Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: y8d/qo9SMov0oLcWnKSaeVcd2P9PBbwqaza3/VxZDhE=
Subject key identifier: 10:E9:E2:29:20:B0:A6:31:65:23:AA:8C:8C:3C:A4:BC:5A:6F:D4:5B
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 019CAA8F84E86D68A9B594061DCB4E66C593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 090C
Signing time: Sun 01 Mar 2026 18:00:58 +0000
Manifest this update: Sun 01 Mar 2026 18:00:58 +0000
Manifest next update: Mon 02 Mar 2026 18:00:58 +0000
Files and hashes: 1: 1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa (hash: WqRlSVx1Vu6h+ixUdX0cx9Mi9fCqLKMKSDgwbsVbLZ8=)
2: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: ojvFYhtUHTEuM8Jm+F7jaQv/AvtRKOkeYHfiLwa4MJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:84:e8:6d:68:a9:b5:94:06:1d:cb:4e:66:c5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Mar 1 18:00:58 2026 GMT
Not After : Mar 2 18:00:58 2026 GMT
Subject: CN=10e9e22920b0a6316523aa8c8c3ca4bc5a6fd45b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ba:47:6e:57:7d:8b:52:62:03:ea:a8:4e:fb:
b2:44:96:aa:40:f4:4d:cd:2d:a9:97:b8:d0:50:60:
3f:5c:84:bf:a2:4e:33:f0:24:b6:d1:42:27:79:c4:
0f:bf:d7:ce:a3:39:bf:ca:de:c8:40:9a:f2:c5:a2:
b6:c9:d9:74:29:b0:fa:09:6b:9b:e0:03:c6:4e:4c:
b9:14:9f:bf:cb:b4:67:a9:a9:82:12:f0:fe:71:93:
0f:40:a0:cd:d8:5c:48:6c:69:3d:66:13:22:41:48:
b7:d9:7c:e4:cb:a5:a7:f8:4b:b9:43:a8:33:64:22:
45:2d:b1:1e:da:00:76:6f:b9:c0:53:e1:6e:05:e5:
0b:54:75:17:c4:d5:a6:13:0d:3e:0f:99:c8:d6:e8:
81:f4:a2:a5:25:26:1f:78:9f:38:e7:42:7e:5a:f7:
35:7e:06:ad:34:85:b7:90:a2:de:23:8d:da:77:59:
9e:6d:56:26:f7:ed:4b:be:6a:ce:5b:b2:1e:6f:38:
31:6a:cd:16:00:48:e1:6a:d3:f5:b7:c5:af:2e:16:
23:c8:57:f5:bc:80:3e:26:6f:70:c2:da:73:8c:86:
21:a4:06:bd:b2:33:5e:f5:eb:7f:fd:eb:07:7e:1a:
bb:37:dd:f2:f8:82:2f:f1:3c:7d:95:6b:e6:07:41:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E9:E2:29:20:B0:A6:31:65:23:AA:8C:8C:3C:A4:BC:5A:6F:D4:5B
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:37:bd:d7:b8:1c:ef:02:02:41:f6:d5:a6:a4:41:67:47:8f:
96:4b:5f:86:ac:a0:14:cf:29:f6:ca:8f:3b:83:a3:31:b8:ca:
3e:71:01:00:a3:a7:e7:ce:71:39:ec:39:54:80:c5:76:3a:3f:
d5:72:0f:c2:2c:66:a3:eb:2b:11:98:09:9a:36:dd:01:01:79:
8c:38:1f:28:76:6d:8b:b0:38:5f:1e:ee:e4:de:14:a9:46:42:
0e:98:03:52:e0:75:ec:27:b0:f9:65:71:85:61:f8:41:6e:4b:
1e:88:1f:16:56:0d:e3:fc:7a:d2:03:7f:f0:16:33:e8:ac:4e:
48:a0:be:11:27:ae:5b:b7:68:df:9d:1d:05:03:bf:ac:e1:7b:
bf:65:13:2b:26:aa:72:52:6a:54:c7:72:91:1c:13:3c:bc:dc:
ab:7a:22:d6:15:6d:f1:71:0d:6a:85:08:1e:6d:4f:66:71:f6:
13:3a:f7:27:1f:cc:e1:b9:fc:4d:cb:a2:49:3d:3f:a2:f4:36:
bd:32:ce:99:f2:9d:22:99:f8:ea:6a:80:da:44:dd:5b:1d:06:
80:cd:93:79:a3:c9:ad:12:7d:db:e7:06:2f:e5:43:aa:c3:ac:
c4:8a:c8:13:79:f9:be:e0:94:c3:c7:2b:6f:3e:bf:ad:bb:62:
45:0c:82:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:00 2026 by rpki-client