Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: 52/dqkjw80p//eb23YKnj2+Bnz07MjDzo1Gk9mKi4qY=
Subject key identifier: DC:52:37:53:BF:81:89:52:28:8B:E7:15:86:F4:42:6D:66:30:1E:4C
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 019CAAFD416A2AEEAFCEE67E59262F18D8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 20:00:49 +0000
Manifest this update: Sun 01 Mar 2026 20:00:49 +0000
Manifest next update: Mon 02 Mar 2026 20:00:49 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: 2RkSlU/iQq0pkc5hsjSu+T13UG1J/f3iGXBqUQ0ClIo=)
2: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (hash: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec=)
3: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (hash: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:41:6a:2a:ee:af:ce:e6:7e:59:26:2f:18:d8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Mar 1 20:00:49 2026 GMT
Not After : Mar 2 20:00:49 2026 GMT
Subject: CN=dc523753bf818952288be71586f4426d66301e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:27:5d:1a:08:42:c5:0f:f8:fe:a4:e9:37:
e3:d7:77:9f:30:56:0e:c5:5e:f0:5d:8e:99:4c:d6:
42:65:72:f4:f1:a5:d1:11:88:83:4c:c7:86:45:28:
43:e4:58:02:0f:cd:b3:9f:b1:17:d2:7d:e6:82:a5:
70:ce:ef:ff:a5:8d:3e:24:ef:ba:78:86:e5:71:1c:
98:7e:6e:2c:95:e6:52:40:be:83:b0:e8:01:91:49:
45:49:f4:f0:86:24:97:3c:a9:4b:0f:e3:2b:a9:af:
72:97:8a:b9:00:51:aa:b5:f3:ad:a4:e2:13:8b:16:
1b:d4:d2:84:1d:eb:19:7c:67:a9:d0:4b:3f:27:61:
1d:ab:79:18:1e:db:6f:5a:9f:6f:ac:b6:a9:9e:31:
62:74:f5:6c:2e:13:ee:61:02:78:15:66:2e:34:9a:
5d:95:38:74:0b:c8:df:b5:76:9d:a0:8a:8e:a5:e8:
df:cd:9f:30:b7:3f:7c:4f:73:ff:45:1b:a7:63:d1:
2c:2b:d8:53:e4:4f:12:72:32:31:d2:4b:95:b5:ca:
88:b5:14:93:19:e9:a3:eb:f2:0b:5e:2e:75:b8:28:
86:ba:a0:9f:84:4a:de:99:51:b2:75:8f:22:65:b6:
36:56:60:96:8c:0e:a5:f2:66:b6:61:09:fd:01:d4:
cf:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:52:37:53:BF:81:89:52:28:8B:E7:15:86:F4:42:6D:66:30:1E:4C
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:92:12:50:ac:c4:9d:c0:da:73:3a:30:bf:c5:51:a6:38:e2:
d4:c2:f8:8b:51:14:9e:dc:48:b1:70:61:02:77:1f:b7:9e:eb:
ca:a2:ca:9e:a0:dd:3e:c3:55:77:43:00:23:b1:c2:d2:e9:a0:
a1:d5:d9:bd:8d:69:43:79:7b:c8:ee:02:80:7f:2e:20:4d:fc:
54:c8:ed:ac:1e:49:29:de:b7:6b:b0:d0:90:42:d6:d1:ed:2e:
43:86:df:a5:b7:26:80:da:e0:96:3a:54:d6:ba:b3:a5:f0:e9:
06:fb:1c:2e:86:2b:41:88:59:62:3b:8c:ca:c6:20:94:47:83:
88:95:d2:26:37:9d:a4:2b:5b:9a:6f:38:2f:43:1e:10:c5:8e:
f1:78:a0:f8:c0:7a:31:66:1d:81:e4:5c:ba:5a:47:8d:f8:aa:
10:c6:e5:90:9c:99:53:af:77:5c:dd:69:09:cb:50:72:bb:fd:
2f:bb:5e:06:4c:bd:e9:a8:f8:aa:51:e0:7e:ee:11:43:a0:75:
8b:43:45:0b:58:9c:e9:9b:02:6c:9b:4e:79:1f:d7:a4:dc:a0:
0e:03:2b:3a:62:a8:5b:e7:41:95:75:3f:04:d9:64:9b:0d:b9:
0a:61:dc:f5:d8:6a:2e:bb:1d:0e:53:d7:58:d2:51:a5:9c:84:
61:2d:47:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:34:12 2026 by rpki-client