:b3:bf:92:d3:19:4e:63:2f:ec:d3:2f:
d1:7c:de:0b:6e:22:53:1a:e7:34:70:47:c1:1a:d5:ea:37:32:
26:08:f9:4a:b3:be:cf:0b:17:b2:89:c3:94:50:01:2d:b7:48:
54:de:06:38:d2:03:33:d8:22:00:62:35:0d:d1:0e:03:98:40:
f5:9d:4c:37:2e:49:1d:8d:17:7d:56:5e:24:7d:aa:b6:83:59:
e9:82:dc:65:32:3a:65:22:11:82:6a:9a:a9:bc:a1:b9:7a:8c:
15:75:07:a1:19:26:16:77:bb:8d:5e:a7:5f:f7:ec:eb:3f:b1:
21:42:8a:19:d1:98:94:c6:52:98:2c:7b:79:08:e2:64:13:ca:
e2:df:ab:44:e3:98:de:a6:bd:0e:de:fb:51:81:0e:37:44:7f:
e8:13:aa:62:5a:0e:02:b4:42:7f:2b:8c:62:64:f8:39:63:46:
50:45:66:19:18:94:bf:94:51:fb:50:28:51:19:20:5a:2b:5f:
5b:05:8b:54:50:05:5f:6d:4e:c5:75:f8:18:74:e1:3b:be:7a:
0a:4b:42:ca:44:db:80:f5:2b:9c:fc:a5:a5:2d:34:7c:80:c7:
cd:36:4e:65:ec:fc:a2:97:28:11:3d:6d:63:db:c7:d0:93:89:
d6:f4:ec:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:19:27 2026 by rpki-client