Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
File: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft (raw, json)
Hash identifier: fjRNr4OKqXMBaYpeNbF1vRCgV9hF8Cc6lShp2mlaNvY=
Subject key identifier: 9C:64:C9:12:7A:29:10:95:B6:2A:64:FD:40:1F:18:2B:B8:7B:B8:34
Authority key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
Certificate issuer: /CN=4608d71b772a031740e1d412def6857cc4b1d45a
Certificate serial: 019CADC8100D4E680F10E358C4FA7A93FDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
Manifest number: A4
Signing time: Mon 02 Mar 2026 09:01:35 +0000
Manifest this update: Mon 02 Mar 2026 09:01:35 +0000
Manifest next update: Tue 03 Mar 2026 09:01:35 +0000
Files and hashes: 1: EN5haMM7h6Rseqp1dMvz6VQjbyk.roa (hash: eEBiN2aBr9CTgCZwms33aRc4uqxn1VzQccF+F6LwRuA=)
2: RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl (hash: wRWX8zIELaZXbr+1FenCGKkWtYG1KhFFfPFHkl+h9VY=)
3: wNqsuLHhhTYKZ23gcgc0p6rHlM8.roa (hash: ZHhrFP+PBglJ5Cb6Iy7houth/vPZfswwd76qnw0CEBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:10:0d:4e:68:0f:10:e3:58:c4:fa:7a:93:fd:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4608d71b772a031740e1d412def6857cc4b1d45a
Validity
Not Before: Mar 2 09:01:35 2026 GMT
Not After : Mar 3 09:01:35 2026 GMT
Subject: CN=9c64c9127a291095b62a64fd401f182bb87bb834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:17:d8:db:b4:06:66:a3:73:76:f1:42:36:c7:
97:a7:6f:dc:70:44:c0:8d:0c:89:dd:ec:a9:de:88:
7d:4b:a7:2c:90:25:76:b0:8e:fd:fb:d8:9d:4d:38:
d6:4b:de:cc:5d:dc:41:26:aa:9d:6f:40:63:79:86:
41:f4:51:d1:3e:6d:8a:89:c5:07:64:81:d0:9d:74:
19:5f:86:78:8e:fd:aa:d8:c0:f2:a5:92:80:eb:92:
94:53:33:ab:f1:04:07:2c:a8:e1:88:2b:e4:2d:d9:
16:af:8b:c7:3f:b0:eb:4f:8a:be:b9:ad:6b:7a:fc:
6d:03:06:3b:6b:4a:ee:61:d3:11:00:cc:c0:90:ba:
c0:fd:69:ce:81:cf:5c:06:c8:8b:26:81:49:7a:b3:
8e:5b:5b:05:6c:84:5f:b4:54:cb:fe:df:92:ba:b4:
33:b7:c9:2b:e8:e2:46:cc:c5:7e:eb:c4:8b:4a:46:
0a:75:b6:91:35:e9:30:be:fe:6e:2f:fd:8f:a0:0f:
60:20:0a:cc:3c:c2:00:80:41:96:3e:8c:10:04:f4:
33:dc:22:eb:3a:78:70:49:55:96:f0:84:20:6c:53:
25:8b:ac:94:94:29:99:21:70:a5:c8:8d:c1:34:60:
a7:5b:9e:42:b0:e4:2c:85:4f:df:a9:3e:8c:18:01:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:64:C9:12:7A:29:10:95:B6:2A:64:FD:40:1F:18:2B:B8:7B:B8:34
X509v3 Authority Key Identifier:
keyid:46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a7:f7:df:c4:4c:2b:22:3e:d0:d3:f4:40:1c:5a:2f:04:61:
87:3a:00:0d:66:c5:82:02:8b:f8:68:38:da:c6:e0:7e:35:25:
30:36:a5:8d:6c:5f:48:a3:bd:b1:be:a2:04:a3:d0:cd:39:fa:
ec:cc:a3:e4:75:44:0c:ae:57:be:ff:fc:6a:e7:85:d3:21:ed:
be:a9:62:6c:c3:22:71:a4:93:5b:f9:be:b9:45:cc:48:75:a7:
14:a8:43:ad:ad:c7:e2:f6:4d:72:e8:f8:fd:a0:ce:cb:fc:19:
1a:f1:52:88:ef:10:76:e1:ed:08:20:12:6f:03:a6:92:82:83:
f3:af:17:68:ed:9f:db:93:d5:88:b2:98:45:2d:32:00:f3:19:
fe:66:95:af:23:f3:d5:e5:d0:7a:cc:55:64:00:85:4e:21:2b:
47:01:5c:f7:f5:73:fa:cc:3a:69:7a:c0:01:a8:1a:dc:ac:77:
e0:b6:11:c6:d2:0d:5d:8c:9e:9e:67:bb:4b:a7:29:4e:5d:6c:
28:5c:a5:21:eb:2f:a7:42:ed:ca:e4:2a:b4:52:f6:0f:c6:b0:
b8:59:73:7b:76:3a:48:c2:62:0f:55:2f:2a:a1:87:e7:06:3b:
05:7d:b4:c9:02:79:d5:9f:23:81:fb:0d:50:0d:a6:f9:e2:b3:
92:0b:e9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:50:29 2026 by rpki-client