Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier: KCtM2EKZqyxfIQ+tddyHjNA7Sv5N3adBXYVQSLw8bw8=
Subject key identifier: 39:6E:51:21:88:6F:A8:7A:89:60:5F:B5:72:FF:58:84:F6:D1:87:F7
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 019CAA58C7F94366A0482AF499057AD84323
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number: 0ACB
Signing time: Sun 01 Mar 2026 17:01:10 +0000
Manifest this update: Sun 01 Mar 2026 17:01:10 +0000
Manifest next update: Mon 02 Mar 2026 17:01:10 +0000
Files and hashes: 1: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: tjuOYXC3lbMHJ1JuhRPhpTGKEXlmdiksBcjG5Dbvmqo=)
2: 5F_Lv04RXNd_Y46Aej2XB7OXRCs.roa (hash: OFOrOgL1BwCDJs6vNTJlxJXJgyRTHA3y/UE7TO8d/LM=)
3: oil7N-Cu9Bp_DmPdE_j9IZL0Ozo.roa (hash: sJuR4lvRXMBU3fcQ7PumT3oOEz1g58/Vsv/QWac8Orc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c7:f9:43:66:a0:48:2a:f4:99:05:7a:d8:43:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Mar 1 17:01:10 2026 GMT
Not After : Mar 2 17:01:10 2026 GMT
Subject: CN=396e5121886fa87a89605fb572ff5884f6d187f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:a1:d9:14:22:fa:6e:f6:a2:f8:2b:c6:18:
58:91:89:c0:54:6e:35:3e:6a:ef:b0:81:92:a3:90:
a9:6a:02:55:ee:8d:7b:dc:32:d2:ac:a1:1b:24:3d:
52:56:7f:df:e0:c4:95:55:92:a4:5d:9e:15:8f:12:
11:c1:0c:33:ce:a6:62:66:06:a2:92:c7:14:f7:68:
d1:17:2f:39:51:3c:a5:23:c1:b0:d9:88:8c:58:b6:
bd:c2:97:26:31:7e:e8:10:9c:77:a8:b2:c7:cb:bd:
bb:2a:60:4f:8a:54:bc:80:ab:1b:34:69:48:db:43:
0d:db:0f:7a:ac:8f:9f:17:cd:2b:54:49:3a:04:1b:
c9:83:6f:52:bd:1f:34:4a:ce:dd:c6:85:61:6b:80:
be:fe:2f:9d:9b:5d:46:7c:2f:7c:33:b4:68:3c:39:
4b:bc:bb:6f:41:c6:1a:62:e5:13:0d:89:73:f3:e9:
cf:e3:73:ab:fb:95:e9:aa:b8:51:67:b5:23:f9:c9:
d0:41:38:99:e6:c0:1b:ef:c6:73:20:91:56:94:7a:
fe:1c:e6:51:0d:e2:c5:97:82:db:8e:62:72:66:b5:
23:74:85:a9:59:b3:83:50:4f:5e:62:64:66:91:4e:
c0:84:90:cf:1c:8f:0f:3d:b8:2c:35:95:31:4d:8e:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6E:51:21:88:6F:A8:7A:89:60:5F:B5:72:FF:58:84:F6:D1:87:F7
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b2:83:57:ff:18:23:47:8c:56:d0:13:c4:b4:16:49:7a:16:
d1:e6:2b:6f:5d:3f:5e:10:31:f7:73:b1:26:d9:5b:56:e5:86:
1e:0b:f5:00:15:53:5c:28:47:1f:d8:09:81:15:10:85:ed:b7:
66:5e:d9:cc:de:18:e1:63:e3:ed:35:18:5c:4b:a8:59:f3:1a:
51:3a:be:20:f4:87:d1:2e:57:e1:a6:a1:fb:0a:d2:b8:de:ac:
35:e3:f5:0d:d4:59:e0:38:97:c9:ff:7a:36:d7:7b:8a:c5:1c:
ac:14:45:f9:76:b1:a6:3d:c3:02:17:4e:d7:2c:fc:b2:e3:26:
6d:f6:97:8b:3d:f0:4a:7a:3e:7e:1a:49:9e:9f:e0:35:9e:85:
48:18:12:e7:b7:9d:29:c0:4f:02:56:d4:b1:4e:5d:75:51:6a:
6e:d0:4b:9e:65:ed:4d:55:20:9b:64:5a:16:7a:95:2e:5a:c9:
d5:91:bf:f2:06:6a:8f:ea:d4:e6:b5:26:06:9f:85:b9:c9:f0:
d9:a3:9d:d0:4e:a6:d9:9e:ea:b8:c9:f5:91:0c:cf:ee:dd:24:
9d:7b:78:3e:97:ff:9c:09:68:9c:60:4c:da:a9:a8:4d:99:b1:
28:18:13:a5:2f:cd:6b:1b:bb:31:ab:fe:c8:ad:24:dd:5c:c6:
83:7e:a4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:49 2026 by rpki-client