Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
File: 4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json)
Hash identifier: 7vD2j48aa8X/g+XMgJ6rQVAIsaF51dDSKDHy7uPXLz8=
Subject key identifier: 85:A6:7E:7F:7C:35:AE:3E:4C:80:1A:6D:9C:C3:FE:4F:66:8F:67:ED
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial: 019CAC46B411A13281D894234F57814EA1FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
Manifest number: 142E
Signing time: Mon 02 Mar 2026 02:00:40 +0000
Manifest this update: Mon 02 Mar 2026 02:00:40 +0000
Manifest next update: Tue 03 Mar 2026 02:00:40 +0000
Files and hashes: 1: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: 6H0GvFF8IrK5urbnKhc9Phz7QO7vUIqvLVJUfT9uqPE=)
2: _kQ6sm_mo_p1SKdQoRItAP8rezY.roa (hash: FamL8pGq13zRSsk9bbJZ26sKBwj3qZkJI9rn7zZOeO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:b4:11:a1:32:81:d8:94:23:4f:57:81:4e:a1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
Validity
Not Before: Mar 2 02:00:40 2026 GMT
Not After : Mar 3 02:00:40 2026 GMT
Subject: CN=85a67e7f7c35ae3e4c801a6d9cc3fe4f668f67ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:99:b4:a1:e5:79:bc:eb:c7:41:bb:1b:61:
4c:74:83:31:46:cd:be:6d:07:a6:0f:b5:d2:24:44:
d9:7a:37:0f:9e:ac:26:1c:cd:09:50:20:3f:44:54:
8e:30:bd:e2:5b:47:f9:b4:a0:d4:5d:ac:d0:7f:cb:
98:78:69:10:c0:b6:02:15:1e:bb:53:bb:9e:66:f7:
dd:20:df:80:13:87:fb:ab:01:43:c8:a7:4e:5c:9d:
c7:15:98:f0:fb:08:2d:fe:41:96:37:80:5d:e7:ce:
7d:31:d7:b9:4a:7c:96:da:f1:6d:04:f1:2d:41:12:
c4:98:0c:f7:68:65:14:68:9d:7a:7f:c6:af:ee:12:
7c:10:52:2b:92:bb:05:f7:60:4b:2f:e1:91:36:29:
43:0c:90:ad:86:7e:28:6c:00:2a:f2:47:93:10:01:
1f:14:19:ea:1d:91:6a:47:f2:e5:c0:53:80:5b:5d:
d7:73:a9:18:e1:97:94:75:28:3c:09:83:d4:b1:bc:
94:0b:86:b4:ca:a1:4e:fe:9d:3c:5f:10:95:d3:37:
21:4c:9c:60:06:6d:9e:2a:45:1d:a5:30:e5:86:06:
10:16:e6:5e:82:f5:96:8d:ff:5d:72:1f:a6:35:88:
fc:56:60:e8:a7:b8:44:3c:84:46:aa:85:1e:4f:71:
25:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A6:7E:7F:7C:35:AE:3E:4C:80:1A:6D:9C:C3:FE:4F:66:8F:67:ED
X509v3 Authority Key Identifier:
keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9e:81:c6:1e:db:18:50:14:bc:3b:41:ee:13:10:42:21:8b:
89:06:e4:b8:8d:ef:d8:82:88:7b:c4:2e:a3:29:0b:86:b6:09:
f1:bc:c1:01:b8:dd:ba:10:57:de:6c:a7:4d:07:e9:9c:55:13:
52:59:24:2f:c5:7f:10:00:69:37:c1:c8:3c:78:d5:1f:61:2f:
d0:6d:b1:af:dd:bf:94:4b:e9:09:78:3e:9f:a9:bf:c5:65:51:
fe:08:8b:65:42:2b:6f:fc:2b:a1:9a:bf:ef:fa:2c:a1:90:a4:
3a:0d:a4:fb:18:26:4c:de:c3:31:41:84:e4:df:4d:91:18:94:
9e:1d:e4:16:0b:89:3e:b1:07:9b:2a:46:eb:cb:ce:6e:1b:23:
4a:e8:06:bf:bb:2d:a9:4b:9f:0c:0a:2a:13:51:90:6f:c4:93:
fa:c0:f9:35:b0:8f:b4:4c:60:24:6b:55:7e:4c:32:d1:1e:ac:
83:0e:4e:cd:aa:10:63:b2:6c:38:0a:3e:5a:df:f3:2d:b6:b8:
59:25:90:4d:d1:1e:2f:50:c0:67:58:8f:4d:55:9f:52:9b:f0:
1f:6f:e9:1c:64:e4:f1:c4:0d:02:c4:4d:45:df:3c:b7:3b:71:
6d:bb:71:79:94:c7:48:6d:7a:b2:12:29:88:e6:b7:e8:26:a2:
c7:12:af:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:38 2026 by rpki-client