Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json)
Hash identifier: McjBGBZ3/668h23NQWXkDP+nPo5nNsIg32uuqgYs0ok=
Subject key identifier: EF:2C:24:0F:FF:98:09:BF:4E:DF:33:39:63:A5:9C:10:23:74:D1:DE
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 019CAB34114169654D8BFD3A4019BDE79C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 21:00:42 +0000
Manifest this update: Sun 01 Mar 2026 21:00:42 +0000
Manifest next update: Mon 02 Mar 2026 21:00:42 +0000
Files and hashes: 1: 3VLJL7-f2gIaDHt9s5O08zvl02o.roa (hash: nvn//iDJID27yb0p4DmlRMNLDXzJBDmTCGYaGUQJ1lA=)
2: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: 1fuhZ6cxRYz2vBkR9HRXDCSF3ri10B2izPrBPc24tbY=)
3: AK-YlCPEVbLAZegzYkNrI96Oefg.roa (hash: TQp9SWZ90VsXFNcjm672V8NJs6N2oP9XQNZuCEin7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:11:41:69:65:4d:8b:fd:3a:40:19:bd:e7:9c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: Mar 1 21:00:42 2026 GMT
Not After : Mar 2 21:00:42 2026 GMT
Subject: CN=ef2c240fff9809bf4edf333963a59c102374d1de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:ce:26:af:f7:b9:72:b8:f9:d9:1f:63:2c:
e1:df:8b:f6:37:f1:30:2d:f7:cd:5e:97:0a:cb:d1:
4c:fb:7a:b5:f4:ab:08:60:e4:55:68:2b:c9:3c:f4:
89:4f:4d:3a:e4:08:9d:7b:50:f9:37:d1:b0:fd:85:
ce:00:00:6f:2d:20:b0:78:8f:8b:09:4b:5d:3d:d0:
7f:3f:0e:4a:3e:04:34:b5:fa:4a:c0:9d:96:69:76:
64:74:a7:f0:d7:dd:c8:3a:67:5f:6d:79:a8:b4:7c:
e6:a7:6d:ed:cc:b6:68:0c:0d:1e:77:d9:f3:bc:d8:
29:37:5f:0e:d7:ab:d3:24:86:e2:29:85:1a:a2:63:
ec:cc:b5:2a:96:3e:e0:6f:6d:5d:cc:f7:96:22:88:
64:c2:68:a3:cf:e9:0b:48:0d:66:f6:53:56:0c:b4:
f8:8b:d8:f8:ec:54:97:0f:ff:37:b0:fd:ff:20:0d:
48:51:a4:42:05:70:1e:70:92:7b:36:ac:40:77:6b:
4c:81:b1:ab:2b:dc:c0:5c:80:91:1d:53:be:7e:41:
3e:ad:a9:17:db:ef:5a:50:47:a4:9e:ae:50:dd:4b:
4c:ff:f8:6a:e4:96:f2:44:43:9a:ed:49:f7:ed:bb:
bc:96:56:f8:58:0d:b3:4b:2c:f9:45:43:38:21:9d:
e8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2C:24:0F:FF:98:09:BF:4E:DF:33:39:63:A5:9C:10:23:74:D1:DE
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:a8:94:b3:ee:6f:13:fa:02:f7:aa:46:61:63:c6:ad:08:ce:
70:93:6b:08:ca:cb:d9:91:07:84:32:36:af:ed:81:04:d7:16:
6c:54:14:6f:84:0b:14:87:a3:ac:0c:5a:73:52:50:95:1e:63:
eb:4e:88:c0:7a:09:77:71:9c:81:fa:94:1f:1b:ff:51:bc:af:
6c:70:1b:e8:be:bc:d6:1c:aa:65:8b:48:38:a7:10:2d:9d:f0:
90:c4:5f:28:73:f4:b4:4b:3b:1b:a7:c6:c1:85:5b:0f:77:dd:
10:f8:eb:7d:20:c3:04:c5:44:76:4d:3b:16:ba:f6:29:f1:5b:
2b:d1:fe:57:51:2c:50:03:7a:93:92:62:fa:a4:d6:72:6d:e2:
ed:fa:ac:18:05:f2:44:32:18:0b:cd:0e:54:38:d4:58:b3:99:
b4:1b:28:8a:72:d7:fb:a8:74:3f:a2:fc:d1:a2:ab:05:d2:b9:
68:6b:89:b1:f2:b3:d3:75:7c:38:8a:10:69:8f:e0:80:27:ff:
de:0b:b6:b3:7f:d2:ea:04:fe:c7:3a:8f:c6:b8:47:1f:34:3b:
43:fd:32:42:5f:b8:d3:ba:57:8f:b1:4c:d5:d8:0c:66:d3:8e:
2c:56:3d:29:a2:f2:e1:a0:34:8d:27:4c:43:1f:58:cc:7e:85:
48:38:61:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:24 2026 by rpki-client