Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File: 4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier: 4BegauVTSZRChu29e4JfD9E0TgvUpBEu5S30RmaAurg=
Subject key identifier: B6:18:38:B6:BE:50:7A:34:FA:99:CD:97:B1:97:BC:A6:A9:70:CC:92
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer: /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial: 019CAC7E376F5D9AB08E4F4B3E7CEB7B2F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number: 0AAE
Signing time: Mon 02 Mar 2026 03:01:18 +0000
Manifest this update: Mon 02 Mar 2026 03:01:18 +0000
Manifest next update: Tue 03 Mar 2026 03:01:18 +0000
Files and hashes: 1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: 0huO4f14ltAlaKSQjunO7mNjL0vIJIaRcBWOY7H4M2g=)
2: JHxvjWc19A1tU7KyYGlgqUyLkL8.roa (hash: 9C5Ys0C3mf/K+bjsErUIoK6hkq5Fu1f77/hUUvfMpdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7e:37:6f:5d:9a:b0:8e:4f:4b:3e:7c:eb:7b:2f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Validity
Not Before: Mar 2 03:01:18 2026 GMT
Not After : Mar 3 03:01:18 2026 GMT
Subject: CN=b61838b6be507a34fa99cd97b197bca6a970cc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:38:86:9e:5a:6a:40:c4:42:4f:d3:fe:2b:
47:03:2f:f1:c7:4f:15:45:95:c5:2d:da:98:cc:b6:
52:ff:87:8e:3f:cf:a7:eb:88:e7:4d:8d:cc:21:2b:
31:d8:cd:44:bf:f5:56:20:da:aa:d7:ba:a3:bc:8d:
74:13:4a:ac:41:74:78:73:c4:41:63:f9:85:fa:87:
67:ab:eb:ce:ec:a3:4e:2a:00:a3:92:78:e3:a3:4b:
a2:de:7b:d6:00:d3:da:1b:ad:16:3c:6c:bf:3f:fd:
a5:dd:7c:e1:78:58:0a:30:4e:41:7e:3b:4b:11:48:
9a:3d:95:97:16:9d:3c:a7:45:a4:4d:45:55:57:38:
3f:29:ee:1b:de:c2:ab:33:fd:a4:8b:6a:21:42:7a:
15:13:8d:d7:23:b8:3e:a1:ba:75:f3:b6:93:5b:10:
f7:c1:67:b1:fc:e0:7b:70:ba:90:1a:e7:62:8f:e5:
19:6d:c8:27:9a:7a:ff:73:32:57:79:05:ad:ba:8e:
70:a9:79:4c:58:1a:00:0e:b4:91:32:fd:28:8a:a3:
77:ba:89:c2:f9:91:b3:5d:94:0b:f1:3d:8e:ec:27:
4c:0e:34:d9:25:25:9e:74:1f:a1:20:7e:dc:c1:87:
cd:c1:1a:c6:32:ab:f9:46:fa:8c:f5:68:0f:00:ae:
14:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:18:38:B6:BE:50:7A:34:FA:99:CD:97:B1:97:BC:A6:A9:70:CC:92
X509v3 Authority Key Identifier:
keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:16:24:18:ca:3a:17:c2:a0:f3:87:51:25:8d:d3:6e:5e:12:
3a:fa:1d:5f:6b:fb:c8:62:3a:a4:71:fe:a8:8a:02:2f:30:07:
2b:45:39:8d:cc:d2:cb:53:b2:38:3c:7d:5d:3f:65:9c:22:d6:
18:27:62:8f:dd:86:0d:57:b7:b5:4a:b4:e4:cb:e1:59:c4:bc:
db:bd:b9:da:70:13:52:32:19:76:9f:4c:47:9f:22:6d:f8:ff:
f7:ea:ed:ff:6d:26:62:bf:c0:f0:82:98:5e:c6:af:51:b2:e4:
d7:15:be:a0:9d:e1:3d:f9:39:75:13:6c:f7:f3:12:0e:f2:e9:
67:62:06:bd:9e:43:5f:66:9c:99:75:84:d3:f3:a1:92:e8:41:
b9:d5:6c:f2:3c:0c:c7:d3:56:fb:73:66:1c:af:65:40:7f:f9:
af:52:ec:3b:e3:1d:00:cb:8f:eb:ea:93:82:31:42:32:56:4d:
f7:71:ba:f8:41:bb:d4:3a:5d:0a:77:db:11:e0:09:e8:f3:20:
d6:91:d0:a9:6e:7b:f8:f7:9b:e2:e4:ca:18:a6:83:29:35:f5:
a5:06:ec:dd:ce:ca:f8:ea:3c:44:bf:25:74:5e:95:56:99:d3:
99:f9:78:bd:57:72:82:03:45:3b:f2:ba:ba:2a:13:4e:fb:2a:
39:3e:5a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:58 2026 by rpki-client