Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File: 4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier: W8gwX5QtojA4z/cvbCTZuR6zyJDY6r8HC9vHoyKKivE=
Subject key identifier: D9:50:D3:06:5C:C0:19:1D:91:E6:79:68:65:6F:52:04:D0:F3:C1:8E
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial: 019CACB5589E9EAD4331A72117CDA99F5B4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number: 1108
Signing time: Mon 02 Mar 2026 04:01:31 +0000
Manifest this update: Mon 02 Mar 2026 04:01:31 +0000
Manifest next update: Tue 03 Mar 2026 04:01:31 +0000
Files and hashes: 1: 1OjQOklemE1c2Ofd7sEbtV6WCLQ.roa (hash: p8zMORBp4EwLrEV0pwePL8HYOl4fQLM1ray936MhnIo=)
2: 3gKR0cK9QoxfvHnSIiqY4bcG8ww.roa (hash: ZcGaXU4YPznoibhlbyhjzKqhwZf4BJJECm4SI2hoD/U=)
3: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: B8BHCyCQ6wmVRBDtgdINgPN3jh/HDgL7MMUpqPCrGbM=)
4: 8tAmUasl9shJmzVr02QyR9gf1yg.roa (hash: 56dLPJcjlB89ljFKBrlBrzN9saKBJC9XHbbe4kgHJpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:58:9e:9e:ad:43:31:a7:21:17:cd:a9:9f:5b:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Validity
Not Before: Mar 2 04:01:31 2026 GMT
Not After : Mar 3 04:01:31 2026 GMT
Subject: CN=d950d3065cc0191d91e67968656f5204d0f3c18e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:39:10:fc:aa:c4:e1:f0:db:ab:f5:fa:f6:ba:
46:fe:83:2c:54:1e:de:fa:28:e1:1b:bd:74:67:72:
1c:d0:fe:ad:18:79:e0:b4:5e:ce:cc:4e:06:d3:b2:
6f:71:e7:d7:0d:7d:5d:4b:01:6b:f9:26:bb:b3:8d:
7c:9d:b4:ca:03:ae:51:c5:be:89:92:a7:4a:36:f3:
8b:ab:fe:c7:b0:5f:10:8c:f5:72:ce:00:d6:c2:bd:
68:e5:6e:7d:97:a8:31:df:d8:f5:20:5a:d7:3c:5a:
f8:d8:95:67:81:71:6e:fd:c9:75:d3:72:73:70:db:
09:0b:c3:d6:79:12:6c:f5:ce:dd:8d:17:9f:52:fc:
60:b1:45:ea:c3:0b:93:76:ec:1b:8b:7c:60:a2:a2:
84:dc:42:c7:2a:98:91:d8:ed:20:12:b4:72:7a:5c:
e5:18:2b:1f:7c:0e:02:4a:60:45:62:89:72:2d:bd:
07:7c:4f:61:aa:1d:ec:a5:ce:d0:98:66:17:d9:fc:
be:c7:93:28:d2:bf:26:dc:6b:33:39:b8:d5:26:56:
c8:c4:a6:a8:b3:ca:18:b6:6e:53:1c:ce:39:68:50:
4f:4a:4d:26:97:d0:e9:76:26:f5:30:0c:5a:a2:a1:
01:f8:db:31:8b:a8:57:39:e5:45:36:86:4e:9c:67:
1f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:50:D3:06:5C:C0:19:1D:91:E6:79:68:65:6F:52:04:D0:F3:C1:8E
X509v3 Authority Key Identifier:
keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b3:ab:ef:49:6e:21:51:86:77:d0:e2:3d:d1:c1:dd:bc:b8:
51:45:1a:57:8b:9d:d3:62:df:fa:1b:34:08:f7:81:6c:d0:73:
43:e4:ea:82:53:8b:df:63:31:b5:7e:4c:44:1a:ce:ad:a5:90:
e2:f6:b7:bf:f3:32:19:72:51:d5:ad:8f:18:12:a6:37:0a:69:
8d:4b:84:b5:8a:48:dd:63:8a:69:94:99:ed:b5:de:c2:65:73:
be:b0:8d:60:7c:c7:43:51:d1:2c:33:55:30:7e:39:70:e5:67:
1d:06:4c:22:1d:d5:80:df:58:10:3a:f8:10:3b:be:15:1b:e0:
45:bb:42:55:c6:ae:1e:b8:35:54:00:66:03:69:d1:9e:0d:5e:
8d:da:98:2e:e3:d2:39:53:46:2b:84:c6:6f:a1:a9:21:18:90:
6f:99:1b:48:93:f8:9c:78:42:45:2f:a9:e2:a7:0a:bb:5a:a4:
79:35:47:2e:26:ae:75:a9:b9:d2:73:da:71:ac:29:47:81:da:
99:bf:67:bd:5f:d1:d5:04:0d:f3:49:10:a0:27:bf:1e:60:86:
3f:03:e3:3b:a9:8b:32:e1:41:e5:0d:f7:e7:fc:aa:ca:f7:79:
10:0b:00:92:0a:12:1b:b3:94:52:d5:f9:af:69:c4:0f:17:a9:
33:43:17:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:48:33 2026 by rpki-client