Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier: 8eveg5u43UKMl13Le3lrW2+gvMbHZoJzJcH3JcW6YAM=
Subject key identifier: CA:3F:26:ED:0E:F7:03:A1:66:EE:E8:77:D5:2C:15:53:83:A6:3D:1E
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 019CAC46BDE232D5256C51F2620F4146F279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 02:00:43 +0000
Manifest this update: Mon 02 Mar 2026 02:00:43 +0000
Manifest next update: Tue 03 Mar 2026 02:00:43 +0000
Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: pQC1bpz7LdEZ/gh6U4LQKfSaYNqDqKmmnuB3Bd+r8Ec=)
2: qBE40uvjM3KhFoCteBLo6azxKqs.roa (hash: C60d4ehA+DJZSNtWiIvd1yDVO2n8d2kan5kGi6wEoXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:bd:e2:32:d5:25:6c:51:f2:62:0f:41:46:f2:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: Mar 2 02:00:43 2026 GMT
Not After : Mar 3 02:00:43 2026 GMT
Subject: CN=ca3f26ed0ef703a166eee877d52c155383a63d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a7:dd:f8:ac:f3:3a:30:ec:be:35:44:a0:56:
4d:a1:58:6e:fa:fb:aa:88:76:4a:b7:d3:ce:2e:e9:
94:6a:fb:3c:d1:e7:c6:de:98:eb:ff:6c:1d:1b:c8:
29:7c:a3:96:9d:2d:79:7e:ff:c6:3e:14:92:93:7d:
67:cd:d9:14:cd:3f:d9:87:46:62:46:11:36:86:e0:
64:6e:b9:a0:2e:69:da:7f:34:2d:58:04:eb:77:8d:
08:c1:1f:92:e4:d3:39:5c:a4:7d:4e:98:27:ad:73:
96:72:64:3d:c7:c1:0d:90:41:a2:1e:8b:29:30:08:
97:f4:fa:d3:8e:09:f4:f5:09:3b:fc:22:05:d6:7e:
c2:6c:d0:6f:e3:9e:2b:18:f0:2c:06:59:61:71:5c:
82:42:9f:74:7c:66:13:66:63:33:24:a4:a2:f3:7b:
08:5e:09:ea:92:14:c6:33:79:68:5f:22:03:1c:4b:
e3:00:d3:93:69:2b:ed:f1:04:3e:07:df:dc:74:6f:
2e:9c:6e:7f:6e:42:0b:1c:17:b5:f1:ba:2f:df:6c:
81:a4:6c:df:24:d3:9a:d6:c1:22:a1:43:25:65:b2:
f5:3a:86:7c:b2:76:c4:bb:49:cb:9f:fd:f0:76:1d:
cb:2c:60:d2:88:26:75:fd:3b:c0:46:2a:f7:91:2a:
ec:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3F:26:ED:0E:F7:03:A1:66:EE:E8:77:D5:2C:15:53:83:A6:3D:1E
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5f:5d:ee:04:e4:22:2f:f2:f1:97:80:63:7d:9e:7f:e2:2d:
c5:11:f5:7f:13:f1:7d:a1:20:a8:f1:1a:d0:fc:c9:c7:9d:2d:
e7:46:71:81:37:ec:e1:41:5a:05:5e:b0:ae:c5:a7:81:a4:40:
8d:bf:82:fc:4a:ae:a4:f4:ae:51:80:ae:f6:e5:2a:65:cf:1e:
49:70:17:86:6e:45:9c:6c:37:28:e4:c9:5f:ca:41:28:af:41:
dd:1e:c1:23:6c:ea:69:58:cf:93:9f:87:22:cc:b1:10:18:32:
bc:2b:78:fe:1c:1f:f0:3d:18:57:55:c4:3f:c4:e0:0b:0c:7f:
ed:df:6f:20:1a:8a:a5:fe:a2:43:42:20:54:4d:0b:a5:2c:43:
e7:48:16:1d:b1:a0:73:ca:81:0e:d9:6a:78:3f:b6:b4:0a:a1:
0c:f4:f9:4c:a7:b9:15:66:cb:9b:c1:97:bd:4c:a8:bf:1e:0e:
1a:97:cd:59:cf:15:d7:6c:d7:90:c0:8e:19:95:de:d7:e5:c3:
92:55:4c:9a:a1:33:c2:69:3f:74:23:ab:ec:52:68:4b:a7:bc:
6e:40:2a:c2:3c:b5:a3:b0:c0:9c:96:87:01:93:3f:3a:ca:be:
1c:cf:fb:1b:1c:ee:1d:99:24:f8:83:f0:9a:0e:67:cb:66:37:
11:c6:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:44 2026 by rpki-client