Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: niSE0Fu0n4T50Z0Q9O5nhG26HQSGOzO42wExrxcHgM8=
Subject key identifier: 7D:2A:58:86:8E:B7:FA:DF:86:92:FE:9E:7C:0E:37:CD:85:B6:74:B5
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 019CABD9362593F1D1D2B4ED2B514F8BBA21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0C09
Signing time: Mon 02 Mar 2026 00:01:04 +0000
Manifest this update: Mon 02 Mar 2026 00:01:04 +0000
Manifest next update: Tue 03 Mar 2026 00:01:04 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: t4v7fegRQK5zcJLGJsCV201v2dEvGKzCXr8NvKc+FFY=)
2: Zfv_5cAa3ri0Ax5p2vNE36rHpnE.roa (hash: Id3c2s4Nmji3usQrf3+l5D4JNCrYHAfvKHW7XcPkXa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:36:25:93:f1:d1:d2:b4:ed:2b:51:4f:8b:ba:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Mar 2 00:01:04 2026 GMT
Not After : Mar 3 00:01:04 2026 GMT
Subject: CN=7d2a58868eb7fadf8692fe9e7c0e37cd85b674b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b4:44:cf:8e:e5:8f:3e:9d:4f:81:45:70:89:
88:ed:ff:ce:e3:7a:c0:01:16:e1:15:1b:3f:9f:6f:
ff:f6:42:cc:5d:c5:96:7a:27:72:07:bc:5e:5e:11:
89:4d:66:3c:10:62:3b:c9:da:7f:94:c5:41:88:8a:
f7:0e:06:8f:3a:57:66:a8:59:9c:a9:5b:ca:52:df:
50:cd:ed:1f:ec:25:aa:73:e2:59:fa:01:6c:f2:8c:
e4:79:29:12:5c:ce:d6:44:56:f3:9d:fa:a0:34:8f:
6a:76:e1:50:cf:0c:32:d1:75:d6:02:af:9a:b1:1d:
32:90:90:c2:50:a9:69:ad:1b:96:90:2d:da:5e:21:
9b:f5:e8:b7:88:d5:87:c1:cb:b9:44:4b:b7:87:e0:
ae:f7:41:94:b5:f5:a2:57:55:31:b2:dc:74:69:cd:
38:16:8c:33:a9:5b:ad:21:ad:e9:9c:ae:ab:18:04:
25:65:7e:c9:18:75:73:57:ff:58:df:3d:cf:ba:8a:
f4:f2:79:a1:1b:a1:11:5d:dd:e1:11:d7:e7:f1:26:
45:56:bb:e2:fd:c5:8a:9a:21:c4:b7:75:dc:af:7b:
df:22:66:9a:7f:9a:7a:1b:16:7c:bf:21:cc:7d:48:
0e:ce:9b:47:b7:cb:e9:4e:8a:3c:ad:44:87:a8:48:
ec:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:2A:58:86:8E:B7:FA:DF:86:92:FE:9E:7C:0E:37:CD:85:B6:74:B5
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:cc:f3:01:b6:cd:e0:82:a1:bf:fd:07:5a:45:4a:6b:36:18:
46:7b:d2:fc:1d:c5:15:fd:b8:8d:d2:58:17:5c:2d:84:9b:01:
eb:5a:f5:a2:8b:6d:04:e8:a7:40:21:b1:a6:8b:d2:0d:46:37:
5c:bc:65:8d:97:50:51:ab:21:63:f0:5c:d6:74:91:00:56:6c:
f3:0a:66:df:5e:34:42:24:77:ef:eb:57:93:e7:1e:03:06:b8:
da:c5:d4:4e:1c:a4:37:93:c9:f8:d8:4d:4c:b7:cb:4e:6d:08:
ac:59:71:05:9a:a2:b5:4b:4d:52:2f:7d:60:09:bf:68:c5:94:
04:b6:63:44:62:3d:a8:35:18:fe:e9:68:b1:e3:9d:6e:6e:85:
1e:92:b1:a9:be:0a:12:b9:db:58:24:c6:3f:0b:d6:b0:91:86:
39:6c:8a:08:c5:94:46:fc:d5:32:dd:0d:6a:03:9c:2d:4c:1d:
ec:9b:44:52:28:29:07:51:94:ea:06:4b:d7:17:39:de:41:8b:
05:7a:57:2e:9d:62:45:a7:12:ca:d7:40:75:bc:8d:a0:36:ba:
c8:9d:57:b6:8f:68:35:ab:67:dc:e6:e0:e8:da:16:ed:b6:f8:
43:d0:b4:6f:82:9a:26:ba:8e:7b:ae:49:6d:d3:ec:fa:82:e6:
89:7c:34:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:29:51 2026 by rpki-client