Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: d3PnFjyOo57/Y383caB/AQCs5e1SOF3CtWNpCUOfUrI=
Subject key identifier: 68:AB:05:77:34:22:E7:8E:FA:56:B1:4C:63:B3:8F:91:73:29:D3:E1
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 019CAAFD5E386EAC135D77B29EBB9F5C8A0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 20:00:57 +0000
Manifest this update: Sun 01 Mar 2026 20:00:57 +0000
Manifest next update: Mon 02 Mar 2026 20:00:57 +0000
Files and hashes: 1: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: hqxR8T+njSkoQ8/t6fHPLTs4uA/xF5fkY2TQ4AH4McE=)
2: jbafLlCB65wc3lu8qCmYl11AIFk.roa (hash: K+M36ULpoKKc2R4rksKlSojLYrf7EhhEe4ldkXRNVqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:5e:38:6e:ac:13:5d:77:b2:9e:bb:9f:5c:8a:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Mar 1 20:00:57 2026 GMT
Not After : Mar 2 20:00:57 2026 GMT
Subject: CN=68ab05773422e78efa56b14c63b38f917329d3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3f:de:1c:74:e1:98:ab:05:a5:ad:49:d2:da:
97:00:7a:64:0d:c0:d2:c7:d0:aa:94:10:f6:3c:bb:
d6:32:6d:07:5b:fa:bb:bb:a0:87:54:fb:47:11:a3:
af:ad:c0:d1:2c:00:37:34:ba:2c:bc:45:9b:a4:a6:
bf:4c:86:73:82:9e:5c:41:cf:91:27:51:da:7a:bc:
ea:5d:b9:07:d0:7b:1d:a4:bf:ba:30:26:e2:d8:da:
c1:00:72:69:fe:32:64:42:3a:5b:45:ce:21:3d:86:
18:e6:01:bf:87:08:e6:99:a7:a3:55:d1:12:3a:83:
ce:a8:c0:3a:84:db:ce:18:4a:32:4a:0c:1f:25:8b:
51:1f:d5:2d:05:6e:85:61:70:b9:18:b7:21:8d:37:
2e:7e:fd:d6:f4:65:30:cb:04:78:d0:f7:ef:91:50:
96:2a:fe:67:75:69:00:88:6a:6d:81:88:46:ca:ef:
05:57:00:99:99:4e:a9:3d:b3:6c:c0:41:2f:23:41:
85:32:67:52:5e:b8:3e:72:16:32:b8:3a:63:57:4b:
e6:61:84:3c:a6:07:01:09:d5:ff:22:3d:9b:94:7a:
a1:3a:02:12:09:eb:d4:8f:cb:50:74:03:e9:8b:26:
a7:fb:02:36:05:15:38:ac:83:f5:55:f1:26:b6:29:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:AB:05:77:34:22:E7:8E:FA:56:B1:4C:63:B3:8F:91:73:29:D3:E1
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:4d:17:db:24:ac:ec:78:19:85:12:da:22:f9:6e:20:87:e9:
d7:f3:a1:f3:41:ba:7a:30:48:74:73:62:87:96:ee:1d:bb:4d:
29:b0:9f:b8:bd:5d:c6:57:d2:c7:c3:6a:04:95:af:02:ef:b7:
ba:ba:4a:1c:20:6e:20:61:c2:ba:70:e8:cd:c3:2a:2c:bd:a7:
17:d1:5a:67:57:4b:e8:c7:a2:68:9e:41:73:d3:bd:7e:c4:ae:
68:7a:c0:d2:48:c0:92:f9:86:20:5a:94:4e:b1:98:3f:ea:4f:
02:ee:b9:d3:15:87:4e:fc:73:0a:17:7c:4f:7b:7a:b1:39:d8:
03:0a:1c:62:92:7b:68:95:41:4d:c0:29:ef:0a:9b:a7:61:8e:
98:13:40:d0:a1:e2:f6:91:11:f0:b3:3e:e8:00:34:c0:8e:1a:
21:07:19:97:61:c0:3b:13:8f:11:1c:02:d2:d0:51:42:f2:18:
ca:f3:bf:d2:d1:74:08:0e:c1:2a:95:f1:d1:ae:db:5e:b3:a4:
2d:d4:18:58:b1:27:14:e1:a6:29:a3:a1:3f:5b:fc:7e:d3:6f:
1f:94:45:e4:e2:05:b9:97:76:ba:5b:41:97:9e:c0:bb:05:5c:
8d:09:32:29:da:94:95:37:be:a2:16:69:04:56:38:94:96:74:
ed:6d:a9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:17:36 2026 by rpki-client