Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
File: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft (raw, json)
Hash identifier: bxgfhPISoMM7URtv6GxR8GO99ZOYqeMaAxVd1BeWAy4=
Subject key identifier: DF:88:36:58:69:AD:28:7D:94:7C:72:FE:11:07:2B:9C:06:8F:BF:2E
Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Certificate issuer: /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Certificate serial: 019CAAFD21957A08CA113456FDB3A3CCC865
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
Manifest number: 1947
Signing time: Sun 01 Mar 2026 20:00:41 +0000
Manifest this update: Sun 01 Mar 2026 20:00:41 +0000
Manifest next update: Mon 02 Mar 2026 20:00:41 +0000
Files and hashes: 1: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl (hash: zRf54HG/vwl0+p+KOgo3tdobJ3xiYjEBHduXkRP1hdM=)
2: NY6Ok0dfnOmCyxsnLgfAqiMr3Ds.roa (hash: q98kPVGsSgebzUsBANtOwCfH6a2G28dI/IdaQaF9Il0=)
3: Qpzdfxddg7sAd9HOkX4hdICsNh8.roa (hash: 4zKxw2hbsJ7DHleUFCRfkqUEw6l9X5X22tDEvhwM0Q4=)
4: WJQDqjdU85qKX_z9ajXtlIeeqwc.roa (hash: mlb+3yfxZjm9N1+YQt1lMML9aFyHgMQVkXXsZICY1yU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:21:95:7a:08:ca:11:34:56:fd:b3:a3:cc:c8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Validity
Not Before: Mar 1 20:00:41 2026 GMT
Not After : Mar 2 20:00:41 2026 GMT
Subject: CN=df88365869ad287d947c72fe11072b9c068fbf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:23:7a:16:b2:69:20:dd:df:00:e7:65:50:92:
a4:d5:cb:bc:c7:29:09:b1:74:d4:a5:36:08:8b:36:
7a:7a:00:10:01:e9:ab:66:0a:1e:76:a2:bd:3d:91:
96:63:e4:f2:a5:1b:09:c1:a0:0a:75:d0:88:e4:d3:
23:8d:06:e7:6e:6c:a4:62:84:07:cb:20:86:9e:e7:
ee:45:38:b0:e5:36:83:a2:ba:2d:88:e7:8e:80:18:
92:fd:35:cd:6a:d3:94:31:fb:4a:93:b5:1f:28:0b:
6f:9a:01:d2:08:6e:8f:4d:92:44:5c:5c:42:41:b1:
e8:43:66:66:7d:60:2c:c5:21:35:8a:9f:ff:62:88:
bb:18:c9:fc:e1:56:8c:79:41:44:3b:16:58:94:f2:
37:d8:2b:a1:00:6a:74:8f:c0:de:0d:cf:3f:0e:3f:
33:52:59:72:a3:a9:8b:8e:b5:40:74:9a:5b:76:ce:
e9:a8:f0:93:a4:30:7c:66:89:af:c1:f0:fa:36:19:
f4:7b:08:0d:09:7d:3d:e7:71:4f:95:3e:5e:20:07:
5a:60:ef:62:68:df:b0:00:df:b8:60:a6:a5:23:52:
20:26:6d:92:1d:2e:29:42:1d:68:ff:46:90:b4:21:
c8:a5:f9:ad:60:0c:6a:32:ed:b8:1b:2e:43:db:64:
14:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:88:36:58:69:AD:28:7D:94:7C:72:FE:11:07:2B:9C:06:8F:BF:2E
X509v3 Authority Key Identifier:
keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d6:31:9b:2c:94:bf:9d:f6:d3:e6:81:17:72:77:0f:a2:85:
4a:1a:48:19:77:98:30:b6:ee:00:6d:a3:69:76:c8:b7:7f:27:
1d:90:46:d7:15:3a:4e:a8:94:93:dc:71:4b:2a:5c:f3:3e:8b:
1b:59:79:9e:31:5b:58:9d:4d:1a:03:36:5a:8f:0e:65:8d:1a:
c7:b5:a1:d5:d9:8e:20:7a:a8:48:23:e1:cf:61:17:45:5e:3f:
7e:42:65:0b:5f:c4:3a:8d:db:1b:a8:3a:94:37:9c:c7:8a:3e:
a1:c5:58:9b:a5:b0:6c:a0:c4:fa:aa:9a:b7:ef:44:18:7e:d2:
d1:77:f8:da:ff:95:b1:1c:f5:20:34:60:3c:45:af:5e:3b:ec:
e2:bb:e3:69:03:3e:4e:62:9b:56:f4:79:16:d6:70:4e:39:bf:
48:e2:6a:5d:7d:ac:6a:4c:8c:50:16:d9:b1:1e:b6:57:79:44:
f4:cd:4f:8c:1d:ae:f7:44:2c:88:50:9e:0c:eb:e8:cc:7a:07:
2f:2b:e5:fb:37:b6:e1:6e:20:72:f0:eb:cb:13:05:06:fa:22:
5c:42:1f:f6:6f:9d:48:67:b5:49:ce:fe:a9:3e:ed:63:a7:09:
02:82:bd:63:f2:ba:45:99:2d:dd:89:0b:d8:e9:f6:a4:46:5a:
96:f4:dc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:55 2026 by rpki-client