Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
File: 4COOIod_cwOWQAfOPjQG9frZSWI.mft (raw, json)
Hash identifier: XKGL6IxhsmpI2qeYNWsW+xyr+v4eG3xUVjmU7+PNW+E=
Subject key identifier: 3B:6D:53:9F:35:00:BC:34:A5:01:E9:79:A4:3B:53:C6:8A:82:2B:82
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial: 019CAB6BDED59D5A5F5C80CB95992B096162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 22:01:39 +0000
Manifest this update: Sun 01 Mar 2026 22:01:39 +0000
Manifest next update: Mon 02 Mar 2026 22:01:39 +0000
Files and hashes: 1: 4COOIod_cwOWQAfOPjQG9frZSWI.crl (hash: XJTGuojKNntHuSogDCiJsewu39BDuBc43E7/whx4498=)
2: MzwLUabPMVpWUbhvtlyD-QzTVcQ.roa (hash: X0nH2HeW8oMQ0R4XVjts1kBv71dyXZYfSTlTWrarM3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:de:d5:9d:5a:5f:5c:80:cb:95:99:2b:09:61:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
Validity
Not Before: Mar 1 22:01:39 2026 GMT
Not After : Mar 2 22:01:39 2026 GMT
Subject: CN=3b6d539f3500bc34a501e979a43b53c68a822b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:39:58:17:ce:c1:81:d9:91:4b:8b:dd:43:
d9:d9:f0:d4:cc:d4:0f:b4:2c:4c:a1:92:c5:95:2c:
50:3d:dd:2c:98:1b:e4:a4:d5:c1:77:11:5e:bc:f2:
a8:1a:9b:56:ad:00:4f:ed:c9:a2:4c:22:bb:3e:5e:
9e:e4:1c:a4:81:63:e1:cf:56:8b:4c:b9:9f:86:d3:
e6:e9:0f:73:4e:7b:15:05:78:f0:1f:8e:48:2a:3a:
4d:a6:c0:92:66:4a:64:b1:cb:f5:1e:99:c0:21:4d:
e1:31:27:73:de:6d:40:77:92:6a:01:f0:07:e0:89:
69:54:90:3e:ed:a2:4b:69:76:3f:71:76:a2:4f:ba:
94:bc:b3:cc:64:2d:46:bd:85:1d:53:0e:4c:3e:29:
d0:4f:b2:c2:e7:d4:2d:f4:5c:0c:28:3a:06:83:3f:
d5:c4:77:6d:73:65:14:c5:98:7d:96:a9:cb:af:af:
fe:46:4c:62:3f:9d:bc:31:57:23:20:b4:24:78:13:
1a:3d:b8:9f:f1:e5:ff:56:db:22:6a:41:4c:88:11:
1c:98:88:2f:35:64:dd:ba:9a:ad:b1:8c:a1:e4:08:
7d:45:fa:f0:f1:6f:46:64:7a:52:8b:09:d9:fd:5a:
90:4e:43:0f:60:7c:7a:5e:ca:60:75:06:13:ac:bc:
9e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6D:53:9F:35:00:BC:34:A5:01:E9:79:A4:3B:53:C6:8A:82:2B:82
X509v3 Authority Key Identifier:
keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:73:b4:7f:31:c6:d7:83:5d:1f:bc:a9:3f:a0:15:c9:ab:81:
37:18:6e:31:98:ff:39:a4:18:bc:58:ca:67:9e:06:7a:8c:15:
c8:71:40:8e:32:d5:45:9d:e4:f9:c2:ce:8c:c9:09:17:61:84:
aa:92:ce:09:cc:55:d6:ac:88:84:7b:2b:10:33:f0:ff:67:dc:
28:d7:0d:b3:e6:c4:fe:99:51:90:b0:e7:79:89:53:0c:37:04:
66:2e:fd:7a:81:cb:1b:f3:d4:cb:4f:7d:fd:5f:49:fb:d5:78:
a2:c5:f3:b1:a9:3b:73:f6:76:b7:cc:cf:09:05:2a:63:e7:40:
d7:7f:a9:59:ec:5d:d4:56:c0:fc:fb:24:53:db:a4:15:cb:dc:
80:7f:a4:3f:12:51:54:64:38:f4:8d:d8:1e:b7:6a:1d:ea:f0:
4c:72:45:c0:ed:d6:da:ef:59:f4:7b:38:e6:25:e1:a5:7f:02:
37:d3:16:29:52:a0:a8:db:09:0a:66:09:91:c2:ec:19:ef:a4:
c5:fb:e2:33:8b:74:fa:ce:75:5f:a8:04:33:d8:2e:c4:a6:b2:
63:41:6a:e3:c9:56:65:38:d5:02:f9:90:48:e4:99:4a:72:ad:
0b:af:e9:cf:38:77:78:83:de:69:fc:cb:7d:96:44:99:18:19:
26:96:68:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:43:00 2026 by rpki-client