Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
File: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft (raw, json)
Hash identifier: hV+EEGgMeInVHKRj3OuSCdHOSMErVgf5WV7d3zR0afU=
Subject key identifier: 52:9A:D4:E9:8C:45:9F:9F:4A:B1:79:48:8E:64:0F:D9:85:DF:4B:5D
Authority key identifier: E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
Certificate issuer: /CN=e01d78927ab99c9e738afe9b016214a4880ad154
Certificate serial: 019CA9463C8722CB74F7DB98AADF587B81CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
Manifest number: 0C31
Signing time: Sun 01 Mar 2026 12:01:18 +0000
Manifest this update: Sun 01 Mar 2026 12:01:18 +0000
Manifest next update: Mon 02 Mar 2026 12:01:18 +0000
Files and hashes: 1: 4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl (hash: wcDTbq5JuWirvJaXIEFIvBv9m7ApEdx/v6dAySYfZZo=)
2: j_t_jFAta10RI31T6FonCloC3D4.asa (hash: Omact/OG1Vjza6tNA6dIAQIik0sg+Ex+j9k7Zm7x4yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:3c:87:22:cb:74:f7:db:98:aa:df:58:7b:81:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01d78927ab99c9e738afe9b016214a4880ad154
Validity
Not Before: Mar 1 12:01:18 2026 GMT
Not After : Mar 2 12:01:18 2026 GMT
Subject: CN=529ad4e98c459f9f4ab179488e640fd985df4b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:52:40:86:97:bc:4f:5e:1b:1c:69:72:24:
67:31:97:96:fb:29:15:05:fc:41:a4:29:81:47:f7:
d7:66:bd:ed:bf:a1:c6:1b:56:f0:25:dc:ed:44:c6:
ae:cb:83:b7:e4:9c:d4:8d:d9:83:da:43:b7:b4:e5:
ba:0b:2a:51:c3:3b:b2:8f:39:b7:74:9d:c5:d3:60:
08:a4:64:3d:c4:6b:5e:aa:ed:ef:d3:31:71:ff:12:
93:03:63:1c:33:d0:f7:d1:a2:eb:75:7f:39:b3:1c:
67:80:a8:83:18:35:e8:be:9c:24:ba:a1:09:67:a2:
b7:59:4d:23:46:41:bb:a2:0f:62:bd:97:18:2b:0c:
2e:e1:9d:fd:9e:f0:2c:a0:b2:a2:cf:74:b5:ae:62:
dd:21:90:09:45:70:1c:14:96:54:b1:82:2b:22:b9:
ed:3a:90:16:bb:f0:c4:8d:fc:b3:2e:e7:8d:26:18:
6d:8f:9f:55:4e:14:d3:7a:ad:07:0e:dd:b5:a6:46:
42:5e:9e:40:47:14:53:7d:0f:54:e3:fa:cf:f4:3c:
e4:29:36:38:cf:bf:8c:ce:9e:8e:be:44:2d:00:4f:
e1:44:87:3d:5f:83:a1:59:fa:aa:53:14:bf:fc:44:
ac:4a:a0:6c:13:ef:50:5c:12:91:78:2e:8a:07:8c:
00:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9A:D4:E9:8C:45:9F:9F:4A:B1:79:48:8E:64:0F:D9:85:DF:4B:5D
X509v3 Authority Key Identifier:
keyid:E0:1D:78:92:7A:B9:9C:9E:73:8A:FE:9B:01:62:14:A4:88:0A:D1:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B14knq5nJ5ziv6bAWIUpIgK0VQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b8fbc5-5a8b-4a2b-9414-70890e54da8b/1/4B14knq5nJ5ziv6bAWIUpIgK0VQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:6b:bf:47:aa:94:c7:09:df:f5:12:5e:64:23:4d:5c:8a:4d:
87:dc:35:20:8d:e9:52:cb:f2:e0:e5:ec:30:c4:45:6f:fc:b1:
13:03:b1:be:d8:7d:62:f2:46:73:89:f2:9a:19:4d:8a:b4:d2:
b8:5e:af:df:b9:a9:ee:16:4a:f3:09:8d:4f:35:83:d6:55:52:
c7:0e:0e:db:87:66:4e:c9:68:a4:39:78:62:cd:7d:20:f9:92:
49:74:d0:d8:7a:b8:4a:80:d7:e7:52:6a:b8:7c:a0:f3:d1:64:
7b:6d:fa:27:9f:7c:d7:de:6d:82:24:53:41:93:f5:1a:16:70:
f7:c8:10:2c:f7:ef:6d:98:c0:de:9a:99:7e:a1:8c:fa:48:b1:
55:a5:df:61:f2:69:50:52:d6:44:eb:2a:1c:74:33:1c:df:21:
33:f5:c9:c6:35:c5:1b:e3:67:83:57:af:98:11:fd:5f:cc:fe:
70:83:12:53:53:e5:cb:d9:60:c6:14:d6:ed:33:1f:6f:86:7b:
ca:ea:51:76:37:0f:72:f3:48:83:d9:84:90:58:1f:5c:c1:06:
c3:0d:a8:be:31:13:be:d0:46:c2:1f:08:e5:45:be:58:9b:da:
e0:43:95:cd:c7:d9:4d:50:fc:a0:82:4a:12:a4:65:de:61:ff:
b9:69:d4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:31:15 2026 by rpki-client