Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier: tJZYC9cQhMyIXN6ogvKg+KIiIHQL16o/E35hvg2ycw8=
Subject key identifier: B5:FB:B5:C5:1D:9A:83:DA:70:0C:42:B5:CC:0E:99:3A:E5:C0:BB:44
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 019CAD5A47AB7689550157B1D8A4ADAEAFB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number: 0D9F
Signing time: Mon 02 Mar 2026 07:01:40 +0000
Manifest this update: Mon 02 Mar 2026 07:01:40 +0000
Manifest next update: Tue 03 Mar 2026 07:01:40 +0000
Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: 2xHFVeOO2jg7z2gesRisXQe1vgDxPmtJv9pbxRep7HA=)
2: QtPhnyLsRRN8U6hpcPXp4Z0oWqY.roa (hash: i0nu2P6NxLQ5ERHa8d6GR72neeBYjpf7KkNPNvBe0Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:47:ab:76:89:55:01:57:b1:d8:a4:ad:ae:af:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Mar 2 07:01:40 2026 GMT
Not After : Mar 3 07:01:40 2026 GMT
Subject: CN=b5fbb5c51d9a83da700c42b5cc0e993ae5c0bb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:05:52:49:a2:f2:2b:d8:3d:48:9a:b3:c2:
84:6a:12:79:be:3e:a7:ce:41:f1:f6:a8:21:16:e0:
76:02:1b:43:85:2a:d7:73:a5:85:d5:62:1e:65:d0:
f8:ad:52:31:f7:b8:37:22:cf:75:6d:d8:bf:db:b3:
2c:e4:b8:97:ad:45:fb:a2:e4:57:7f:7f:0e:e5:2b:
c3:f4:80:f1:17:66:3f:0e:d6:f3:ac:6f:8f:1c:cf:
41:02:c6:db:ab:24:e8:a6:2c:48:16:85:d2:c7:80:
21:8f:2f:04:a4:10:7a:5c:6e:78:ab:3d:70:76:36:
06:56:74:6e:59:a7:0e:21:89:19:e4:bb:00:cb:a5:
c0:67:a5:68:1d:71:58:e7:e9:8a:1c:d4:5f:8f:73:
b3:44:70:95:4a:37:d3:a3:9d:9d:94:d7:c8:fb:79:
d9:f9:1a:52:62:a2:64:8a:b7:d2:75:c7:b2:9b:f4:
d6:0c:ea:77:09:ae:81:52:48:6d:c0:80:7c:12:43:
13:c3:ba:c6:a5:91:9b:ef:3c:b9:4e:32:6a:be:25:
bd:01:34:21:5a:5d:a4:df:e4:d4:f0:01:a7:33:52:
3e:73:1f:df:bb:91:f6:6b:f5:ef:2b:9a:98:f8:54:
d8:83:88:08:98:67:45:ee:84:e2:98:db:10:92:40:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:FB:B5:C5:1D:9A:83:DA:70:0C:42:B5:CC:0E:99:3A:E5:C0:BB:44
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7d:d5:1c:d1:71:14:71:60:93:46:e2:ff:64:e5:61:07:3f:
4e:b5:25:73:6b:70:fc:d0:07:62:bb:45:05:d5:2d:4d:0d:51:
fb:6b:18:a6:ef:0b:7d:20:74:f2:7a:0d:c3:86:b1:72:ef:b1:
7b:18:cc:58:35:6b:52:12:43:5b:f8:21:32:4b:f8:07:7d:0b:
e7:f0:27:ea:d2:fd:93:7d:7e:0e:0b:25:f0:83:15:d8:3c:04:
56:03:84:4a:0b:00:77:9c:07:37:07:66:1f:94:c9:a4:78:5a:
eb:1e:6f:de:e1:d2:17:8b:d8:44:1d:8d:60:19:14:08:99:fb:
ab:3b:e1:39:4c:02:ac:5e:ec:9d:bb:61:e3:45:92:b3:95:d6:
fb:93:82:fc:36:44:77:d2:73:81:b9:8e:6c:c3:50:b4:a0:de:
0a:e7:01:93:99:31:0d:6e:a1:92:59:f6:08:1d:16:b7:cc:71:
c6:7e:b8:62:3d:75:11:93:25:6e:08:58:ae:ba:08:ee:ea:1c:
a1:1f:42:cc:c9:ca:d4:aa:78:94:c5:0a:13:40:a8:d0:a9:30:
62:53:07:a2:3f:c6:28:29:26:18:80:c2:47:fe:5b:07:13:a5:
7a:10:15:6a:70:7f:90:2a:c0:6e:53:43:93:09:f6:86:c3:9d:
0b:10:ca:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:35 2026 by rpki-client