Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
File: 4mi9DSXlWsGkKoTCo7nIkINh1uE.mft (raw, json)
Hash identifier: vDTKQDKwXRl78FTMI4lmJjrhMNLBq5e4qXHZ/oSLqKw=
Subject key identifier: 4D:ED:DF:50:F3:90:37:6D:67:82:7F:3E:B0:AC:FD:91:17:EF:DC:1E
Authority key identifier: E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
Certificate issuer: /CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Certificate serial: 019CB0C81A595F3904E1B0A1002AA9D698D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
Manifest number: 21
Signing time: Mon 02 Mar 2026 23:00:29 +0000
Manifest this update: Mon 02 Mar 2026 23:00:29 +0000
Manifest next update: Tue 03 Mar 2026 23:00:29 +0000
Files and hashes: 1: 4mi9DSXlWsGkKoTCo7nIkINh1uE.crl (hash: jCoGWKR4J04ZqgP3gHM4GaLGktOXfvq0E8/PLuHeslc=)
2: JQH3U3cXJOwqHLIl-7Bwky7-HLY.roa (hash: SJWNpyd0W8U00MUBSeKEN8/PPIQ0TFlfn5di0BSI3Hg=)
3: K0Bz8gUXJ1GAp68K0LjDByi_SVk.roa (hash: CPs5nAdCCsQDzUUAym9dDL0dv2iUIo+oUoQLSVCUp9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:c8:1a:59:5f:39:04:e1:b0:a1:00:2a:a9:d6:98:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e268bd0d25e55ac1a42a84c2a3b9c8908361d6e1
Validity
Not Before: Mar 2 23:00:29 2026 GMT
Not After : Mar 3 23:00:29 2026 GMT
Subject: CN=4deddf50f390376d67827f3eb0acfd9117efdc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9c:74:2c:25:78:1f:83:2c:94:dc:d5:f1:c9:
1e:60:fd:1b:cf:68:87:e0:97:67:1d:15:97:5b:ba:
2b:a9:a7:78:dc:e0:f3:ad:a7:fa:67:be:73:7f:b9:
18:96:1a:df:e0:fa:3b:75:f4:f1:70:6e:e3:84:9c:
2a:92:63:52:d5:0e:bc:cc:58:fa:4e:c4:9f:34:58:
3c:be:5c:40:e5:eb:c9:54:a0:a6:6b:37:be:9b:22:
48:fa:c1:49:bf:cb:3d:80:4e:3a:ec:58:d7:1f:16:
b4:b8:a1:e8:af:e3:f8:06:af:0a:d9:8a:c4:6e:4d:
00:27:4f:f9:ba:53:87:45:3f:c8:4f:f8:6a:7a:92:
0a:cf:64:98:9d:54:83:e8:ca:10:f6:df:c0:f2:3e:
e8:f8:18:f0:9e:df:d0:45:1c:80:49:2e:ca:c6:2e:
9b:48:22:74:62:15:37:ec:6b:96:c1:86:63:3e:05:
c7:52:04:32:4c:21:37:38:1f:c4:1e:5b:39:f3:78:
1c:ea:be:8b:e4:f9:9f:b5:70:37:6f:98:b9:d5:7a:
ec:49:b7:dc:a6:68:cc:48:81:b5:d3:59:10:c5:6e:
7b:4c:48:4d:6f:c0:2c:bb:63:db:d9:88:e9:9a:a1:
e3:28:c5:a4:da:62:61:f4:2f:c6:b9:2a:c2:c8:42:
06:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:ED:DF:50:F3:90:37:6D:67:82:7F:3E:B0:AC:FD:91:17:EF:DC:1E
X509v3 Authority Key Identifier:
keyid:E2:68:BD:0D:25:E5:5A:C1:A4:2A:84:C2:A3:B9:C8:90:83:61:D6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mi9DSXlWsGkKoTCo7nIkINh1uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d2b86b-1ab8-4574-be8b-8c322e7437e4/1/4mi9DSXlWsGkKoTCo7nIkINh1uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:ac:30:90:aa:29:af:ce:21:40:0c:e2:dc:3a:4f:1d:54:54:
d6:0c:ec:ca:a8:ad:25:bd:fb:2d:d3:b2:01:59:81:98:1b:36:
37:98:bd:98:01:fb:7f:87:4b:55:44:86:0f:e1:74:c7:96:bf:
67:b2:8c:e0:4d:32:48:e5:fb:e6:c1:ab:29:5b:ad:7d:67:ac:
48:68:61:44:42:1a:5f:76:51:74:2c:04:e1:ea:10:ef:45:b8:
41:a9:90:79:9b:b4:4b:e5:4b:77:72:17:65:06:be:5f:55:73:
fb:11:cc:1b:96:eb:8d:41:b8:df:63:f1:16:8a:e6:28:9e:d4:
05:5e:66:f8:06:bb:4e:33:6d:59:44:be:e0:7c:01:6a:e8:3f:
f2:c6:cf:37:1a:70:be:0f:ce:3d:ce:78:6b:04:7f:d8:60:c9:
37:2a:f8:de:d8:45:6d:01:e0:bc:3b:b9:4f:df:59:8b:e0:5d:
d1:74:9c:8b:49:6c:c0:1d:8a:8c:1b:df:e6:e3:1b:10:25:4a:
0c:f2:18:51:4d:37:d9:eb:f9:11:cc:0a:71:d0:ea:83:a8:38:
77:a0:06:1b:b2:51:36:dc:c7:f6:a5:e1:4e:39:3f:dd:26:ee:
7d:12:42:86:68:7b:c7:23:f6:c4:7b:c5:13:56:27:87:2f:4e:
41:42:27:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:07:36 2026 by rpki-client