Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier: mAs3N6qGxByEHsEJyATqDa5s7kkZc6AUdt2qx3R4mQU=
Subject key identifier: D5:9C:95:E4:99:38:AB:92:A3:B3:EA:F3:86:BC:49:39:D1:4E:EB:BF
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 019CAAC6212819B16B54FD84E9D662A4FE0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number: 1858
Signing time: Sun 01 Mar 2026 19:00:37 +0000
Manifest this update: Sun 01 Mar 2026 19:00:37 +0000
Manifest next update: Mon 02 Mar 2026 19:00:37 +0000
Files and hashes: 1: 1-nIDHjjDOfK0qkT3T38aF1CybZo.roa (hash: wfNaZ1sAvLj/BXad973SBMXYEOp2AK12GK1yxn0qtHA=)
2: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: KIKBvZaSrWfzqV73BStrLRg0f/v8j5QriIVDvPbdBVE=)
3: 7cNt7nS6Ga02pEEvUGwXFcclfa4.roa (hash: IhtCXpz8Ziv5ADSE80GH1TqeWkIm73cJMRq8OxzR0jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:21:28:19:b1:6b:54:fd:84:e9:d6:62:a4:fe:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Mar 1 19:00:37 2026 GMT
Not After : Mar 2 19:00:37 2026 GMT
Subject: CN=d59c95e49938ab92a3b3eaf386bc4939d14eebbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:5c:ba:d4:47:31:52:03:e7:c6:80:4d:2e:b0:
33:74:12:cd:2b:4c:91:53:25:cd:07:f8:e2:51:4d:
45:8d:e1:30:97:93:73:33:12:0f:fe:18:9b:fd:f0:
6d:e5:f2:c3:c3:e2:05:5e:75:32:f4:4f:d8:c2:01:
c8:19:67:d7:21:3e:0e:10:e9:6e:9b:17:70:d2:64:
03:19:e2:48:0e:8e:3d:ec:97:c1:26:ed:8f:c7:5e:
1a:4b:0b:35:b0:92:fc:ff:0d:11:2b:2e:3e:9d:d3:
31:a8:0f:63:08:00:2d:f2:8b:2a:f5:3f:f5:26:2f:
0c:3d:e3:72:a9:3e:bc:57:54:21:a8:fd:d5:c0:55:
38:f8:9b:e1:d6:9e:6b:6d:81:7f:61:fa:3e:b7:26:
08:76:87:ee:a4:86:32:86:c2:44:a0:d4:40:83:21:
34:88:a4:12:45:df:7c:3e:0d:57:b0:4a:9d:14:52:
65:d9:46:43:3c:e1:9b:b7:79:fc:91:15:46:7f:c1:
50:ca:97:2e:aa:b8:8a:64:f6:c7:52:4a:31:64:ff:
47:bb:34:90:ce:92:2a:a7:bc:37:b1:2d:bb:3f:b1:
17:fb:0f:a7:35:f1:9f:98:79:a5:2e:77:a2:fe:c0:
01:3a:08:c8:63:44:4e:5b:af:ca:b2:ec:5f:74:da:
cb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:9C:95:E4:99:38:AB:92:A3:B3:EA:F3:86:BC:49:39:D1:4E:EB:BF
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:2a:fc:39:a8:39:17:ba:8f:c4:2c:3c:d0:1c:f4:db:41:ca:
49:14:e4:35:ac:06:0f:54:25:29:7e:51:65:d0:f7:f8:96:42:
ae:b4:c7:e4:9c:63:e7:9b:85:67:b8:20:3b:f9:11:37:bf:b2:
f2:1a:14:67:49:2f:85:19:6e:db:45:0f:c7:5a:a3:c1:72:d9:
90:5c:33:51:96:f4:11:32:1f:cb:4f:a8:2b:ae:03:80:d0:93:
84:c0:0c:bc:a6:4b:be:16:0b:b7:e3:d0:38:14:a4:30:6e:8c:
9e:3c:13:db:bf:6b:69:6f:9b:49:77:7d:6e:74:d5:c7:04:6b:
0d:7e:25:ac:38:27:15:b2:73:97:40:08:c0:fd:ce:e4:7c:9a:
b7:e2:ab:e7:d0:bb:83:8f:92:22:83:f4:53:ce:5d:23:5e:d3:
cf:fa:52:a9:fb:bc:b7:59:16:f5:c7:13:20:cc:cd:68:7a:2b:
5a:76:5c:02:4f:d6:09:81:c7:4d:db:a7:40:0f:af:e4:21:ef:
a9:f4:4a:da:f0:5a:66:cb:b2:84:05:53:11:b5:3c:00:f5:f8:
51:1c:bc:39:85:fe:ae:ae:c8:e4:f9:19:c0:20:52:7f:e3:cd:
32:ec:20:69:41:18:64:d1:43:e2:5d:b8:59:18:30:20:06:fe:
f6:c2:a8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:50 2026 by rpki-client