Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File: 4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier: Ny4JaLiP3++rJo9a8zUD0GzkVOY9ey60JRM1PBOQcUA=
Subject key identifier: DB:0C:39:BB:FB:C6:41:26:DB:21:D3:B4:D5:5E:8A:22:CF:F5:1A:04
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer: /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial: 019CAA8F6D0EA5F6F7D45799A9EDEE6D6AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 18:00:52 +0000
Manifest this update: Sun 01 Mar 2026 18:00:52 +0000
Manifest next update: Mon 02 Mar 2026 18:00:52 +0000
Files and hashes: 1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: 72F1wuCxwmawlDuu4ozPo6sJJkhHrzpXjQL0blEJYkA=)
2: FvV4UNNN1I3u5_f_mw8uvFShvcA.roa (hash: qoCza9pR6RXvspT8eRTV0uWK0mL3e+fmf3gOpC7a0Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:6d:0e:a5:f6:f7:d4:57:99:a9:ed:ee:6d:6a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
Validity
Not Before: Mar 1 18:00:52 2026 GMT
Not After : Mar 2 18:00:52 2026 GMT
Subject: CN=db0c39bbfbc64126db21d3b4d55e8a22cff51a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:56:e6:f4:a1:63:00:d5:52:60:35:c4:26:
c4:15:70:c3:45:51:18:99:d8:d4:03:0a:ff:66:0b:
01:0c:76:e2:0e:83:86:a0:80:7d:20:e0:f8:1b:d2:
c3:61:57:8b:7f:20:ce:32:ea:07:35:2b:d3:b4:b2:
5e:63:e1:ca:40:cb:d5:b5:38:3d:f5:ae:f7:dc:fe:
04:1d:a6:54:aa:ad:6d:77:c6:7a:4b:25:d9:cb:84:
1f:84:24:f4:84:2b:42:7e:d6:e9:17:6e:6e:ca:ce:
ef:8e:a5:9e:fb:b9:e4:da:e1:82:34:8f:f5:51:e4:
20:6e:23:72:3d:c3:af:7b:8c:6b:03:52:80:a8:e6:
71:42:52:29:17:96:66:ab:b4:7c:b3:5b:bc:e0:3b:
67:b7:34:be:5a:d3:88:45:7f:5f:92:18:12:a4:4c:
8f:a3:c7:3a:0f:64:42:00:38:ea:c7:1e:ed:0c:94:
a1:11:bb:01:00:07:99:29:a9:7e:77:c2:26:f6:f8:
f3:df:e2:bf:a5:9e:64:45:1f:ac:08:48:b9:3b:d7:
9e:b8:92:66:72:84:5e:67:a4:25:e0:b7:34:71:45:
2a:f3:95:91:32:dd:e2:dc:28:c3:fd:1a:85:c3:41:
5a:60:3b:86:1a:2f:9c:f8:25:d4:7c:22:67:92:ea:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0C:39:BB:FB:C6:41:26:DB:21:D3:B4:D5:5E:8A:22:CF:F5:1A:04
X509v3 Authority Key Identifier:
keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e1:7e:ba:1b:c3:b5:1e:17:ab:8c:c2:03:4b:35:5f:37:6f:
40:fa:df:50:5f:25:dd:8e:81:9a:e0:2a:de:b1:c6:e2:68:c1:
d9:8b:bd:d5:3d:13:ca:d4:6d:bf:c8:a5:45:9f:7d:1b:6d:75:
af:79:82:b0:8a:7e:f6:31:f7:00:00:69:28:cd:a0:42:96:e4:
57:b5:41:78:73:f6:c2:ab:3e:cf:3d:96:3e:91:11:72:d1:2c:
a1:67:5f:7f:e6:c9:53:11:29:d0:7a:c2:69:fa:3a:8a:69:b5:
4c:9a:e5:30:c0:96:83:7d:67:b3:23:49:e9:ee:d3:2c:a6:e4:
cd:67:b9:86:71:31:35:02:53:31:07:92:1d:c6:84:41:3c:0c:
6a:ee:66:44:57:28:25:aa:ed:84:af:10:e8:d4:26:57:83:af:
20:fb:38:2b:33:ef:61:de:7f:f3:c3:06:b1:92:f1:5c:80:bf:
19:57:4b:2f:48:20:aa:dc:1a:2c:4d:36:a6:e0:a4:75:be:ea:
2e:dc:64:36:98:c4:11:50:cb:52:92:94:fc:32:b4:48:89:36:
37:29:8c:4a:5a:60:24:32:be:1d:20:d5:b7:46:d9:dc:a9:3a:
4d:50:1c:9a:92:28:a8:85:eb:70:28:fa:ff:98:bb:90:5d:ab:
01:d0:ab:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:03 2026 by rpki-client