Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
File: _4C3cQsTmEQnXJ3pyOdk62QuGMM.mft (raw, json)
Hash identifier: iALA2E6jxEZkCKqaI6ssQPzJ+ISIuFCCkrWcm3pqx3o=
Subject key identifier: 2B:74:D8:0C:C1:7B:9A:A9:E7:FA:65:9E:C1:48:D8:BD:8B:4F:93:04
Authority key identifier: FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
Certificate issuer: /CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Certificate serial: 019CAC46EBB3BE37C9C2938530B8DC35D2E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
Manifest number: 142E
Signing time: Mon 02 Mar 2026 02:00:54 +0000
Manifest this update: Mon 02 Mar 2026 02:00:54 +0000
Manifest next update: Tue 03 Mar 2026 02:00:54 +0000
Files and hashes: 1: _4C3cQsTmEQnXJ3pyOdk62QuGMM.crl (hash: vlLBR0YxVCNsscohQzD7w++XQ2Ydehka5DZH0zRRzEM=)
2: oXxloD6njLTbPU8cd4uQW4D9yL0.roa (hash: jZodZWVBC3KPHbgCzoujj4oDNgC3Pjsq3788f/bPMYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:eb:b3:be:37:c9:c2:93:85:30:b8:dc:35:d2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff80b7710b139844275c9de9c8e764eb642e18c3
Validity
Not Before: Mar 2 02:00:54 2026 GMT
Not After : Mar 3 02:00:54 2026 GMT
Subject: CN=2b74d80cc17b9aa9e7fa659ec148d8bd8b4f9304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e9:4e:e3:ea:fb:77:ec:cb:63:26:a8:16:9b:
d6:e3:8f:1f:1c:5e:ba:41:b9:ec:3c:d1:9c:a0:5f:
ec:d4:b4:3e:4f:b2:98:71:54:e1:06:6f:b0:57:73:
04:cd:ae:a4:e8:86:3c:c9:ff:21:11:67:f9:72:d5:
0e:45:a0:30:3e:85:da:7c:5b:d4:50:a8:5a:d7:73:
8b:12:74:64:d4:10:c4:80:7a:f9:e1:8a:8c:64:dc:
82:f5:39:eb:bb:ea:2c:76:db:f0:a9:9e:ca:07:bd:
e4:b8:27:87:50:34:dd:19:13:75:44:0f:17:d9:d6:
ec:38:ce:93:26:d0:9e:f5:60:00:94:46:f9:e1:66:
a1:93:94:94:ee:12:48:a5:fa:cc:4e:65:32:a6:f0:
69:6f:b8:31:ed:36:57:d8:cb:fb:0c:4d:02:81:9b:
fe:d9:d9:4a:dc:18:a4:6d:8a:39:ca:7a:1b:f6:bf:
56:86:81:ce:17:eb:b6:17:ee:6d:98:21:b0:ee:45:
20:79:60:37:d6:5c:7f:5d:1a:e0:36:d1:82:c1:14:
73:23:ac:bb:ae:c2:3a:56:3f:cb:12:c9:bc:d3:5a:
4d:f1:52:8d:5a:32:7c:74:4e:ed:d8:22:c5:d8:50:
ef:68:4e:48:95:a7:8c:df:2c:79:8a:e7:a9:80:da:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:74:D8:0C:C1:7B:9A:A9:E7:FA:65:9E:C1:48:D8:BD:8B:4F:93:04
X509v3 Authority Key Identifier:
keyid:FF:80:B7:71:0B:13:98:44:27:5C:9D:E9:C8:E7:64:EB:64:2E:18:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4C3cQsTmEQnXJ3pyOdk62QuGMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f8a0a5-b185-49a5-85ad-133eff78442b/1/_4C3cQsTmEQnXJ3pyOdk62QuGMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:50:e3:76:65:94:d5:a0:a3:e2:49:9c:2f:2f:4b:75:34:94:
f6:a1:7e:0f:fc:b9:1d:95:04:0b:3e:8f:f0:31:4a:45:3b:8d:
cd:22:9a:b6:1a:37:88:64:85:d4:fd:73:b0:3d:ad:7c:2f:7d:
30:a1:26:56:8e:83:a0:88:ed:70:38:d6:87:72:a4:a7:21:7d:
6d:c1:b5:f7:5b:35:27:a9:61:b2:12:ff:2d:e7:08:2a:f5:f0:
03:63:5c:f2:f8:8c:87:e5:53:db:33:6f:dc:2c:ad:3e:73:61:
87:ad:6e:f0:ae:90:7e:b3:e4:81:c1:e2:6a:d3:82:90:b3:d0:
7e:26:80:b6:37:75:99:70:5e:3a:1d:62:88:3b:97:f4:40:9c:
20:ec:80:59:86:f0:c8:10:a5:0b:55:9f:77:1f:f3:11:7d:9c:
9e:46:f0:8f:1f:38:bd:8d:e4:7b:57:6f:2f:a0:f3:3b:76:5b:
6b:ec:3d:9d:24:25:05:c1:31:09:fe:34:37:e4:38:16:06:ca:
6a:a9:4c:da:1a:f9:8e:48:5c:ec:c6:25:52:48:aa:f7:8d:94:
77:f6:97:c6:4c:54:84:5e:b1:d5:34:4a:32:ae:3e:bc:99:bc:
d5:06:98:26:0e:c4:12:9b:54:fe:87:de:56:5d:ab:e9:fd:92:
4a:69:3d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:59 2026 by rpki-client