Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: 9Ql+qZzLh1tv8Qdx6ShPLD1+pBfmITH/HImPjMMHw44=
Subject key identifier: 7A:37:7E:FC:74:30:2D:4C:E7:13:9E:7D:D5:A8:DA:E3:E3:B3:F3:36
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 019CAAFCF6E85AA9E8A80732357B23F1BF33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 20:00:30 +0000
Manifest this update: Sun 01 Mar 2026 20:00:30 +0000
Manifest next update: Mon 02 Mar 2026 20:00:30 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: EoLTNxcr4tk14t15ItD3lJpVi0opWx+0WhXdPrMQIbs=)
2: J1Zd6j9Lcwtys2PuV4W0VrM-mt4.roa (hash: 0QTHJDhGxK5m6zxqs1yz2ztZUhs7s6VuZHp2XlfhZqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fc:f6:e8:5a:a9:e8:a8:07:32:35:7b:23:f1:bf:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Mar 1 20:00:30 2026 GMT
Not After : Mar 2 20:00:30 2026 GMT
Subject: CN=7a377efc74302d4ce7139e7dd5a8dae3e3b3f336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5e:bf:1f:e7:f4:41:dc:69:23:15:eb:b9:98:
33:ee:f3:27:1f:2a:3c:b4:ec:25:82:f5:5c:26:fb:
c3:12:ef:79:63:52:8e:a4:a5:5e:28:35:9e:6d:b9:
5a:f2:b5:e4:a3:0c:bc:ea:fd:c5:92:6d:08:f4:0e:
94:9a:1d:75:04:8c:59:8c:dd:28:85:f0:c6:e3:a9:
4c:34:f4:e9:6e:68:a2:1a:58:69:65:61:1c:e4:7a:
03:1c:36:6a:fa:7e:d9:53:bb:d0:9d:1a:b7:26:09:
4b:fc:1b:e6:83:89:74:94:22:25:5b:7a:1e:8e:42:
53:e8:7d:40:12:b1:03:61:f3:b6:56:1b:3a:b7:4d:
05:e1:9d:6f:9e:2f:dd:eb:0e:35:b5:75:3b:72:ce:
10:36:9a:9c:dd:3a:cf:03:b5:0d:a0:ba:cc:af:d1:
34:e6:b9:e8:da:64:00:f4:21:e5:5c:a9:73:4c:39:
1a:d7:a3:1e:fa:fd:99:f2:c4:af:36:af:a3:6a:33:
6f:89:87:cc:d9:92:79:18:e4:de:db:ed:9b:8e:72:
83:ba:5a:e5:71:7a:15:ee:5c:1c:32:d1:21:23:2d:
ad:98:3e:27:1c:6b:2c:49:88:02:0c:fc:f1:03:50:
20:52:07:70:7a:2d:14:84:fe:a8:69:8b:59:7d:d6:
5b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:37:7E:FC:74:30:2D:4C:E7:13:9E:7D:D5:A8:DA:E3:E3:B3:F3:36
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:30:f0:1f:57:4b:e8:bd:ec:25:59:97:51:15:c5:2b:fd:05:
d9:c4:dd:24:f6:be:d2:ee:cb:4f:5d:ad:80:e2:c9:b6:3d:0f:
ed:30:a6:49:1c:a5:5a:e8:07:b3:35:aa:85:a0:89:d5:ed:f3:
29:c9:d1:6d:18:f5:ef:f0:4e:4f:63:a3:cd:54:c9:82:da:7e:
37:04:6c:4d:d4:78:f5:2a:7c:0e:d1:5d:c3:a7:69:69:6f:74:
a8:94:20:9a:4d:33:c3:d3:ad:78:32:ce:47:ec:ed:b7:89:52:
0e:76:f3:24:73:08:47:41:dd:cc:8a:95:98:01:94:f7:14:0d:
1c:6a:1e:00:a8:95:4e:4c:86:be:8e:d8:c9:6f:c2:ca:b2:b4:
18:b4:c4:72:77:98:2a:00:a8:e0:ff:74:a7:16:7e:b2:bf:82:
e9:35:64:a1:6e:b7:c5:f6:85:32:8c:0b:b1:74:54:36:65:c3:
1a:c9:af:d0:40:80:e5:2a:21:ae:68:4d:64:4d:e2:95:c6:28:
af:ea:2b:07:9f:fc:6f:c9:41:75:45:e8:fb:bc:65:c3:32:49:
91:bb:27:2c:8c:82:3e:6c:6c:c7:45:97:b0:bd:bb:98:5a:7a:
95:28:0d:4e:25:21:90:cb:8e:50:a7:f7:d7:9b:58:12:92:11:
4b:d6:da:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:10 2026 by rpki-client