Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: ol/6rqQxoPdHT63LTcssAr+UEmXKiS3iAHLpFQ8z0Y8=
Subject key identifier: C3:D8:80:43:D2:39:99:55:48:5F:CF:9E:0D:89:FB:EF:1C:F3:8C:2E
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 019CAAFD198F14CBB52E843DFD08C621CCA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 1656
Signing time: Sun 01 Mar 2026 20:00:39 +0000
Manifest this update: Sun 01 Mar 2026 20:00:39 +0000
Manifest next update: Mon 02 Mar 2026 20:00:39 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: 4fSnjfyw6jyMwViM3SO2u0ilxob2asaCRBf/zA5bZWE=)
2: E582u3b_wirr6G_w4u9uogz74z8.roa (hash: 81B6PrtCWAN/tZ4dAD4doQginsu0czWU20EU6ygqMqw=)
3: XzHwdc8CnV6b37aUuwbB9K5aCVg.roa (hash: Ajp8GTPxK9A3C7R9uHBAngG8he1JSPPWTWmru9BuMHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:19:8f:14:cb:b5:2e:84:3d:fd:08:c6:21:cc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Mar 1 20:00:39 2026 GMT
Not After : Mar 2 20:00:39 2026 GMT
Subject: CN=c3d88043d2399955485fcf9e0d89fbef1cf38c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:07:8f:58:b3:ed:7b:46:f2:6a:e5:5b:dd:c4:
7f:e7:4b:b8:35:60:6f:4b:df:99:fb:29:a4:62:40:
11:fc:a2:8c:b2:42:4c:90:dc:4e:73:96:18:3e:90:
82:e4:b4:3e:0b:8f:27:15:60:0a:15:59:cd:22:35:
70:8b:f6:fe:df:3f:52:72:54:11:bb:a5:5b:92:4f:
4e:3b:bc:d8:3b:0f:8c:84:17:10:60:2d:d2:5c:8c:
2c:8d:34:11:f8:ef:20:97:f9:a5:c0:95:96:78:94:
47:4f:81:da:70:1d:35:7b:f8:7f:3b:b7:05:a7:05:
92:0f:61:4e:2b:7b:c8:0a:a2:34:a7:cf:79:57:1a:
49:6f:f9:32:27:32:df:b7:ca:9f:ce:7b:ac:04:57:
97:88:de:42:f6:41:b5:45:a5:db:14:cc:9d:de:03:
15:52:d8:00:db:9b:b4:fa:5e:4f:91:d3:3d:9b:01:
1e:bb:c3:44:32:3d:05:8d:1e:29:96:83:3a:71:d3:
31:ab:40:1a:cc:d2:00:58:9c:ad:fa:c2:e3:af:7c:
53:3e:a8:6c:07:4e:92:9c:88:34:86:73:fc:e7:64:
c2:45:5b:62:80:56:0d:72:a9:48:71:d3:51:48:df:
ce:e3:ec:b4:4f:c7:d9:18:2f:13:de:70:9a:06:4e:
09:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D8:80:43:D2:39:99:55:48:5F:CF:9E:0D:89:FB:EF:1C:F3:8C:2E
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:21:9b:19:7f:ee:4b:ea:45:35:cc:5e:f0:c4:1a:20:55:12:
4c:ca:71:0a:ed:ff:0e:0a:c0:77:6c:aa:bc:37:13:86:f2:8a:
53:d2:bd:db:28:5b:c2:64:ae:36:06:99:19:b5:68:4f:6f:57:
69:98:44:68:a1:1b:d5:c9:40:77:ca:7e:92:fd:ab:22:82:f9:
4e:38:4c:23:dc:c4:ab:a5:68:dd:f8:97:9a:06:f4:d9:25:40:
78:7e:07:2d:1a:72:45:18:e0:1e:b2:39:96:67:f4:5e:a9:20:
b2:99:89:fc:c0:1f:0e:17:a2:95:08:63:09:70:a4:46:5d:ea:
87:95:3e:e8:3e:94:ef:b4:e3:1a:6e:d6:a2:1e:2e:14:a8:50:
12:d8:cd:e5:3d:5c:b5:d5:cf:a5:00:d6:bb:c9:09:ac:cf:e0:
c8:bc:3e:64:34:88:dc:b0:8c:70:e3:29:eb:30:24:36:c4:0d:
53:43:b1:fc:cb:ea:75:69:8b:90:5e:ef:fb:8c:43:b4:58:e5:
d7:c1:2f:b0:c4:67:e1:81:97:67:90:2c:f7:be:69:b4:9b:e5:
af:9c:5a:19:97:13:b3:d4:96:68:79:f8:44:86:09:80:e9:e5:
29:d7:a8:8e:5d:6b:cf:f3:9f:e0:6a:87:af:d3:43:20:b3:c5:
d2:50:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:48 2026 by rpki-client