Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: gynN8K8x1uv74PqQBK69DaSUGGWW9gAkZV5pJYFzFKk=
Subject key identifier: BE:CA:33:26:E4:92:BB:7C:4C:85:F4:CD:D9:60:2B:4B:1A:C5:B6:1E
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 019CABD9E06A98746BECC8BC36F8C54275DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 1205
Signing time: Mon 02 Mar 2026 00:01:48 +0000
Manifest this update: Mon 02 Mar 2026 00:01:48 +0000
Manifest next update: Tue 03 Mar 2026 00:01:48 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: qYRPJhVotoy/xwXRR+Nfm4fi5tMwx5taWA4/6J5LNjE=)
2: nqVRQY9OL-QYsG10ABRxkJgdhMg.roa (hash: wMAwtClt2rNSLlbeGnfkTll5PRaR6LFumc9JToEyja8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e0:6a:98:74:6b:ec:c8:bc:36:f8:c5:42:75:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Mar 2 00:01:48 2026 GMT
Not After : Mar 3 00:01:48 2026 GMT
Subject: CN=beca3326e492bb7c4c85f4cdd9602b4b1ac5b61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:f8:f8:35:b7:49:a6:a7:02:f6:cc:59:ee:
7a:55:5d:df:54:1f:15:ae:22:e0:c8:07:33:53:7f:
9d:44:9d:33:03:81:4a:f1:07:33:73:07:ac:19:40:
fc:3f:be:90:e1:a1:9f:a6:5c:e9:cd:ba:9e:4c:3b:
11:98:39:38:96:ee:c8:19:04:c0:c7:5d:65:a0:fb:
84:8a:b0:2b:aa:ba:a0:8d:f3:44:ea:08:8c:c7:73:
4f:85:a0:53:b0:e9:33:5b:e0:ad:5b:3b:6f:78:a8:
91:4e:48:86:f2:57:6b:5e:4b:a2:68:6c:91:c9:27:
b4:d1:88:a1:15:99:e1:32:60:01:38:3d:af:9d:6e:
16:e3:78:a0:5a:b0:34:6c:5b:8d:b0:d6:61:bb:67:
dd:4e:9d:db:0e:85:33:94:29:de:dc:d2:f4:82:d7:
04:40:87:5c:ec:74:d4:4a:90:22:65:5e:b0:18:5a:
4c:42:a6:33:1f:47:88:7f:50:83:25:fd:c8:10:96:
5d:90:25:78:0e:3f:dd:78:26:08:ee:d1:3d:2e:89:
5d:fa:cf:1d:70:18:4d:99:52:cd:34:ca:24:00:5b:
01:5a:d9:c6:d1:96:94:4a:b8:13:e6:db:fa:99:ff:
2d:7e:81:2e:93:ed:db:58:c7:b8:3f:dd:06:c5:a0:
b9:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:CA:33:26:E4:92:BB:7C:4C:85:F4:CD:D9:60:2B:4B:1A:C5:B6:1E
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:7a:cb:2d:1c:7e:04:7b:b6:22:b4:cd:68:44:7b:3e:1c:ed:
66:72:ec:27:e5:69:a3:f1:8e:4d:51:e7:ed:71:9e:71:fe:78:
e0:6e:dc:c9:0f:54:2a:58:c1:3a:c3:56:df:a1:1b:e4:00:2b:
11:4b:5f:ab:44:47:9b:6e:0f:52:73:4b:8f:fd:2d:61:25:03:
92:15:d5:ae:54:8a:62:d4:a4:38:3a:de:13:27:ac:3f:de:2f:
9b:e0:ce:45:5d:73:23:9f:a6:b4:32:a4:71:db:1f:02:98:30:
ce:5f:22:68:de:c5:ac:3f:f7:ac:b7:08:d8:c5:a6:a7:ba:50:
a8:0a:bd:bd:87:42:e1:de:3a:b4:79:41:4d:b3:6a:80:8b:78:
81:2e:ff:46:30:8b:4b:b6:ac:77:44:61:cd:fc:79:de:5f:4e:
08:96:ee:2f:f4:51:2a:bf:6b:79:97:14:53:24:15:2b:bf:6a:
17:ec:96:3e:05:61:e6:71:a6:e6:30:db:3b:15:b5:0c:34:4f:
7c:76:87:97:0e:77:03:d2:70:f4:d3:87:b2:66:19:df:5b:17:
6d:38:da:a1:3f:9a:29:eb:df:9a:9f:63:dc:40:57:22:4f:cf:
52:8c:62:e4:fc:6c:5b:f8:ef:87:b5:33:a0:98:ca:35:70:a0:
08:47:31:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:09 2026 by rpki-client