Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier: 3ZCekxq4PrspPrlk3CaiIFXaXiY2EYgmBr8zCoQrGog=
Subject key identifier: 42:1E:6F:4E:F9:AC:58:6B:FE:00:E4:FA:CE:87:DA:0D:4E:C8:2B:70
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer: /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial: 019CAAFD94AA2DC8FE41BABE81C0EFF7D1F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number: 1554
Signing time: Sun 01 Mar 2026 20:01:11 +0000
Manifest this update: Sun 01 Mar 2026 20:01:11 +0000
Manifest next update: Mon 02 Mar 2026 20:01:11 +0000
Files and hashes: 1: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: qxmv3RtkzJh6gn7Xie6li6xr7e2dlefVVkn3oJGHdxs=)
2: BdqGs3R6xCnjEwShLrflyZwaVp0.roa (hash: RR88JIqbu0K/mTZcvwGkA42FVlGztgnaWCqdDikFkjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:94:aa:2d:c8:fe:41:ba:be:81:c0:ef:f7:d1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Validity
Not Before: Mar 1 20:01:11 2026 GMT
Not After : Mar 2 20:01:11 2026 GMT
Subject: CN=421e6f4ef9ac586bfe00e4face87da0d4ec82b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9b:10:a9:24:c8:25:71:be:1f:a8:88:de:7e:
fd:0d:fc:84:86:f9:b8:05:fc:b9:78:9e:aa:75:89:
80:77:70:20:04:e3:09:47:21:17:51:eb:48:73:3a:
4b:a6:95:9b:ba:3b:ee:48:1e:2e:45:de:c4:09:43:
6d:5e:2e:71:a9:12:97:aa:d8:7b:a8:c7:a1:ab:50:
b3:e0:a3:c3:68:22:3e:07:c4:33:ed:71:cd:d0:39:
d9:5a:43:d2:0b:a5:a6:74:f6:9b:3d:ec:07:6a:3a:
72:c7:c0:de:e9:51:b4:e2:0d:c3:90:bc:c9:74:da:
3a:0a:0a:80:62:2c:b7:f6:0f:1d:b3:63:dd:af:71:
42:da:95:01:d9:52:ad:ae:8e:4c:29:95:79:b1:31:
d6:8d:84:46:b4:f7:91:f5:df:0b:b8:ae:ac:87:09:
ed:95:64:09:e8:b5:e8:4c:0e:4f:4b:7b:1f:35:9d:
0c:ff:55:e4:3b:fc:ad:98:0e:d9:f8:81:7d:ee:48:
ca:d9:f4:05:59:a3:a3:b2:ad:c8:a6:5b:33:d0:7a:
9d:b7:a2:75:90:b9:30:8f:6f:f5:6b:0a:2d:85:e7:
99:5a:e8:93:90:13:05:d7:51:6e:41:bd:cc:df:8c:
d8:a0:59:72:90:74:11:5f:ac:a1:02:48:52:0f:37:
b4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1E:6F:4E:F9:AC:58:6B:FE:00:E4:FA:CE:87:DA:0D:4E:C8:2B:70
X509v3 Authority Key Identifier:
keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:88:59:cd:0a:f1:7a:4b:44:95:3b:69:d6:44:cc:0e:b9:18:
84:ad:57:62:50:4a:00:98:d3:f9:3e:5a:33:e1:2c:7c:94:f5:
51:b0:59:d6:b5:39:b9:e3:b8:d2:30:e9:e2:b2:ef:a0:54:55:
ee:72:49:7b:d3:f7:6e:9a:ae:95:45:f5:0a:9d:57:48:54:26:
6f:45:7e:37:b7:39:96:1d:25:b7:81:cd:b6:c6:c8:65:5a:1a:
f6:c9:55:25:08:67:75:89:63:54:8a:cb:5d:95:76:38:7f:e5:
e4:14:c4:36:68:e2:d3:5c:5b:70:c4:68:2c:60:18:6e:dd:fc:
eb:53:f3:ea:ab:b0:4a:7c:38:38:7d:50:b4:a9:3b:38:4d:cc:
c0:6e:08:ce:56:83:32:f0:6c:c9:37:a5:dc:fa:21:3f:c3:64:
01:65:5c:1c:a5:ad:68:ed:78:4e:59:90:cd:29:fa:f9:1f:32:
d2:ef:0c:cb:a3:03:80:83:e5:fe:92:53:5c:6e:7f:86:59:59:
b0:75:b5:8a:db:8e:03:d2:be:00:24:4f:bb:16:10:fe:6c:57:
be:27:6b:d9:11:8c:f8:19:69:41:90:a0:b1:6e:4f:64:80:a8:
88:6a:84:cf:80:46:c9:e5:d1:21:2b:08:e8:6f:31:1d:be:4f:
0f:a6:c8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:26:48 2026 by rpki-client