Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: dd0YwFVQO158hA40HfKUnJpN9rbkXF6y1FmVilTrUl8=
Subject key identifier: F2:FC:3A:46:2B:6B:85:42:04:C9:CC:29:46:A9:56:09:7E:40:C9:31
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 019CACB4DFC3F9CB88CFFC347D7A85DDBD77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0EFF
Signing time: Mon 02 Mar 2026 04:01:00 +0000
Manifest this update: Mon 02 Mar 2026 04:01:00 +0000
Manifest next update: Tue 03 Mar 2026 04:01:00 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: 3IxBSP78/gHJafAmAE7qVQ1cmVI1QVvwLLGXfPQWeCo=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:df:c3:f9:cb:88:cf:fc:34:7d:7a:85:dd:bd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Mar 2 04:01:00 2026 GMT
Not After : Mar 3 04:01:00 2026 GMT
Subject: CN=f2fc3a462b6b854204c9cc2946a956097e40c931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:be:8b:0a:11:26:97:07:e6:ec:35:76:2b:fe:
76:4a:b0:82:27:32:8c:0a:f5:07:4e:83:74:69:aa:
60:01:73:68:49:d1:a5:89:33:1f:d6:29:1d:8e:1e:
de:74:46:c4:1a:48:54:66:7e:57:69:5b:c2:8d:29:
6e:69:b8:bb:75:81:5a:d8:4c:7b:9f:67:1c:fb:5a:
9b:2f:8b:d6:bf:57:31:18:88:3a:ab:51:fb:7f:0e:
1a:df:c7:60:0a:02:db:d4:c0:ff:3b:f0:a7:d5:e2:
60:a1:89:62:11:56:c7:77:8d:ac:c0:02:b7:9b:ca:
60:13:a9:65:dd:55:4b:86:f6:56:5d:dc:4b:a3:6f:
d8:d6:9a:a1:ac:b4:02:4a:a6:a9:b2:2d:49:dd:1a:
9c:74:b3:ef:42:ab:ea:8a:28:dc:a2:9a:1f:9e:a8:
cd:2c:09:e7:67:26:e5:be:7b:5d:cd:09:a4:8a:0a:
cc:9b:3a:74:ae:b5:8c:9c:aa:93:b1:75:e9:e7:d4:
f6:5c:69:bf:25:16:d6:3e:99:63:81:98:dc:b6:91:
a8:91:4f:30:59:01:cb:c9:64:d7:8d:e0:b7:58:f6:
8a:e2:68:ca:a1:8a:78:c9:55:d6:ef:c1:42:8e:0c:
a9:e7:0b:87:9e:1f:7b:9a:66:c5:2a:c9:a2:c9:47:
5d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:FC:3A:46:2B:6B:85:42:04:C9:CC:29:46:A9:56:09:7E:40:C9:31
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:dd:4b:59:3a:35:a4:00:be:9c:bf:53:a3:f1:ab:4c:90:06:
0d:7c:4e:91:70:f0:d4:31:68:57:08:48:90:a5:36:47:ee:7c:
8e:43:a8:ca:a9:db:0a:0b:a3:d4:2e:38:16:5c:8b:2a:82:cf:
f6:da:89:4a:4f:2a:05:94:c4:4c:24:f8:11:84:33:2f:b9:f1:
71:84:5c:3c:ce:f2:c7:dc:0b:9f:21:6a:92:80:b1:be:2e:19:
09:11:74:c2:8b:dc:cc:3a:0b:22:01:66:01:19:f9:99:a2:d8:
5f:be:da:0b:fa:27:47:82:32:8b:0d:e4:ce:db:30:56:32:28:
39:e9:85:13:99:e2:cf:75:d6:28:4d:99:17:66:d9:2c:d3:e3:
4f:cc:83:1a:89:10:64:e6:3b:63:4c:47:d9:f7:71:61:98:98:
9e:b0:00:80:c4:ac:68:e8:37:96:16:b8:a2:cf:98:88:25:c9:
e0:60:04:9c:2f:c3:08:9a:d8:fa:c2:79:4c:a3:07:fd:da:a5:
a9:e4:25:8d:d9:c3:76:fb:e0:f9:08:07:8d:e4:12:f2:32:45:
71:6c:a0:3d:a7:3e:71:d1:e1:cf:27:ee:ba:a6:b2:d0:f8:4e:
b5:cc:11:3d:2b:9a:c6:db:48:22:0f:cc:75:d3:ee:36:8b:d9:
4f:59:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:34:27 2026 by rpki-client