Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
File: 4m4BgY9rbo42iNfzYfdTwSNeDNw.mft (raw, json)
Hash identifier: RdHhSwdQC4RphCwUlI/FZsu/sAFcSAu0D6Mtt6BbevA=
Subject key identifier: 76:F0:78:0D:0B:10:4D:B9:B9:89:65:D8:AF:ED:F2:3B:EE:73:4F:A1
Authority key identifier: E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC
Certificate issuer: /CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
Certificate serial: 019CAB347C9696864372ABB9AF80A0A13DFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
Manifest number: 35
Signing time: Sun 01 Mar 2026 21:01:09 +0000
Manifest this update: Sun 01 Mar 2026 21:01:09 +0000
Manifest next update: Mon 02 Mar 2026 21:01:09 +0000
Files and hashes: 1: 4m4BgY9rbo42iNfzYfdTwSNeDNw.crl (hash: viZqIm+DQeyQTd65WpM5RyPXaMCAdiSl/N/hiNSSkdk=)
2: 55lgQHjawIWIBPegmtUWO19P1qY.roa (hash: xr29hGNw/G2B+5szsIy5zpkogZqhj2L/lLvicw1+OJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:7c:96:96:86:43:72:ab:b9:af:80:a0:a1:3d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
Validity
Not Before: Mar 1 21:01:09 2026 GMT
Not After : Mar 2 21:01:09 2026 GMT
Subject: CN=76f0780d0b104db9b98965d8afedf23bee734fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:97:b1:d5:ee:a9:b8:2f:76:39:0a:34:87:
bb:8d:78:b7:4a:83:01:0d:8a:44:90:d5:59:91:14:
6a:9c:37:ef:db:19:ff:19:2e:63:d0:c4:5d:e0:a2:
53:d2:e9:b8:5a:ae:e0:42:9b:15:89:fa:6f:47:0d:
02:46:e1:5a:0e:a5:63:f0:84:90:33:62:c2:db:68:
71:64:e3:80:76:04:fe:af:4a:70:79:a6:e4:06:8f:
53:64:62:11:74:fc:e3:d5:5b:08:cf:04:c3:fb:13:
98:55:db:b1:71:92:ae:7a:fe:9a:ef:22:5c:f5:d9:
70:4a:c7:3e:8b:a5:91:c7:9d:36:0c:fb:d2:7a:85:
a5:3e:c3:ec:ca:4b:20:20:9d:cc:fd:1e:1e:2a:e6:
af:2f:f9:2a:41:52:ad:3f:fe:98:fc:77:3b:52:fd:
a1:c9:6b:d7:9c:79:45:b3:07:72:b6:ca:f5:87:26:
62:ce:73:93:21:38:80:51:e2:7d:56:23:d2:f7:00:
e6:54:11:8f:8a:b9:32:44:ed:94:36:f2:bc:25:a5:
2a:47:e7:56:74:3e:bd:5e:70:9f:f6:82:38:23:ff:
a5:53:62:1b:af:9c:14:fa:af:bc:9e:bf:61:7c:16:
bd:9e:01:66:3f:48:3c:49:35:bb:bf:13:80:c6:8d:
7d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F0:78:0D:0B:10:4D:B9:B9:89:65:D8:AF:ED:F2:3B:EE:73:4F:A1
X509v3 Authority Key Identifier:
keyid:E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:0b:ca:e9:4a:47:29:d1:b4:bd:42:53:ad:f5:c0:ee:3b:d0:
73:59:53:d5:b7:da:dc:4b:82:b4:71:e0:42:f8:b1:3c:40:fa:
b3:fe:97:a4:cc:92:28:9a:f5:7e:27:e3:b6:12:8c:6d:a7:39:
5a:f8:c0:ba:a5:fd:8a:3d:08:0c:3a:41:71:93:dd:ec:a3:1a:
4d:cc:43:3b:84:40:d9:8e:94:43:e4:22:f0:88:e6:60:6c:ce:
d5:74:4d:03:95:c2:54:9c:d5:ec:ba:7f:14:5a:bb:77:47:d5:
3f:6d:df:b9:37:1d:bf:b8:ff:6e:b7:c5:68:1f:d3:6d:7d:eb:
b8:b2:07:13:15:60:98:b5:b7:4c:38:45:f0:54:9d:51:db:f5:
86:cb:2a:b5:78:43:7a:fd:de:db:04:f8:28:4b:a8:81:18:8d:
63:8e:14:83:73:72:e8:ad:58:1b:23:18:4e:20:92:89:97:3c:
f2:07:3e:b4:27:3f:e6:73:14:8d:ba:81:78:eb:5e:d9:af:21:
d3:83:54:d0:ae:03:db:25:19:d1:d6:4a:c7:25:9b:9d:0d:80:
00:35:c3:cd:6d:c5:3d:ce:8e:a6:12:8c:c8:c5:82:b2:50:f1:
b9:48:fb:6c:98:93:2f:03:58:33:9b:6d:9c:3e:bc:f8:de:10:
62:36:a3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:40 2026 by rpki-client