Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: kwL+/G63OSsTWNS2aYXEQQ7Rt4+FbBDNrv/5rPhix5E=
Subject key identifier: 20:83:11:90:69:F8:49:6D:8D:26:8C:45:E5:B5:F2:3B:89:5A:86:3D
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 019CAAC628605CF6BEA44A69DD8C7F94FAD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 07FC
Signing time: Sun 01 Mar 2026 19:00:39 +0000
Manifest this update: Sun 01 Mar 2026 19:00:39 +0000
Manifest next update: Mon 02 Mar 2026 19:00:39 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: BnBJCssEVUN7i2o2Yx632maosFkjwR6YNO33zL9I7CQ=)
2: G2elpiRe3mLE21vYizlf0cxzEYA.roa (hash: Eg0ncyWZplHxiExP5Yc2JBQmHWqje615/1fpu2tFHEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:28:60:5c:f6:be:a4:4a:69:dd:8c:7f:94:fa:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Mar 1 19:00:39 2026 GMT
Not After : Mar 2 19:00:39 2026 GMT
Subject: CN=2083119069f8496d8d268c45e5b5f23b895a863d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:55:9d:fb:34:1e:a8:69:ea:e5:9e:55:8c:f9:
bb:43:bf:77:ad:3a:d9:eb:78:8c:4b:d3:d2:a7:3c:
fc:17:cf:5f:e5:f9:25:97:94:46:fe:64:f4:9c:d6:
f6:fa:a4:ff:7e:cb:d4:54:e4:a8:b8:89:c9:ce:1e:
ae:8a:2f:d1:29:1f:07:dd:75:8f:41:0f:24:cc:b4:
04:0d:9c:01:9a:6c:fc:09:16:80:d9:ca:cf:2e:17:
af:87:2a:f0:bf:e9:f0:90:85:5a:37:f9:a4:95:5b:
d5:7d:0b:03:b6:bb:1e:ae:1b:2b:8d:82:41:4d:7e:
92:59:43:8d:df:c8:b9:a7:11:ad:58:4d:7d:5f:14:
e1:52:eb:70:69:1e:54:56:61:c9:a7:70:56:42:e6:
9a:1e:3d:79:90:fc:a3:4b:74:8e:44:df:4f:d7:89:
93:30:f0:e8:69:25:96:ba:28:8f:ba:69:6a:4e:7e:
da:77:8b:73:ae:fa:9b:19:e9:3a:bd:f4:0a:2a:e2:
aa:dc:a6:8e:00:83:fb:6c:e5:95:20:38:5d:83:74:
c2:72:20:f8:8b:da:66:0b:c7:81:45:f0:af:af:ea:
21:b3:a7:d9:a5:51:1d:bc:48:75:17:15:4c:aa:09:
3f:68:83:9f:f2:85:5c:f4:6e:5b:2f:8e:8d:f7:5b:
20:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:83:11:90:69:F8:49:6D:8D:26:8C:45:E5:B5:F2:3B:89:5A:86:3D
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:41:cc:9d:3d:63:30:fd:95:61:65:5c:f8:d4:27:7a:bd:a4:
16:a0:97:ff:d6:e4:63:96:15:a9:10:06:de:5a:7f:13:2e:36:
7c:56:bc:cb:80:f9:af:3d:b0:25:32:cd:66:53:ce:92:ab:f4:
fd:58:9f:58:74:2f:c4:9a:61:82:ce:46:77:ae:ff:bd:6a:e4:
41:66:27:ed:04:1c:ac:43:27:ac:9e:ec:9d:61:46:99:a1:70:
d1:7f:13:a2:3c:47:0e:98:76:d0:5b:43:b2:65:48:b9:72:4e:
b4:26:04:4f:4a:43:6c:bb:24:a7:e5:78:fe:22:ca:dd:4b:84:
d8:1b:4b:11:b9:3a:b8:b2:76:70:09:31:d0:9f:c8:24:92:cb:
33:83:ba:27:ea:84:ff:7b:f2:20:31:02:8c:8f:94:8f:03:66:
97:aa:50:38:4c:c5:8f:46:d8:07:88:e1:ab:f2:f7:cf:4b:fa:
a7:e7:0a:7d:86:2b:0b:18:6c:ae:98:75:ea:84:34:67:8e:88:
34:48:f0:00:e2:28:3c:6e:52:bb:64:10:22:93:3f:76:83:89:
28:65:d7:e8:2d:51:6a:6e:5e:7b:e4:5e:72:2b:f9:46:28:b8:
0e:16:65:5a:24:b9:49:65:1e:c7:6e:cc:4b:15:cf:70:b9:5d:
a7:10:31:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:05 2026 by rpki-client