Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: Sd/+szxuBrKGmqJigEjlKdTyhaOmUUXycZN08DTl+RQ=
Subject key identifier: 93:9F:44:A9:A9:9F:D4:47:45:B5:77:92:A8:64:E8:A1:DF:A7:8D:D8
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 019CAA58C55E84EE3FBAEC2E57212D6DE478
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 17:01:10 +0000
Manifest this update: Sun 01 Mar 2026 17:01:10 +0000
Manifest next update: Mon 02 Mar 2026 17:01:10 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: zAMYn1vustCwNeAr0dVomtrDeqLdml68peCgGXVGuvo=)
2: j6eYXTGIPK6gsz2syCvMaVTG-yE.roa (hash: 91e+kynlaPtGnq7c6oIlywSzsBYw97PzDquhkqe4ygw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:c5:5e:84:ee:3f:ba:ec:2e:57:21:2d:6d:e4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Mar 1 17:01:10 2026 GMT
Not After : Mar 2 17:01:10 2026 GMT
Subject: CN=939f44a9a99fd44745b57792a864e8a1dfa78dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:44:ea:7b:13:78:ae:3c:cb:96:dd:0b:87:a4:
76:64:43:df:14:a6:9f:5c:5f:9f:83:f5:30:32:7e:
a7:4b:ce:dc:b9:5c:50:22:af:b8:4a:b6:d9:d1:6a:
d8:e0:34:fe:2a:44:c2:29:67:1b:13:cc:19:31:ee:
34:43:4d:eb:8b:aa:a5:17:de:40:98:a7:4f:9b:5e:
f3:c2:fa:14:75:f4:2d:ca:12:9f:26:23:a8:7c:a0:
3b:05:f1:8a:6c:c9:c7:db:0b:43:fa:08:51:82:c1:
33:17:77:8d:20:56:3b:bb:f3:d3:48:3c:ac:a9:a3:
b4:ba:ca:c9:00:c0:47:d7:2f:20:49:76:27:5d:66:
d7:56:b9:5c:f8:b8:8e:f0:2a:c7:e7:0b:48:50:fc:
45:8a:9e:9d:00:81:64:13:eb:52:b3:63:e5:87:02:
19:0d:23:6e:8f:be:5c:9e:44:fc:b4:94:a3:98:c0:
b7:54:07:1f:64:47:64:59:ca:c6:22:44:1f:3f:e5:
b0:b0:86:0b:db:47:0f:58:61:25:8d:91:b1:b9:8e:
47:50:86:55:c9:38:bb:a3:fc:2e:2f:fc:ac:25:ef:
f6:fc:89:f0:68:ef:dd:46:05:71:ba:13:16:42:65:
cb:c7:b0:f8:00:26:7b:45:68:09:b1:0b:3c:c7:73:
14:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9F:44:A9:A9:9F:D4:47:45:B5:77:92:A8:64:E8:A1:DF:A7:8D:D8
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:70:b5:29:5d:93:20:3e:4b:83:08:76:ed:79:c3:0a:f6:ce:
1d:14:ed:81:bc:09:e5:a7:30:f6:33:09:cf:c2:04:9b:ae:22:
74:42:1a:8c:ee:70:81:7f:49:71:72:b2:2a:8d:5d:de:ef:cd:
9e:ee:ea:38:4b:26:4b:f3:fd:96:5d:5e:ed:85:ee:8b:fe:ef:
bf:90:9c:8a:c9:69:91:7b:63:a3:cb:28:40:84:69:6b:be:fc:
3c:82:e2:d1:d3:a5:6f:a3:d3:25:8f:f3:98:c8:ea:39:c4:61:
89:5f:f1:04:7a:9a:43:b5:0b:e3:fb:42:54:f0:00:aa:4b:31:
89:8b:dc:90:91:2c:cb:9b:43:50:c7:33:8c:47:dd:6a:84:f0:
bf:60:43:a0:24:b3:a7:0d:10:a9:59:d5:4c:ae:a5:b9:b0:3f:
bd:ad:e2:33:15:d3:77:12:01:fc:f6:7e:0c:36:ab:a7:a1:c9:
0b:94:9e:f7:13:e2:a0:c5:08:fa:4a:b8:be:76:69:10:87:e1:
82:f9:21:7a:7e:7a:19:c8:ef:20:71:5a:13:16:72:85:95:96:
d0:fa:36:7f:ec:a3:bd:fb:02:c9:b2:5b:11:29:f0:28:1b:32:
90:c2:84:ce:41:ba:1a:24:c3:1d:08:82:a0:16:24:5f:73:90:
85:7a:a9:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:39 2026 by rpki-client