Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
File: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft (raw, json)
Hash identifier: pkqeqGdENpvWoH6wblk8YkVXrJVuAU3ERTrqpkpbUjI=
Subject key identifier: B8:5C:9D:32:8E:2E:3D:2A:1B:2D:AB:FB:35:1D:9B:9C:B3:0D:47:27
Authority key identifier: E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
Certificate issuer: /CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Certificate serial: 019CAB34B10DD1902456FCC47185810EE772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
Manifest number: 13B4
Signing time: Sun 01 Mar 2026 21:01:22 +0000
Manifest this update: Sun 01 Mar 2026 21:01:22 +0000
Manifest next update: Mon 02 Mar 2026 21:01:22 +0000
Files and hashes: 1: 4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl (hash: 8INvqn4uyMrFCfcUZgI6tm3FZIVrrfSIbQTbsReWImY=)
2: eE7il2_XdwS5_JtxMq2pvAz1LIU.roa (hash: wpN1KIlOzEFCJRu+ipfs4OChRIy+MI7uehA6+KAIz84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:b1:0d:d1:90:24:56:fc:c4:71:85:81:0e:e7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e46e2c4016a8d7392c8574134fd4793b9415a4
Validity
Not Before: Mar 1 21:01:22 2026 GMT
Not After : Mar 2 21:01:22 2026 GMT
Subject: CN=b85c9d328e2e3d2a1b2dabfb351d9b9cb30d4727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:22:32:29:cd:c4:66:f2:b8:d9:57:7e:d3:
cc:0e:72:4d:58:99:1d:a4:f7:9e:2e:d8:0c:ee:6c:
78:66:cb:b8:cd:d5:c6:8c:cb:ec:e6:84:76:e0:83:
d3:ae:71:3e:5c:b1:2b:24:a5:91:7d:58:e7:4a:dd:
44:b3:2d:63:2e:96:2d:ef:d9:e7:f0:73:12:6d:52:
96:4d:3d:6b:5f:61:12:18:a5:65:51:65:25:ca:50:
0b:3b:44:3f:b9:4c:8b:bc:54:34:dd:b7:f0:72:1c:
00:4a:ac:48:5c:98:b9:8b:1a:8f:ca:06:c1:b5:90:
3d:3b:2c:04:c5:dc:31:49:ac:88:91:4c:0f:4b:d1:
5d:38:61:3b:dc:b5:72:22:79:59:e4:01:6d:69:26:
f9:6b:22:ff:74:7a:b4:9f:c4:55:1e:84:93:88:54:
78:f6:7d:f5:49:cf:1b:ca:a1:c4:bd:d6:38:71:1d:
ba:d6:a2:db:f7:d3:28:f1:9a:93:26:a8:53:db:58:
35:8e:5e:b9:d5:bd:4e:c6:3f:f3:ed:e4:0b:05:e5:
ed:3c:fd:6d:f1:eb:d9:66:f7:ac:87:75:8b:4e:18:
de:14:b9:b6:ac:fd:46:4e:61:69:d7:18:be:d1:11:
39:3d:04:57:fd:d9:e8:e0:75:7c:52:8b:16:99:d5:
46:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5C:9D:32:8E:2E:3D:2A:1B:2D:AB:FB:35:1D:9B:9C:B3:0D:47:27
X509v3 Authority Key Identifier:
keyid:E3:E4:6E:2C:40:16:A8:D7:39:2C:85:74:13:4F:D4:79:3B:94:15:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ec8-7456-4e55-b776-d8ece26afec0/1/4-RuLEAWqNc5LIV0E0_UeTuUFaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:40:4e:a6:28:4b:ee:51:2f:b5:ef:a1:0a:88:38:29:90:26:
35:11:87:3e:e7:12:49:ea:55:08:4c:68:b6:82:b4:69:c3:8f:
46:79:86:ff:28:22:67:d0:7d:d2:46:e8:f5:b5:2d:1d:8c:98:
88:13:67:ba:a1:84:76:0c:01:da:c6:54:a7:ec:b8:d0:78:69:
8f:4b:4b:17:f3:6b:4e:a9:29:91:09:95:37:ad:b0:7b:96:7e:
d8:32:d4:09:4c:7b:af:b0:75:dd:04:b0:ff:cb:3f:9f:1e:f5:
34:b3:d9:ea:7c:bb:dd:c1:c3:13:d4:fb:74:09:6b:59:a8:59:
50:8e:e6:16:0d:b6:bb:64:ee:4c:c2:86:91:c9:65:a9:9b:e4:
d4:6a:46:38:03:8c:af:eb:73:4a:b7:4f:59:29:6b:40:2e:f1:
94:6e:ad:ec:bd:07:c0:5c:58:99:04:02:87:10:05:85:77:77:
c3:f3:63:f7:46:ed:07:1d:98:7b:77:b6:fc:d8:00:5d:7c:66:
11:8b:54:9b:7d:13:b7:09:b1:58:09:ec:95:30:fb:de:bc:cc:
ac:83:05:10:63:45:5e:09:4d:d6:4b:01:2d:89:45:d0:8c:01:
71:99:38:77:a1:fa:b6:06:a1:2e:cf:24:0b:79:48:dc:e2:d1:
b6:dd:d8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:17 2026 by rpki-client