Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
File: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft (raw, json)
Hash identifier: B/Ne+DW15JKB5Ns6s1bee4XUrJh0kwM3lO73M4pVn1k=
Subject key identifier: 00:BD:BE:43:4C:CE:8A:01:C5:91:D8:45:73:A2:5B:A4:29:D3:AD:F8
Authority key identifier: E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
Certificate issuer: /CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Certificate serial: 019CAC46EFD3181454B8C91637E66A526E19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
Manifest number: 12A9
Signing time: Mon 02 Mar 2026 02:00:55 +0000
Manifest this update: Mon 02 Mar 2026 02:00:55 +0000
Manifest next update: Tue 03 Mar 2026 02:00:55 +0000
Files and hashes: 1: 4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl (hash: lCsKcOu07xCwDysWdo6Opk5/+xqDWCc7C+KRu3ZhLX4=)
2: H8G6D-Wk6u8Ak866YQFvElddI-c.roa (hash: PEnd5yN8T5n1W+yxVyKPvkVNjUPkgKs3BkeHGhdDjdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:ef:d3:18:14:54:b8:c9:16:37:e6:6a:52:6e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23c0c3e0106c965d460cd0c3cbc5e234f82a6b4
Validity
Not Before: Mar 2 02:00:55 2026 GMT
Not After : Mar 3 02:00:55 2026 GMT
Subject: CN=00bdbe434cce8a01c591d84573a25ba429d3adf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f8:ee:a2:b1:c9:f2:b7:98:3e:e1:58:5b:68:
69:42:d8:71:a8:c6:63:6c:71:41:b4:6d:b3:28:5b:
2a:24:1c:07:e4:08:d3:8f:63:98:b8:8d:54:ce:5c:
24:3d:cc:9a:cc:fe:34:bc:99:55:6c:22:90:6e:a9:
29:4d:46:97:06:eb:2a:f8:1c:e5:b1:2e:cd:03:67:
c4:f1:66:e2:0c:a7:0b:59:a6:bf:99:25:0b:60:5c:
54:60:04:6e:68:8a:0b:de:9c:31:46:4f:50:44:93:
56:d9:c4:74:99:14:26:8e:45:86:a5:c4:92:09:ce:
e4:06:17:04:b6:cf:21:7b:72:9e:9d:fc:a9:9e:3a:
9b:2c:cd:30:cc:68:51:20:da:e5:31:c9:df:64:9e:
2d:a3:dd:8b:ec:14:c6:f3:a2:7e:be:3a:8d:29:c9:
e4:c8:16:bf:1a:2f:bf:8b:e6:cd:69:89:8d:a2:51:
76:87:5a:81:fa:f1:5a:00:22:5d:1b:e8:e3:56:0a:
1d:52:d9:6c:b9:ce:f0:c6:23:2c:27:50:b7:47:3a:
32:54:18:7e:4c:6d:48:4e:5e:d6:62:6c:af:29:e8:
b3:4f:2c:94:ef:b4:ea:3a:36:a8:b9:5a:15:b8:36:
1b:c2:e4:f9:8f:10:96:b2:e3:42:4b:22:27:cb:9d:
3f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BD:BE:43:4C:CE:8A:01:C5:91:D8:45:73:A2:5B:A4:29:D3:AD:F8
X509v3 Authority Key Identifier:
keyid:E2:3C:0C:3E:01:06:C9:65:D4:60:CD:0C:3C:BC:5E:23:4F:82:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jwMPgEGyWXUYM0MPLxeI0-CprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/647f28-59cf-4d68-a50f-1764b03618fc/1/4jwMPgEGyWXUYM0MPLxeI0-CprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:74:40:69:d5:c3:9c:4b:9d:e8:8d:95:cd:1a:23:82:f5:22:
be:25:a7:55:1d:68:96:d1:73:e9:5c:e9:f2:0c:b0:10:b6:a6:
e6:91:85:ad:db:7e:56:87:83:c8:e8:ce:c7:ad:d9:ef:26:1c:
07:f5:0a:be:92:28:45:e6:98:8a:bc:39:51:d5:db:22:62:33:
d3:2f:00:f3:02:e8:db:fa:31:42:c1:3d:a9:b0:67:81:0e:f2:
86:bb:01:05:5b:03:a5:18:5a:4b:5d:29:28:bb:32:e3:44:55:
04:9f:18:64:28:f5:9b:d3:9a:97:7c:9b:bb:ac:16:b4:64:87:
52:5d:04:0b:6b:95:b0:12:2b:53:1f:49:23:aa:1b:2a:63:7d:
80:48:55:86:68:5d:c0:60:69:88:44:c6:4d:f2:27:85:19:95:
6b:c9:c5:dd:be:7e:a8:66:dd:0d:29:36:bb:66:60:a5:a8:06:
9d:01:96:0f:7e:5e:05:88:c3:d1:4b:31:59:e5:cc:55:c2:a0:
28:b5:8c:f2:31:a4:c2:b9:bf:86:bf:93:08:1f:64:d7:c6:03:
ce:5a:de:a0:67:23:cd:70:80:35:e3:1d:d4:91:1b:af:64:f2:
e2:d2:5b:73:58:e7:cb:b1:53:f6:4a:f5:18:96:89:5e:f3:94:
a2:17:4c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:14:51 2026 by rpki-client