Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
File: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft (raw, json)
Hash identifier: 24SUAsave1NkJVAR+AtthVHRuwu+uJPmJQfPF7reRok=
Subject key identifier: 49:83:04:FE:00:9B:CA:89:31:D6:BC:CE:08:41:B7:DA:41:78:82:A8
Authority key identifier: 7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
Certificate issuer: /CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Certificate serial: 019CAA5930650D25D436A5122B7B0887EF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
Manifest number: 0474
Signing time: Sun 01 Mar 2026 17:01:37 +0000
Manifest this update: Sun 01 Mar 2026 17:01:37 +0000
Manifest next update: Mon 02 Mar 2026 17:01:37 +0000
Files and hashes: 1: Tcg_tO4TH6VzGp-S2NuzlB5WECE.roa (hash: vf8tQnW7oqoTXI/ZHAP1eVwRqXSdr72IdtoqliIf4Ys=)
2: f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl (hash: VfyNibkAEbhJjcMcNVUeid57ag2/+P+Se6TVlcrMvrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:30:65:0d:25:d4:36:a5:12:2b:7b:08:87:ef:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f85e990354397e36c0ca903a0c620c7709efdcd
Validity
Not Before: Mar 1 17:01:37 2026 GMT
Not After : Mar 2 17:01:37 2026 GMT
Subject: CN=498304fe009bca8931d6bcce0841b7da417882a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9c:a1:67:01:4a:f5:95:38:cc:b1:42:d0:f5:
81:0a:64:f0:54:e1:d9:12:42:dd:5d:38:3a:4c:28:
2e:81:51:ff:fa:db:d0:b3:5d:b3:39:71:71:bf:22:
d0:25:81:79:8c:49:e7:73:65:ca:86:a3:51:0a:7e:
d9:fc:f9:ab:76:b2:e0:ba:ac:0f:82:cf:46:53:f8:
0b:98:20:e4:1d:21:ab:63:64:45:2d:0d:33:65:a7:
6f:4e:d7:ec:2a:51:a5:26:1a:27:48:17:ee:30:64:
63:b5:5d:b3:ea:33:c1:bc:aa:82:49:cf:1f:15:5d:
40:84:58:df:18:fd:c7:b5:df:2e:e5:d5:1d:0d:1b:
fd:91:84:de:3a:5a:59:b8:07:ac:a1:b5:63:07:a3:
9c:a2:45:ea:c7:4e:cf:7d:35:dd:f6:1a:5e:fe:8d:
b3:98:2c:05:c0:00:1a:eb:5f:5d:92:6c:f8:8c:0d:
5d:64:43:79:1d:94:f4:08:fd:8c:df:af:b5:bc:2b:
c6:0c:a6:9c:df:37:53:95:b2:1b:20:d8:a1:72:63:
ca:14:be:0e:0c:3c:b7:8a:21:98:cc:60:33:b7:9b:
25:de:31:8a:47:e9:62:cf:cb:54:63:d3:6b:69:24:
0c:bf:ba:76:7a:7c:31:e7:3e:59:22:76:fb:02:6e:
e7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:83:04:FE:00:9B:CA:89:31:D6:BC:CE:08:41:B7:DA:41:78:82:A8
X509v3 Authority Key Identifier:
keyid:7F:85:E9:90:35:43:97:E3:6C:0C:A9:03:A0:C6:20:C7:70:9E:FD:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/4ae175-55d0-484d-8d11-8c9d5823bad9/1/f4XpkDVDl-NsDKkDoMYgx3Ce_c0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:1b:da:ee:ad:45:b9:99:67:20:21:79:fc:bb:5b:72:4a:a2:
28:88:d6:f2:a1:f2:ba:74:d4:31:b7:f5:70:7f:c9:5f:b5:26:
1f:04:5d:c5:2e:7f:d3:80:0c:c0:75:8a:28:14:db:03:ca:e8:
ac:59:32:05:72:0a:f4:11:79:94:50:73:43:53:ea:35:1c:1f:
46:de:51:be:56:f2:f9:e1:d8:5c:6c:55:13:92:3a:ae:ae:35:
64:da:f1:5c:59:ee:ad:56:1a:df:bb:3c:b5:fd:5f:14:a4:f6:
fe:01:67:90:a2:95:82:09:ea:aa:fa:6b:20:7e:ba:d3:fa:13:
e9:72:2c:73:6c:99:7e:81:ba:f4:a3:a5:0a:98:ab:88:0c:36:
f3:14:8d:b3:6f:59:7a:fc:69:b7:5a:56:c9:8c:3c:a5:f0:11:
3f:23:c4:50:1b:df:14:74:e0:ec:4a:10:f4:6e:f7:91:b8:75:
af:f0:b6:ec:fc:6d:6a:80:1b:80:da:12:70:c0:62:61:0b:a2:
73:1e:e6:c4:11:bc:a8:d9:b9:af:4b:cf:db:58:b2:d4:43:a0:
f4:b8:6c:46:ef:85:1c:0a:bd:ed:73:77:3e:99:fc:9d:50:ae:
9a:dc:e5:33:38:a7:89:2d:0f:bf:72:b6:50:21:c8:29:82:c8:
74:5a:59:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:07 2026 by rpki-client