Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: 1Q+tXEsWvPMtqRlWA80WkArDNNOfm1JA8PaVM5jy3U8=
Subject key identifier: 15:B4:95:9C:EB:BE:DA:40:A3:41:65:9F:4D:24:E5:7D:48:11:E2:8E
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 019CAB33F1D3A549E1842272A29DA6789580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 184A
Signing time: Sun 01 Mar 2026 21:00:33 +0000
Manifest this update: Sun 01 Mar 2026 21:00:33 +0000
Manifest next update: Mon 02 Mar 2026 21:00:33 +0000
Files and hashes: 1: 33GSrldWWk3Y0zJgykFgXMqOFKQ.roa (hash: Vx7Lsmyrdo4DClh/Ecx+QsM7m1e5mNGcZKBAQoQZRYU=)
2: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: MJZVNH1Z0LYDiwrKZeIMI7jSEU2bLOuJPvQcCJ+uww0=)
3: drikzNt5D9jwedYli_IhOY-bx94.roa (hash: yqU3IH8u+p0CuFDMh436wHQcQ7bwqSkz3SbUHUvU7mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:f1:d3:a5:49:e1:84:22:72:a2:9d:a6:78:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Mar 1 21:00:33 2026 GMT
Not After : Mar 2 21:00:33 2026 GMT
Subject: CN=15b4959cebbeda40a341659f4d24e57d4811e28e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7d:98:fb:c7:7b:8c:66:6f:86:ea:4d:f2:09:
60:57:62:70:da:8c:30:9b:06:39:89:29:4e:cd:17:
bb:82:33:1a:24:bf:bb:d3:14:33:7a:bf:2f:e8:32:
0f:11:fb:43:e7:0d:80:8b:dd:da:9f:e2:c3:a4:63:
ec:be:88:f7:1b:f9:34:ce:01:a4:d3:c0:e6:aa:59:
99:5f:fa:8f:68:4f:2b:43:e9:47:2f:00:a0:ef:b0:
0d:43:6b:8a:42:af:e4:ac:c5:1a:0c:df:e4:45:96:
68:9f:40:1b:5f:bc:4d:16:c7:c2:3c:cc:97:ae:ae:
c7:3a:aa:65:cc:f2:54:f0:ec:f0:d0:8e:ac:91:d0:
0a:87:14:9e:0d:98:03:e8:2b:a2:a9:79:ee:aa:a6:
12:e9:c1:2f:50:f6:79:8e:ea:04:ba:98:cf:93:15:
23:20:8b:f3:cf:f2:fa:69:34:0d:68:2f:86:ba:f3:
b8:75:e6:a1:5f:7d:05:14:08:59:4f:8a:45:f5:0f:
19:d8:89:e8:7f:e4:de:c1:89:09:84:bb:10:b1:fd:
a8:39:c7:bb:18:d5:52:54:0e:de:a7:aa:7f:91:bd:
1d:86:0c:f8:25:cb:96:0e:96:1a:fd:6e:89:91:70:
5f:12:fd:ca:6b:97:0a:cc:2f:f5:88:ab:ea:f5:87:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B4:95:9C:EB:BE:DA:40:A3:41:65:9F:4D:24:E5:7D:48:11:E2:8E
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:07:f7:cf:2b:9a:02:73:8b:43:08:e6:5e:46:45:00:b2:9f:
51:d9:f7:0c:7b:8a:bf:ed:3e:84:94:8d:f2:7b:80:42:4e:c5:
b8:6d:39:e7:f9:e1:cf:05:d8:61:4c:66:db:62:6a:b0:f4:fb:
cc:3a:63:0d:39:c9:b6:ae:8a:15:ad:5e:4d:fc:f6:59:11:63:
4e:75:55:0b:db:5c:94:13:14:90:ac:30:cb:91:b1:c1:44:c8:
8c:f8:a7:93:6f:22:3c:41:5c:9e:6b:f4:7a:65:38:ad:7c:71:
6f:1f:01:36:e0:60:79:0d:37:0e:f8:d6:ad:8e:e9:c2:3d:79:
c1:e3:a0:16:eb:3d:bb:e8:a7:54:7e:11:3c:8f:30:52:9c:04:
75:75:c7:0f:5e:77:6d:86:de:35:cd:e5:b0:f6:c7:5e:c8:d7:
15:12:cb:f5:c3:df:97:76:d4:75:ee:ef:e2:ff:f9:a9:2f:19:
96:79:51:d5:26:30:83:4a:f4:e2:11:18:9e:14:c9:a8:5b:cb:
19:f7:39:87:2f:6b:74:fb:af:ce:11:c7:4c:e1:a6:aa:d5:24:
59:0b:7e:d1:1a:92:dc:52:ba:dd:22:64:ba:3b:34:4a:29:11:
0a:47:14:1f:10:ed:97:55:bf:9f:60:38:15:b8:c1:93:0c:86:
c2:98:d6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:42:49 2026 by rpki-client