Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: 7N3rZ95nnkC8gsjDc5Rd3Up+XEVbsScuWYmEOeUmTtE=
Subject key identifier: 61:3A:38:98:C1:C7:54:73:E6:88:C5:75:E0:C5:D0:13:21:B0:45:CD
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 019CAA5903BE8980C194F9661092E6284AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 17:01:26 +0000
Manifest this update: Sun 01 Mar 2026 17:01:26 +0000
Manifest next update: Mon 02 Mar 2026 17:01:26 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: +pahCmXAuJPI60yvHbabM7jypH9+p2hUferd0V0kxv4=)
2: HQvqu0FyNTgLxOCtIkfc5EdcDj0.roa (hash: 130FHhBXUMCrMDc50ZJnqMVOCj69/WSdEuG7otm6jac=)
3: JDb5A2keqNNHHn7egHMcEGsac60.roa (hash: ArdL/hAkNPkcLPWJJnXPFWGPHSAOP/P5AYcbgtu+Yug=)
4: MbiryQPvDhyE4fWE2RUNJytt6AY.roa (hash: OrXM+BXuK0a9EBtLr+v3zOe94bGU/tMcOd4waL7ij94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:03:be:89:80:c1:94:f9:66:10:92:e6:28:4a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Mar 1 17:01:26 2026 GMT
Not After : Mar 2 17:01:26 2026 GMT
Subject: CN=613a3898c1c75473e688c575e0c5d01321b045cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d4:61:0f:e2:31:41:4e:c3:c6:a1:02:48:af:
74:21:f8:59:4d:ed:f7:90:75:a3:61:da:02:41:47:
56:1c:5b:19:60:b6:56:29:6f:43:77:31:12:94:dd:
a4:b2:31:33:4f:88:ed:54:b0:97:a2:e3:91:e4:9a:
a9:f7:89:4e:fe:2e:db:58:02:2e:ed:5d:c1:b9:54:
a1:37:a2:0b:b5:c6:c5:6b:8d:fe:a4:cf:b1:da:6d:
41:af:c1:d7:12:88:56:10:9f:5f:8d:de:d7:ae:cc:
12:9b:01:d3:e0:9a:8c:24:09:b0:58:78:04:c7:ad:
d2:95:db:52:94:ad:5d:3c:f1:ee:ee:af:48:d0:7a:
1b:26:a3:c5:9e:7a:6b:7e:81:e2:d8:f5:71:b9:b4:
59:4c:7c:26:97:aa:4e:f9:89:0a:44:78:c3:e8:53:
14:dc:6d:61:f9:33:85:78:44:7c:59:5f:ba:cf:8e:
76:13:1e:27:51:72:c5:36:13:18:0a:54:b6:49:b0:
bb:e0:43:18:35:90:34:3b:0f:41:74:72:18:9c:5a:
07:24:28:c7:73:ae:8b:e9:a8:e5:d3:b5:86:76:19:
d8:fe:17:8b:af:29:fa:7e:1a:f3:a0:e2:37:2c:4a:
cd:eb:a7:88:83:72:64:28:65:c9:46:93:09:db:a8:
1b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3A:38:98:C1:C7:54:73:E6:88:C5:75:E0:C5:D0:13:21:B0:45:CD
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:0e:45:fb:4c:62:29:57:95:73:84:2a:d9:9e:c6:ee:0d:49:
f4:f5:71:82:ea:d1:e0:87:40:44:13:02:db:90:cb:9d:aa:31:
fc:bb:9c:4d:97:31:78:19:ca:38:9c:45:58:eb:25:7b:54:47:
25:c9:e7:f0:cc:0f:88:d1:62:df:41:7a:f3:56:c8:44:e6:c7:
1a:0f:3c:f4:44:9e:83:2c:3d:81:5c:29:8b:0d:28:58:15:1f:
ec:ad:73:31:7b:8b:c7:98:cb:03:a1:a3:b4:8c:df:82:65:3b:
d8:ee:61:77:d3:50:8d:d6:d7:8d:32:06:64:de:37:df:69:50:
94:54:d0:ca:8c:44:7b:ac:88:32:fb:71:5b:2a:cf:ce:33:16:
d2:3a:25:15:2e:ae:58:c8:1f:97:27:14:eb:87:a5:01:d8:03:
24:27:ee:3a:94:23:1f:95:5f:a3:d8:4d:1c:58:39:8a:f3:4c:
78:bc:d7:b4:23:36:29:1a:92:67:90:2c:17:b1:92:7d:11:a4:
92:12:d9:83:3f:d7:35:c8:9b:c5:28:66:68:cc:19:ff:2a:38:
98:53:a9:f1:b1:9c:90:5e:fd:01:66:c8:e3:93:cb:7c:ca:1d:
47:9d:20:bd:52:0d:a6:b4:25:2a:b5:7f:e2:a8:36:2a:99:ed:
b3:b3:3b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:28 2026 by rpki-client