Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier: XQCQHyn8nFLu2TXTxyNX5Q7T8LH/zdHiCaxihhP41xE=
Subject key identifier: 02:35:C2:A4:AE:78:69:BB:B3:53:FA:F4:71:DF:FB:E6:38:66:FD:17
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial: 019CB135FE87AA8A13220902F896F1BFEF04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number: 03DF
Signing time: Tue 03 Mar 2026 01:00:31 +0000
Manifest this update: Tue 03 Mar 2026 01:00:31 +0000
Manifest next update: Wed 04 Mar 2026 01:00:31 +0000
Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: dCAE2qdyMbex4GZbqDUOattrjci0XpZZhhuxzNC6+VE=)
2: Xhzxh_1tEvbHh31P53cpofaJHAY.roa (hash: 31jnPeVemUW3b4ECC8z4gudFDjDHIoHHJ4mUtzZB8F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:35:fe:87:aa:8a:13:22:09:02:f8:96:f1:bf:ef:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Validity
Not Before: Mar 3 01:00:31 2026 GMT
Not After : Mar 4 01:00:31 2026 GMT
Subject: CN=0235c2a4ae7869bbb353faf471dffbe63866fd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f5:eb:d6:f6:a3:b7:79:74:53:e8:bd:da:ff:
d2:d6:15:ca:ad:67:31:53:46:ba:33:46:b2:a6:0b:
20:1e:77:22:c4:83:b2:b3:de:44:c1:b0:59:5e:bb:
19:b9:3a:94:b5:15:74:06:89:92:eb:28:21:3f:df:
51:ad:22:ca:10:8a:69:ce:6b:d5:7a:89:f1:4e:89:
64:7e:19:6f:0e:b8:16:2c:85:2d:2d:ce:59:58:e7:
87:94:bf:51:ca:41:90:42:5e:9f:84:bb:70:60:bf:
c8:17:23:d6:38:95:5b:28:75:92:e1:da:e5:40:28:
e6:bb:1c:54:e0:26:15:26:06:86:0f:07:c3:17:01:
b6:9b:eb:2d:f6:03:a0:5d:a5:7b:d1:1a:21:cf:be:
d7:3e:41:3c:43:94:e0:87:9b:72:e7:a4:c6:bd:11:
4a:85:48:7f:74:87:62:ba:b8:68:78:09:12:ca:c5:
45:3f:5b:af:78:20:40:ff:d0:a7:ec:19:10:6b:3a:
40:ff:e7:c2:8c:d9:0f:61:a3:af:81:7e:ce:57:a8:
ac:ae:b1:b1:20:c8:fd:58:f8:ac:f5:2e:c6:fb:0e:
82:3d:6c:8d:4c:08:d9:83:80:d8:9d:0b:c8:d8:49:
55:64:c1:48:04:46:a6:7a:9f:25:b4:34:4a:89:45:
4d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:35:C2:A4:AE:78:69:BB:B3:53:FA:F4:71:DF:FB:E6:38:66:FD:17
X509v3 Authority Key Identifier:
keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a1:1b:a3:f0:7d:78:fe:3c:c0:d5:4e:96:c3:8e:1c:88:f3:
5f:60:ee:65:88:a0:5f:70:90:40:1d:eb:20:58:ee:27:cd:35:
2a:3e:7e:80:b2:e3:9e:65:47:8c:7e:d2:7a:50:fb:f1:61:f7:
35:68:f0:b8:1b:15:47:8c:c7:59:32:9b:08:eb:b1:c5:6a:c0:
5a:72:2c:b1:fa:33:0e:1c:f0:04:c0:96:58:e5:6a:76:05:59:
12:f3:43:fa:1a:8c:e0:9d:97:b6:b3:cb:d8:b5:43:9c:c5:17:
37:d5:04:04:ca:75:85:e1:e1:d1:cf:c8:87:e6:e9:63:ea:ff:
75:ac:a9:38:d4:cd:c3:5d:e2:37:cc:79:34:01:f2:14:11:6c:
49:9d:80:6b:79:1e:f5:3f:87:b2:7f:a5:bb:26:e8:91:bb:ac:
93:95:35:db:13:6e:3b:cd:03:a9:44:b6:13:e4:28:d0:8e:60:
4b:f2:5a:d2:37:f8:78:32:2d:6b:39:43:95:bf:63:39:df:37:
4a:a6:a5:7a:93:98:c3:91:af:dc:e0:fb:8d:4b:e5:1e:0f:d1:
ab:52:ba:b9:a4:e4:b4:7e:5f:6e:23:48:a4:af:a1:39:e0:fc:
ca:9e:bc:33:33:8b:74:6a:c3:d8:94:e9:c0:5a:53:33:d7:d2:
7d:40:99:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:03:39 2026 by rpki-client