Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
File: 4n5m5APTHHlYM1KYFo3mCiFcDA8.mft (raw, json)
Hash identifier: BgMTeG2D/iUr58SUXkZK9hZ0YKXQ1sxgFGUp5gWV9p8=
Subject key identifier: 1B:14:71:26:FD:20:DC:9A:20:BE:F8:3D:88:08:92:E4:70:56:E6:8A
Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
Certificate issuer: /CN=e27e66e403d31c7958335298168de60a215c0c0f
Certificate serial: 019CAC474CD4080D51FAA76B41D9EC581E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
Manifest number: 07A7
Signing time: Mon 02 Mar 2026 02:01:19 +0000
Manifest this update: Mon 02 Mar 2026 02:01:19 +0000
Manifest next update: Tue 03 Mar 2026 02:01:19 +0000
Files and hashes: 1: 4n5m5APTHHlYM1KYFo3mCiFcDA8.crl (hash: 65DkeZEgvoOInN1YqMlVxr3uYR9BRr3U4u1Nk0Ihzyc=)
2: xeT78wcPTTpFTx_ZDSn-jPOj960.roa (hash: YEu+TOkba5EcfR4vL4O+vAIH2BMk3hjKJVmwS8XvNmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:4c:d4:08:0d:51:fa:a7:6b:41:d9:ec:58:1e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f
Validity
Not Before: Mar 2 02:01:19 2026 GMT
Not After : Mar 3 02:01:19 2026 GMT
Subject: CN=1b147126fd20dc9a20bef83d880892e47056e68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1a:a9:98:92:ce:bf:d1:e6:0d:8c:41:93:ae:
f7:cc:7f:bb:90:2a:80:f1:c0:a8:b1:f5:e8:66:67:
21:9d:0e:ff:a8:07:09:5a:6c:0d:4c:c6:32:43:c7:
0c:d6:d4:4b:7e:77:97:23:2f:7a:15:ac:59:a6:b9:
23:ab:0e:f0:78:e1:49:7a:ac:9b:87:99:8f:3d:e1:
d5:29:a0:4c:91:65:b7:ad:c4:62:4b:b3:8f:1e:b9:
eb:fd:bb:4f:94:26:33:d1:5a:b6:19:b3:25:d6:cd:
3e:0f:39:33:52:7e:51:fa:e3:65:e9:db:a3:69:19:
b5:a9:42:76:d1:ee:4f:0f:ab:b4:d6:06:b6:c5:6d:
b4:8c:28:1f:fb:43:87:8f:2e:f0:09:39:6a:c0:c2:
3e:30:39:4c:98:39:4f:25:be:a8:c0:dc:51:d7:f2:
c4:0a:fa:6d:72:ad:ea:78:92:8d:56:c0:9f:32:0d:
9a:ea:75:b2:d7:fa:2e:03:a5:56:d2:f6:54:bd:df:
25:fe:8a:b5:b9:12:d5:10:55:13:4e:88:02:9f:aa:
27:9f:d4:d9:d3:8d:f1:25:60:2b:72:f8:ca:25:86:
74:57:b9:23:3e:ea:88:84:fb:17:ef:c7:93:4d:05:
b8:23:e0:0b:67:cf:de:98:3b:ec:df:80:54:bd:46:
a9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:14:71:26:FD:20:DC:9A:20:BE:F8:3D:88:08:92:E4:70:56:E6:8A
X509v3 Authority Key Identifier:
keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ec:45:34:17:8c:ca:76:2c:8a:10:43:9a:a0:fa:83:28:e2:
a3:6c:63:a7:78:64:1e:8a:67:f7:4c:e4:85:89:64:73:c2:d4:
ca:bd:ba:d5:4f:b7:42:36:9d:5e:6a:f0:a6:6b:4e:df:45:95:
35:c1:df:a5:f4:b9:ee:f3:f5:c8:a0:40:c2:08:0a:ee:40:bf:
98:ed:f5:2c:92:de:68:6c:4a:1a:1f:6b:9d:1d:b2:59:78:b2:
6b:84:e5:50:8e:6d:04:2d:6c:c6:34:68:b1:bb:30:34:44:3a:
1e:5f:18:25:0b:78:bc:73:5b:61:34:d8:34:c4:7c:bb:82:53:
9e:78:14:40:10:aa:55:a3:96:c4:c6:cf:f4:28:cc:d4:6b:0d:
fc:11:a2:4d:d9:c9:c4:7d:34:af:a5:47:38:db:4d:65:45:25:
19:e2:17:8d:e6:e8:ea:e0:94:2a:cc:d6:23:d2:6c:89:15:e8:
dc:47:28:6c:b7:97:ec:05:88:8f:aa:f5:26:c1:fa:28:8a:2b:
f7:cb:c8:4f:1a:03:84:c3:23:40:b4:a9:5f:81:f3:3d:cd:24:
78:be:7d:9d:35:40:b5:a1:c5:ab:ca:a8:ec:ee:6a:2a:2b:07:
93:68:58:d8:39:95:a1:68:2d:57:79:7f:12:dd:67:6a:d6:2f:
81:40:a5:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:03:40 2026 by rpki-client