Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json)
Hash identifier: k/e7LhUCOxtcPlgaVOHQm/aq6ndeMI1qyCC/LuxPJUE=
Subject key identifier: 6E:1D:BD:88:E0:F8:D9:5E:28:7F:75:34:6D:4A:9C:E8:0C:7B:FA:09
Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
Certificate issuer: /CN=e31c010e95015c2123641d33120a7e9c9008002d
Certificate serial: 019CAC47602978ABFD8983DEC68BDD1D1A2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
Manifest number: 0172
Signing time: Mon 02 Mar 2026 02:01:24 +0000
Manifest this update: Mon 02 Mar 2026 02:01:24 +0000
Manifest next update: Tue 03 Mar 2026 02:01:24 +0000
Files and hashes: 1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: UQ0zUAC/gjwFKoMVh15DlNQo9sJbwQS1AfUyJQvhFJk=)
2: EVP8JZC4veSxdxX6T8tUKYQ-OAA.roa (hash: bYUAbwTN22M9GXhG7TnoyYrgAEb8pmrS9QwXIchXrAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:60:29:78:ab:fd:89:83:de:c6:8b:dd:1d:1a:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d
Validity
Not Before: Mar 2 02:01:24 2026 GMT
Not After : Mar 3 02:01:24 2026 GMT
Subject: CN=6e1dbd88e0f8d95e287f75346d4a9ce80c7bfa09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ca:32:e1:76:77:e6:9b:a0:66:82:3f:67:f2:
ce:3a:4a:23:b8:45:20:49:cd:90:99:83:99:fc:a0:
59:cd:11:64:b7:8c:16:8c:47:f6:21:db:2b:db:67:
78:fc:e7:e7:d3:ff:5f:1e:fd:a8:b8:e0:92:a4:b4:
35:3e:aa:13:f2:70:35:a1:2b:36:6f:a6:69:fd:7f:
9d:b7:81:ac:ea:a3:51:7e:7c:1d:2e:2b:d0:8d:4d:
ad:00:35:26:2a:d9:65:fa:0c:c7:2f:78:a3:1f:10:
2d:26:cf:15:11:55:3f:40:a5:64:e7:de:7c:a5:be:
f1:1b:0b:56:6c:44:b5:27:71:92:18:f9:7c:88:db:
0e:bf:fb:24:1d:9d:37:a0:90:e0:c5:f0:3b:fb:6c:
84:82:ea:22:cd:c3:9b:99:6c:42:b5:69:44:db:e3:
3e:0b:76:d9:d1:3a:cd:a6:15:8b:16:01:f0:0f:f9:
74:fa:63:c0:43:25:06:93:66:6c:0e:d4:d7:ba:ee:
8a:86:d0:2e:b8:11:a6:d1:c0:61:ea:a2:4c:c2:31:
a7:17:5b:ff:59:cd:1b:ab:c9:67:86:f5:89:64:89:
21:d0:ac:17:20:d7:39:b6:9a:c8:6c:51:83:5d:cc:
26:86:d9:c8:7d:6f:c2:42:8b:df:88:4b:03:d9:89:
3a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1D:BD:88:E0:F8:D9:5E:28:7F:75:34:6D:4A:9C:E8:0C:7B:FA:09
X509v3 Authority Key Identifier:
keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4c:35:c5:49:cf:39:e2:98:09:6c:98:3f:62:b2:5a:c2:86:
fc:ba:16:2f:d7:c5:fa:f6:f8:67:fa:6a:c8:36:04:98:c5:f1:
1c:c2:41:35:e1:e4:90:04:4b:04:ab:5e:ed:f5:a2:94:64:be:
7b:94:50:00:fe:8e:ea:39:0f:c9:f0:22:68:70:29:42:52:52:
e3:33:57:d9:98:e7:88:69:e3:6c:9a:08:2c:99:fa:da:9e:6b:
0d:cb:a2:e0:e7:30:50:3e:09:33:81:74:53:00:b8:bb:11:76:
f6:ac:cb:c4:c4:c2:06:56:85:0a:6e:23:3f:13:e9:38:21:02:
86:80:99:56:dd:7d:2b:56:d0:8e:16:65:df:e9:52:33:ad:99:
ce:48:4a:b5:c3:b7:e7:a1:24:d5:a2:e1:78:18:82:01:83:72:
55:f2:e9:c1:3d:cf:6b:d2:05:79:f2:a5:c6:9d:60:3e:cb:b4:
f0:38:24:0e:7f:ea:fb:59:bd:98:31:0d:06:cb:1f:d2:c4:b9:
4b:fa:93:f1:ed:c8:57:23:36:ea:8f:d7:68:9f:ae:00:e3:da:
fa:07:c9:67:02:79:b0:e2:8a:fc:f8:e2:a8:08:5f:66:c1:e0:
e4:38:41:3a:f5:9f:26:f8:7f:bc:75:47:0f:ec:ec:80:8c:2d:
71:c7:64:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:28 2026 by rpki-client