Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: GFRGNCcF5Hjmp0IoIkvChZ66+UFA7xMRv/GcqqkjK08=
Subject key identifier: 20:C0:20:12:D5:94:12:40:DD:82:D8:C6:45:E4:C7:98:53:80:88:38
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 019CADC7654FBB6BB3ECC28FBB619BC88589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 179B
Signing time: Mon 02 Mar 2026 09:00:51 +0000
Manifest this update: Mon 02 Mar 2026 09:00:51 +0000
Manifest next update: Tue 03 Mar 2026 09:00:51 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: b2XkTPowJKwQoJ0mCNUHWlK/E2lEaxhiJeFc+gv3sV0=)
2: APkEJsxH2t-1o8uReEsySa-BG0k.roa (hash: QGebNblh9sIV47+DzT8QKo/lQO0JIeSNiq/YB/thR5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:65:4f:bb:6b:b3:ec:c2:8f:bb:61:9b:c8:85:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Mar 2 09:00:51 2026 GMT
Not After : Mar 3 09:00:51 2026 GMT
Subject: CN=20c02012d5941240dd82d8c645e4c79853808838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:94:c7:58:27:02:7d:ee:bf:96:fb:38:68:92:
71:e3:80:7c:0b:84:2e:3a:f8:36:0b:82:2c:e5:ad:
a2:32:d8:9d:9f:f7:ca:d3:b3:a7:fb:89:ff:fb:9c:
ae:e9:e0:70:24:6f:25:4b:38:46:95:13:1d:8d:37:
c5:41:04:30:fe:9b:04:4a:c8:72:2e:84:ef:ed:dd:
4d:dd:9c:25:31:d9:6c:f2:0d:d3:e8:9c:74:88:4e:
37:54:97:6a:de:10:b8:79:f3:b0:25:88:4d:54:9a:
35:e5:44:8f:83:12:4a:9d:98:6f:e0:1e:94:ca:f4:
57:d1:06:a1:53:d7:67:25:3f:82:dc:b2:9c:45:db:
99:ff:db:c9:f7:65:80:e5:e6:90:26:bf:09:43:17:
cb:c3:49:03:71:76:15:5a:9b:54:a2:e2:ef:a5:de:
54:d6:c3:4e:02:f3:8c:05:7b:d0:7c:a5:d7:44:f9:
00:b3:0b:40:a9:58:99:d8:5b:19:7b:6a:35:cc:f8:
93:34:7d:7a:11:43:e3:03:ca:70:13:73:f8:f5:d1:
19:db:74:bf:db:de:fd:09:2b:24:62:bd:25:09:83:
1a:5a:8f:0c:a6:1b:00:72:7b:b8:e0:8d:c6:86:e6:
c7:eb:67:fc:eb:ad:11:f6:79:02:f5:39:de:31:2e:
3d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C0:20:12:D5:94:12:40:DD:82:D8:C6:45:E4:C7:98:53:80:88:38
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:96:aa:c4:8c:0f:6a:d9:c9:fc:02:57:e2:aa:9e:77:09:aa:
c1:19:66:ee:60:cb:c6:ac:78:64:63:4c:bb:87:01:8d:ed:68:
b0:f2:fd:42:a6:3f:3d:43:27:ba:f6:0f:75:02:93:34:75:ea:
b4:ee:96:27:6c:9a:e1:51:44:50:85:d9:f0:f5:c2:bb:b9:4e:
51:64:e0:e8:ed:2d:d1:18:00:67:59:d8:10:63:be:bc:bc:3e:
f3:5e:00:62:8d:a5:e4:9f:0a:9e:aa:b4:1b:84:1c:48:99:64:
7a:4c:31:f8:a9:75:e3:9d:e8:fe:74:8d:49:bf:00:a5:cd:f5:
76:c7:0e:b9:3b:55:19:7d:49:4e:27:cd:c9:ea:ed:de:4b:34:
ef:f4:6f:e8:b7:76:83:f4:0d:c9:1b:f7:0c:c9:38:d8:30:fc:
86:7f:91:89:d9:52:b7:58:34:83:46:92:37:81:e4:7e:12:a6:
74:f6:50:fd:41:e4:5c:99:c7:ae:b4:98:45:c4:b1:90:86:15:
5b:84:86:68:9f:0e:cb:d7:9d:b9:82:a9:10:55:74:53:a4:6a:
9c:3f:f7:42:19:4a:12:43:32:b1:dc:a0:39:95:80:1b:f5:cc:
49:ee:aa:4f:46:aa:d3:fe:7e:50:da:ca:67:3f:7d:06:18:1d:
67:75:49:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:15 2026 by rpki-client