Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: 7bkwl+zfBWJt01fp2x2X0fMnpy7bbZ2UQOw4ZZzUyXc=
Subject key identifier: 43:E7:08:97:46:5E:AB:B9:A9:30:CC:2C:52:95:96:EF:16:66:44:F2
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 019CAF10A251336DCDDB204EA36A7540EE6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 15:00:28 +0000
Manifest this update: Mon 02 Mar 2026 15:00:28 +0000
Manifest next update: Tue 03 Mar 2026 15:00:28 +0000
Files and hashes: 1: E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa (hash: iGIvi874jRBhxZZbEUcwG0C99qEqnZSND8WgM3AT+F4=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: Kn0bb2cyrdjbWcNSidSQ+iy/efq4xHhP9WajGqNqAkQ=)
3: yUKdjmZYtQWjFFXFgM-27cUdhs0.roa (hash: ob1AlTKcmBmfwJd93MbWCK4KiRPHg8c27xb+FIsvFL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:a2:51:33:6d:cd:db:20:4e:a3:6a:75:40:ee:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Mar 2 15:00:28 2026 GMT
Not After : Mar 3 15:00:28 2026 GMT
Subject: CN=43e70897465eabb9a930cc2c529596ef166644f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:b5:f0:47:2b:e6:cd:01:3f:ca:a4:ac:c8:
29:8c:7c:a1:fd:2e:e6:50:b0:a8:6c:17:85:68:e9:
e6:ee:ee:63:22:41:82:71:cd:f8:46:dd:90:de:ef:
a4:fe:2f:92:0a:73:f0:f4:0e:fc:2a:b6:18:3e:ab:
63:97:06:f9:d8:63:00:fd:9d:89:27:e7:69:28:5d:
f7:cc:dd:e0:bf:9b:90:de:dc:cd:e0:03:4d:b8:33:
ae:1e:1d:d7:40:b5:da:c8:96:53:bd:b9:00:86:52:
d2:26:7d:dd:aa:0a:a6:6f:30:f4:8f:e0:25:df:6c:
fd:b9:a5:c1:e8:f3:61:54:5a:fa:57:fe:c7:df:10:
64:3f:37:14:d1:6a:40:2e:44:46:62:91:8a:33:f5:
27:8a:ec:78:bf:a3:7e:40:87:b5:b1:dd:bd:e3:b8:
4b:e8:b4:69:ac:67:6b:56:5f:0c:50:9f:be:93:48:
39:a8:94:f7:83:5c:44:6c:98:8e:79:c1:03:c6:cc:
85:9a:fd:40:a4:d6:4f:f9:17:83:28:57:22:d1:ca:
a4:a5:d5:19:9a:df:2f:b6:7c:4b:f2:d9:5e:3f:0f:
7a:ab:b6:a8:7d:2b:34:9b:07:b1:98:3e:43:90:a3:
49:ed:4d:c8:3c:8f:2f:73:16:ff:86:86:46:ec:71:
f5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E7:08:97:46:5E:AB:B9:A9:30:CC:2C:52:95:96:EF:16:66:44:F2
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c2:e5:3b:d9:0c:da:5a:05:db:20:8b:5c:9e:1f:55:93:ea:
24:0e:84:76:11:80:e1:23:58:3b:24:8d:2d:93:ec:c1:43:94:
dc:e6:91:7f:79:ea:34:ec:39:e2:da:c9:7a:e9:d1:f0:d1:28:
92:a1:0c:3e:f0:6d:60:3d:ff:e0:6d:f9:51:41:ad:3a:ba:7b:
28:27:41:70:6d:3a:be:1e:2f:0e:6a:c2:c9:c2:b3:93:52:c6:
16:ea:8e:e9:6c:36:e1:55:e3:a5:54:0f:39:4a:3a:ce:0b:fd:
92:36:0a:55:c8:d0:ea:a3:69:ce:cc:cd:03:f0:94:c3:69:34:
14:f3:9a:35:2c:87:ba:0f:c5:c9:83:40:3e:83:45:79:cb:16:
18:83:74:3c:71:b8:54:bb:b0:41:9e:9f:19:ca:5e:1b:ae:b1:
f0:7b:b0:7b:07:3f:6e:59:58:c7:80:df:9e:f1:cd:d3:7d:d4:
da:10:b2:66:d6:a9:77:79:61:1a:d4:4e:b6:bd:82:24:8d:12:
7f:fd:80:63:c8:24:55:1b:fb:d4:dc:eb:df:91:25:8f:65:a6:
76:8d:4d:8b:f2:b2:46:27:27:2c:ed:81:c5:c8:4c:04:9f:9d:
b6:0e:43:38:b4:ec:42:95:d2:7f:d9:c9:87:b8:30:45:0a:f5:
d7:c4:10:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:54:26 2026 by rpki-client