Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: T/ottRW82OsKGnsH5URGnKJJ6hXgDdZvgOixy7qiBDY=
Subject key identifier: C1:DD:0D:8F:A8:B5:1C:C0:64:99:B2:8E:8A:6F:CF:9A:35:9E:D5:FD
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 019CAAC5FBFC510D62A1CBE445E05BD10569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 0BBD
Signing time: Sun 01 Mar 2026 19:00:27 +0000
Manifest this update: Sun 01 Mar 2026 19:00:27 +0000
Manifest next update: Mon 02 Mar 2026 19:00:27 +0000
Files and hashes: 1: 1-qSiDXrAhQQiEkJKVibhHHT9XHY.asa (hash: ek3lFQhBM69m11IFyrspDmCB7+jlGlnfEWGxNiaYwFg=)
2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: Ijt7dPfroq6lCQmsOXqT2Ekk0eViFXVEYHO5bpZNhEs=)
3: s-PKc_tu2wV4rS8DFKDtN3pEWOo.roa (hash: RIeIk6mysjr3waBR5H6D0lD1jhhyLuowL03Fip2BNmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c5:fb:fc:51:0d:62:a1:cb:e4:45:e0:5b:d1:05:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Mar 1 19:00:27 2026 GMT
Not After : Mar 2 19:00:27 2026 GMT
Subject: CN=c1dd0d8fa8b51cc06499b28e8a6fcf9a359ed5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dc:00:96:22:13:3f:5c:92:b7:4d:ca:a7:b7:
de:e6:ff:ad:db:2d:e2:bb:77:2f:1e:05:6a:ea:35:
a0:ca:ca:98:2a:bd:eb:61:b3:5b:ef:61:02:48:f0:
4a:2f:be:42:6a:87:39:dc:71:19:3d:d9:b3:94:14:
69:f7:91:a0:55:e1:ff:d5:7c:34:54:28:58:73:25:
94:5b:a3:fe:8d:31:7b:3d:77:8a:f0:99:aa:e0:19:
b7:5a:f7:cb:67:e6:5c:7d:4b:ce:b4:9d:ed:54:f5:
fe:85:ce:63:f2:57:77:c2:b9:d8:d8:a1:23:48:4a:
2f:49:ec:26:f9:61:7d:ad:2e:c2:5d:eb:cf:93:55:
a4:81:8b:d2:df:18:c5:62:3e:e8:f3:f1:f7:53:a4:
81:5e:45:a5:58:c9:63:87:ee:51:49:55:3f:4a:a5:
37:ae:81:af:8c:87:30:ea:4c:c6:b9:3b:02:50:08:
29:f1:df:d4:55:30:fd:cd:05:7f:59:b2:59:e7:eb:
3d:7c:3d:da:ec:ba:4d:54:61:3c:ab:f7:2b:6c:9e:
89:8b:a9:48:ea:28:cf:5b:77:45:da:19:78:b0:b9:
ec:a5:0e:da:83:0c:a1:13:6d:bd:06:ae:5b:64:f3:
5b:4d:37:09:5a:75:c9:6b:9a:8e:77:89:ef:02:e7:
a2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DD:0D:8F:A8:B5:1C:C0:64:99:B2:8E:8A:6F:CF:9A:35:9E:D5:FD
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4f:36:c9:ed:ad:28:19:5f:0e:41:2b:87:f7:ab:e4:d7:fb:
10:68:f7:33:02:b3:e4:94:2f:42:85:ff:f1:4a:09:fd:c2:0c:
47:16:f9:4c:66:25:ca:b9:c1:69:75:dd:12:5d:5a:38:9a:fa:
55:1f:ad:3e:ba:4b:d5:fa:25:93:05:7c:e6:80:8f:f6:73:11:
ab:4e:70:df:dd:7a:b1:86:7e:34:0e:16:fb:c6:56:b1:2e:7e:
e5:8f:62:02:29:01:7a:5a:f8:3c:5d:af:f9:4f:fd:1f:d3:1c:
6b:92:e4:00:df:c3:1c:79:b8:7d:50:e4:b5:c7:8c:e1:df:63:
04:87:79:75:60:59:d7:4f:4b:69:d6:77:c9:b9:64:d3:38:0c:
9e:7f:73:29:37:2c:2a:10:02:af:a3:48:c9:19:46:93:de:f7:
11:4e:be:04:ef:4c:36:94:f5:73:e8:e9:28:a7:10:4a:c4:ff:
1d:0d:f6:5e:95:9d:c7:3e:da:9c:d0:e6:e9:b4:7d:5d:03:b8:
ca:e2:72:c9:ea:e5:f1:05:66:ef:b3:f8:49:33:c6:23:d0:d2:
8c:1e:d5:90:bf:c8:21:51:ee:e8:e2:7c:09:89:35:10:65:6d:
33:d7:0e:b6:82:6b:21:d5:5c:59:fe:cf:3b:e4:6f:8d:05:ef:
0d:f3:dc:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:02:21 2026 by rpki-client