Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier: GQfHMASxZ2C+uNR+FwSMnTZAuHRXl3rdHAeAtxO3cMA=
Subject key identifier: D0:44:E9:85:9D:3B:8A:D1:08:8F:4E:19:DF:07:8A:C9:8B:EC:AC:BF
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial: 019CAA8F763B226D6EAF45BED1AC64B37928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 18:00:54 +0000
Manifest this update: Sun 01 Mar 2026 18:00:54 +0000
Manifest next update: Mon 02 Mar 2026 18:00:54 +0000
Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: V8hTwXxm7Tfm1vw7F7+cuBW4WjRfYVpser4eP+6iOmg=)
2: KrzOKl1qlDpYWxV-juWfSYeX7Gg.roa (hash: sm+bvfJZr3b8QZ7AAJ4wrF+UsO9vk0OydT19C79k6CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:76:3b:22:6d:6e:af:45:be:d1:ac:64:b3:79:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Validity
Not Before: Mar 1 18:00:54 2026 GMT
Not After : Mar 2 18:00:54 2026 GMT
Subject: CN=d044e9859d3b8ad1088f4e19df078ac98becacbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:be:c7:18:a4:f5:5e:b8:19:85:b0:85:b5:
4f:a7:45:f0:b0:c3:6e:76:d8:b9:96:6f:4f:89:4f:
31:2c:12:ba:f5:9d:27:29:ee:e4:cb:02:9f:28:d7:
bf:60:0f:eb:c7:ea:30:5a:4a:fb:1b:7d:a6:e4:9e:
bf:e9:5b:a9:f4:42:93:1a:31:aa:17:f8:57:c4:c4:
a8:53:9d:da:a7:67:a4:87:7f:42:0d:09:fb:1d:3e:
ad:2a:3e:1d:b3:1a:de:15:a6:9d:5b:b1:11:70:75:
d6:05:62:69:fd:85:de:97:97:83:10:62:3a:0e:cd:
40:01:80:4d:34:d8:3d:28:e3:ba:a1:79:83:6e:d0:
c9:9c:84:2c:05:68:37:3f:28:94:92:d9:57:37:4d:
fb:61:64:63:d3:33:7a:58:77:df:2b:b8:2d:97:87:
90:78:ec:68:20:19:89:10:3b:d1:e4:c9:2a:f0:59:
21:62:ff:d8:95:2b:3a:3f:0f:27:0c:e0:ec:63:2a:
31:69:93:ae:48:12:66:c4:35:a1:c5:91:ec:29:96:
46:13:ad:50:69:c4:cb:e3:a5:03:68:7e:35:0a:00:
fc:04:87:5f:ac:6b:d5:c7:f7:02:5e:ef:95:f6:ad:
0c:13:e6:16:9f:0f:9d:77:bc:fc:86:bb:82:ad:3f:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:44:E9:85:9D:3B:8A:D1:08:8F:4E:19:DF:07:8A:C9:8B:EC:AC:BF
X509v3 Authority Key Identifier:
keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3d:74:a1:79:c4:6d:f6:91:f4:9b:88:47:82:6f:ff:d0:7c:
5d:56:31:43:13:2f:3b:ec:5e:ec:48:1e:f6:e2:1f:86:87:40:
74:78:c5:6d:9c:48:20:cc:57:7c:0b:5a:9a:d7:37:77:a7:9c:
d9:20:e5:01:18:2e:43:1a:0b:e1:79:66:de:b0:f6:a8:7e:e7:
70:32:74:2f:77:40:d7:f2:de:bc:b6:af:0b:04:9c:43:88:3f:
25:f3:9f:67:2c:f9:c6:f8:22:33:20:22:88:99:99:96:a1:ff:
37:ca:51:29:6a:14:81:74:13:65:e6:83:fd:0f:72:67:87:d9:
d3:7b:59:28:8d:ba:04:62:dd:97:d9:be:a0:a7:f7:ed:a2:08:
d7:58:95:4a:7b:db:48:97:a4:26:9f:a7:f7:a8:6e:3a:f8:71:
20:02:a5:82:87:de:fb:cc:a9:e0:3a:18:15:2f:e5:f5:c4:ce:
87:b1:aa:88:25:51:52:85:11:9e:07:dd:76:26:19:15:4b:cc:
11:fd:7f:3d:70:a9:b9:96:02:94:b3:5d:98:06:c4:20:c3:d8:
8e:36:e7:a1:83:29:62:43:98:25:d4:d5:7c:f0:41:c0:91:ba:
39:c5:ff:81:da:77:ff:69:83:f0:aa:22:c4:2c:e7:f5:a8:6e:
48:08:b2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:44:23 2026 by rpki-client