Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier: 4xuLz3ebobrGDsxIbTuGnGNaf5Uwk0x9Ojd8g5f4BXI=
Subject key identifier: 0E:F8:2E:A9:7E:3E:C3:58:99:DD:8D:9C:5C:2C:D9:54:DE:9D:29:E0
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 019CAC1004DCB02C1825525FBDB4F056C91C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number: 0F59
Signing time: Mon 02 Mar 2026 01:00:56 +0000
Manifest this update: Mon 02 Mar 2026 01:00:56 +0000
Manifest next update: Tue 03 Mar 2026 01:00:56 +0000
Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: cUsIeOV23EhEeugVt4goGx4UcIIU+F4KavOJl02AtyI=)
2: a9UUQvVUQnxe273U6aniMeuVSV8.roa (hash: 7vEXbXNqwlMSgJyfX4S5RjxAdbJ6vW8VHoOqOei233g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:04:dc:b0:2c:18:25:52:5f:bd:b4:f0:56:c9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Mar 2 01:00:56 2026 GMT
Not After : Mar 3 01:00:56 2026 GMT
Subject: CN=0ef82ea97e3ec35899dd8d9c5c2cd954de9d29e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:15:0d:3b:f3:2b:11:b4:da:6f:c6:71:74:
eb:af:80:4f:bc:b3:3b:bd:82:92:32:7f:bf:b7:6c:
80:62:3b:f7:35:70:ce:3e:a1:80:6e:7c:1c:61:b1:
a7:1b:e2:ae:73:54:07:4c:e2:4d:34:2b:be:d7:19:
44:b4:3c:95:da:47:f5:ec:03:60:d3:d3:57:89:24:
a3:52:ef:21:5a:99:f5:80:11:c3:4c:3c:5b:5a:e2:
35:0b:37:8c:9b:4e:92:db:09:f7:82:77:2f:55:75:
e6:64:52:5e:2e:ee:ab:5c:5e:92:87:63:d1:6a:fd:
a0:64:5e:10:a2:45:9e:5f:eb:64:c9:c9:19:27:83:
2e:f0:0f:87:04:86:4b:73:bd:34:d9:20:2f:fb:92:
25:9d:aa:b0:6f:a7:c5:c0:a7:f4:d7:25:31:70:aa:
b6:7c:d8:ef:c2:26:ae:b5:57:c2:f5:4e:f7:b3:b9:
43:c8:6e:1f:36:65:11:84:ad:78:e9:00:e4:e4:dd:
12:b9:19:9b:a2:3f:94:39:c8:f3:18:9e:99:0f:02:
fa:3a:49:81:51:fd:2e:21:2a:36:af:e4:ca:0f:fe:
b3:b7:64:c2:34:42:f7:27:eb:96:ef:63:08:4b:66:
09:74:88:ed:28:e1:93:7a:a1:f9:af:0a:c9:b4:d1:
67:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F8:2E:A9:7E:3E:C3:58:99:DD:8D:9C:5C:2C:D9:54:DE:9D:29:E0
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a4:8e:4d:48:da:96:f8:41:42:0b:d6:32:26:b2:da:2e:59:
17:cd:9f:3e:c8:12:ce:1f:4c:a4:1c:16:ef:be:73:b9:47:0d:
85:a7:b8:e7:d2:d7:be:13:9f:88:56:3d:37:7c:c6:1b:2d:73:
e0:2b:aa:d1:fb:14:61:c0:3c:91:ee:fa:f2:71:17:1d:96:82:
b5:d0:e9:96:65:7a:a6:ff:f4:bb:18:04:a4:7a:ce:dc:70:66:
eb:b3:00:f0:38:91:b1:ef:89:85:60:af:43:81:cd:c2:48:9d:
0f:b5:ac:c3:2a:d8:f3:dd:f5:bd:78:f2:ce:9a:0d:a3:88:e6:
52:3f:1e:5d:dc:62:f2:2d:27:c8:01:62:f8:9b:33:43:0c:9b:
da:ca:6e:43:b7:ac:1a:15:43:24:19:ad:29:44:b3:b2:43:17:
95:ee:42:c2:ff:3d:f0:7c:d3:2d:8a:3f:d6:4e:58:b7:72:e4:
50:2a:c0:9f:13:ab:f4:e9:88:ee:66:10:32:0f:9b:0a:62:25:
92:fd:77:9f:0f:f5:59:b9:d3:65:90:79:47:2a:22:a5:c2:11:
13:eb:19:4a:bb:ef:5b:51:ce:96:b3:9f:7d:47:7f:1b:6f:58:
dc:54:96:80:13:75:e4:d3:3d:84:76:aa:1d:67:59:83:72:74:
49:6a:b1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:23:34 2026 by rpki-client