Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File: 4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier: OeDKQ8GsuV3+9nnd8uQ2b1WlPzS/En1V7uScxnHDY6M=
Subject key identifier: A4:77:60:2B:B1:42:1E:24:9E:80:20:25:DD:B3:F8:FD:EA:1B:EA:BA
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 019CAD59640FC103D4E34DFD1D461BF0EB97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number: 04AB
Signing time: Mon 02 Mar 2026 07:00:42 +0000
Manifest this update: Mon 02 Mar 2026 07:00:42 +0000
Manifest next update: Tue 03 Mar 2026 07:00:42 +0000
Files and hashes: 1: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: ni0/E17EMAJG/UCHdpnIUB8mAjUA0YLdYr5HDIkcgDc=)
2: lmDwmz-GtyiaNLLugK40qWh_h8s.roa (hash: v9wEGxooeJNf+ZcLBoaKH/aJqtCxaC4olgQz9drbKc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:64:0f:c1:03:d4:e3:4d:fd:1d:46:1b:f0:eb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: Mar 2 07:00:42 2026 GMT
Not After : Mar 3 07:00:42 2026 GMT
Subject: CN=a477602bb1421e249e802025ddb3f8fdea1beaba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:91:f8:3c:2b:d8:48:a6:85:de:4f:2b:2d:39:
da:a1:57:d2:55:df:ea:ae:e5:e5:42:52:cd:89:18:
c6:99:8d:ea:25:a0:ee:f4:bf:98:f4:c6:fe:87:f4:
a7:1e:17:90:d2:8b:68:32:c7:0e:9c:63:17:84:31:
95:fe:e8:14:ce:1f:69:00:50:83:e5:86:df:14:ab:
a0:fd:63:0b:e8:89:7f:4c:a4:12:36:75:42:ae:4e:
a6:e8:17:7f:ea:02:41:08:b3:e6:c9:7a:d7:ac:87:
80:8a:56:98:b3:b8:27:0c:98:8d:41:c6:e7:94:1b:
56:69:56:f7:6d:30:d0:48:ea:14:06:b9:2e:2c:ee:
fd:c9:bc:89:ea:74:da:1a:bf:06:03:46:43:50:d1:
b5:4f:8b:77:58:8f:ec:36:02:6a:e6:9c:d2:bf:27:
2d:db:00:63:c7:9c:93:c2:53:8b:94:59:79:fa:d4:
59:ad:e5:48:e5:6a:b7:a0:cc:fa:53:0e:8f:1f:fb:
aa:7b:6c:fd:cb:31:a9:c7:33:66:f2:ea:eb:17:aa:
61:e5:cf:b6:10:7d:7a:b5:db:c3:dc:72:b4:2e:a0:
f5:f4:b9:bb:ac:ff:ab:95:22:a0:ce:0e:3f:30:31:
c8:cd:54:8f:54:88:4e:63:06:ed:f2:89:cb:14:ac:
a0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:77:60:2B:B1:42:1E:24:9E:80:20:25:DD:B3:F8:FD:EA:1B:EA:BA
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:bf:8d:63:77:f6:64:73:6d:8b:18:1c:9c:d9:a0:f3:33:b8:
43:db:94:65:48:05:4b:7b:42:82:28:59:e3:9d:ea:c3:32:c8:
d8:a5:b7:c3:5a:0e:8a:c9:51:bc:d5:45:5b:07:4e:90:19:be:
fb:0d:41:fc:05:53:76:82:78:ec:c6:85:56:cb:71:68:0a:9f:
b1:0a:33:59:5e:ce:15:67:fe:80:ee:ba:8d:61:0d:0d:10:5c:
61:8f:c2:fb:a5:e1:b3:fd:24:25:f7:a6:e4:40:61:2c:f4:17:
20:e2:ed:e8:45:f8:2c:37:22:de:b9:e4:d8:d6:40:30:33:29:
22:f4:b4:e8:3b:ef:75:a3:76:4a:48:66:28:68:ab:7a:06:d1:
03:70:3e:eb:23:ba:28:1d:b8:30:ca:27:e4:37:21:c3:aa:0e:
92:df:8d:8b:b8:f3:59:45:31:a0:0a:af:5d:e5:5a:73:32:1c:
b5:c1:8d:49:01:8b:51:0b:4a:4e:53:29:69:2b:87:f9:a5:61:
22:84:a6:bd:ef:b5:c3:20:d7:91:54:0a:ec:f5:7f:00:be:1d:
7c:cc:b6:69:0a:f1:50:48:9e:d2:25:72:f0:5a:39:cb:68:b9:
40:22:9a:37:38:e3:a7:b4:87:73:d3:82:e5:fa:18:db:4a:c3:
70:d2:6d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:37 2026 by rpki-client