Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
File: c4DHWfVY-ca-iN0iakOdmcnqzww.mft (raw, json)
Hash identifier: WTZUeNOaL3cNESlNiOdhUz1TIJBatK/6nRCFrOhivoI=
Subject key identifier: 04:D4:98:56:DE:4F:A8:01:B0:41:5F:E9:E6:4C:BD:6C:4B:8D:C0:83
Authority key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
Certificate issuer: /CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Certificate serial: 019CAB6AD48056654B675617111167CC69FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
Manifest number: 0F78
Signing time: Sun 01 Mar 2026 22:00:30 +0000
Manifest this update: Sun 01 Mar 2026 22:00:30 +0000
Manifest next update: Mon 02 Mar 2026 22:00:30 +0000
Files and hashes: 1: SyzDr7afLaGB0eh8BGltmqw92Ho.roa (hash: 050EI4bgC2uJSD8MPwN8yNb/BaQ/4SeM3IGk1KBixYk=)
2: c4DHWfVY-ca-iN0iakOdmcnqzww.crl (hash: OArIN3Q7LC+WP8LzS+2X9I2PJfz0EWoISWZFxytIdbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6a:d4:80:56:65:4b:67:56:17:11:11:67:cc:69:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Validity
Not Before: Mar 1 22:00:30 2026 GMT
Not After : Mar 2 22:00:30 2026 GMT
Subject: CN=04d49856de4fa801b0415fe9e64cbd6c4b8dc083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d7:e2:d4:a1:12:7e:70:e3:f8:c4:7b:11:4c:
f1:33:62:c4:e5:53:42:9d:16:f4:6e:71:97:01:84:
76:dd:4d:3f:e3:f5:0c:40:27:3d:be:92:34:e0:17:
d1:2c:a4:eb:1f:b9:33:42:77:28:bc:50:48:22:45:
00:48:c5:0f:2c:0b:cc:af:55:d4:06:f9:ea:b5:42:
07:67:73:af:16:28:46:e7:b2:86:07:71:7f:f4:2f:
aa:88:ac:b0:fe:e8:1c:37:a3:23:48:55:6a:1b:62:
1b:df:d8:f1:8a:11:4e:6a:89:68:29:44:6a:1a:7a:
c5:41:94:d7:1b:66:2b:ae:fe:49:08:ce:87:38:f6:
09:46:3e:6e:45:d5:9e:30:66:e5:a7:55:1d:3b:2d:
85:ef:0f:05:be:44:5c:d5:d6:dc:fa:83:43:56:e7:
86:0c:74:d0:2b:51:bc:53:a8:a4:03:b4:66:35:3b:
d6:6c:dc:d3:16:b5:fc:da:69:4b:e0:40:ab:66:7b:
f5:64:72:7f:c7:ad:0d:13:82:de:a5:9c:4f:15:fa:
c8:54:99:8b:5f:d7:c2:e9:f3:86:ec:30:30:58:cc:
61:4b:f6:7f:e2:e3:84:6c:7e:cf:91:90:90:4d:a0:
45:87:70:ef:c6:c4:d1:29:c6:16:cb:96:12:74:8a:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D4:98:56:DE:4F:A8:01:B0:41:5F:E9:E6:4C:BD:6C:4B:8D:C0:83
X509v3 Authority Key Identifier:
keyid:73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:dc:7d:77:78:89:90:c7:c1:7c:20:06:cd:b4:4c:80:75:1a:
79:f6:a6:03:b0:34:ea:c4:14:9c:aa:58:ad:0e:e0:08:5a:eb:
0d:03:2f:02:98:7a:84:29:33:9a:2f:d9:b3:ed:a9:1e:78:c6:
c9:a5:51:e4:61:9d:c5:18:46:ae:31:7c:68:32:79:66:9b:9b:
87:86:9f:ed:85:fa:61:00:9b:cb:a7:95:7f:99:f4:06:69:76:
85:60:e3:ca:bc:ac:80:18:e5:11:92:b3:2c:3a:8a:33:fd:b3:
d2:4d:59:a3:72:72:5d:7c:91:b1:37:c4:5a:ce:0c:1f:5c:89:
40:1e:e0:66:2c:c8:cd:98:14:ba:80:f9:27:90:48:c0:ee:16:
50:1b:77:88:36:8e:9b:6a:a7:22:02:1a:be:4a:c8:f6:93:03:
bc:85:11:ed:52:1d:77:dc:5e:9f:9d:26:ee:db:3c:01:e2:c9:
3b:7d:87:dc:58:6b:5b:72:aa:d3:e6:b4:4f:4b:17:af:72:20:
ca:d8:f9:4b:7f:07:7d:c7:33:7f:cd:5c:05:2c:f8:b5:c4:1a:
27:51:ca:a0:7c:bb:67:68:a4:6a:58:90:52:d7:92:94:72:b7:
6b:5c:b4:43:f4:19:d3:2f:bc:d3:da:d9:45:74:1c:e0:3d:5a:
ea:3b:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:32 2026 by rpki-client