Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: sGodAcsEOK6sUqv0bZXyrgIQiJx6wGzSNGAJigXEFEs=
Subject key identifier: 94:6A:AE:25:D9:90:CD:FF:8D:25:E4:4C:AF:AE:FA:5D:A9:80:29:BF
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 019CAD906B0E2AB57FB6E6CC5E504DF1B14F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 1156
Signing time: Mon 02 Mar 2026 08:00:48 +0000
Manifest this update: Mon 02 Mar 2026 08:00:48 +0000
Manifest next update: Tue 03 Mar 2026 08:00:48 +0000
Files and hashes: 1: Br3g91W4evf2A8FX4-nPHSqH7Oc.roa (hash: gTgHpNU+s78J1A+sPr7pjfV/Fs0kKMeRldiNIgByjo4=)
2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: VxwnjRF9ldAgHr/pctHKTGktSu1fbdj5fYHHU6uquT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:6b:0e:2a:b5:7f:b6:e6:cc:5e:50:4d:f1:b1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Mar 2 08:00:48 2026 GMT
Not After : Mar 3 08:00:48 2026 GMT
Subject: CN=946aae25d990cdff8d25e44cafaefa5da98029bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:db:ab:6c:59:4f:ad:92:b5:1f:4b:94:3a:75:
b7:c2:0a:8b:72:28:19:27:c2:56:fc:3a:40:5b:2e:
f8:9b:34:ea:dd:d4:41:c6:19:c5:50:ad:15:15:23:
a8:5c:b5:e1:4d:1e:8b:d6:41:1c:42:8a:03:64:24:
9b:aa:b2:ba:cd:46:bc:13:d7:7f:3e:c3:d7:ab:f8:
f4:ae:61:ac:27:b0:9d:7e:3c:5a:48:ff:67:a8:45:
b0:84:e7:e5:6c:76:2e:78:be:36:51:ff:75:96:48:
f6:ec:0d:ba:02:53:50:10:e4:01:12:af:b1:b3:9a:
2e:29:bc:57:1e:b5:e3:b8:34:5e:d3:4a:3b:d8:a9:
dc:38:4c:08:40:db:0f:3f:59:5c:17:ca:45:a4:fb:
cb:ef:09:f5:fd:a2:7b:87:8c:eb:5b:47:c4:87:99:
3c:48:84:3f:a9:d2:0c:1a:55:15:46:55:8f:bb:4e:
05:9b:bd:d1:95:2d:c3:4c:db:34:e8:1c:78:a5:df:
7b:83:99:32:b9:1f:0d:c7:96:1f:55:3a:3b:a7:28:
b8:6b:ac:66:ba:f5:a5:ed:de:d7:6d:d3:81:06:64:
c5:cb:4e:5f:de:2a:fa:5f:d2:58:ca:4a:b9:59:9c:
fe:9f:c7:8b:29:d7:8d:2c:57:30:12:fd:8e:65:53:
0c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:6A:AE:25:D9:90:CD:FF:8D:25:E4:4C:AF:AE:FA:5D:A9:80:29:BF
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bf:55:00:22:24:73:1a:8f:13:bd:f3:0d:f4:a6:02:0b:f2:
ac:f8:ba:63:4a:ba:26:6d:79:06:07:9b:ce:2b:76:78:07:47:
80:f7:e8:f9:24:d2:85:1a:6a:f8:7c:b3:3a:33:ec:ed:13:28:
8e:16:6e:3a:e2:a0:28:f5:bb:ab:b6:8f:8c:ff:2b:5f:61:e2:
db:5e:34:86:00:02:5b:80:39:65:f1:4c:af:15:cc:52:18:c7:
dc:a9:e5:de:ba:6a:84:4d:c6:ed:5d:bc:85:07:2f:ce:56:10:
67:99:67:77:d2:ea:f9:de:a4:3b:2e:80:b8:bb:15:d6:5d:6a:
d0:65:11:f0:12:28:f0:db:00:54:13:5c:82:e4:0a:32:10:c8:
27:e9:50:60:a1:21:c7:96:ef:f2:49:9d:f5:6f:76:fd:fa:45:
b7:b9:52:5f:42:e4:7c:b0:9d:11:46:2f:b2:9c:e6:26:92:d7:
11:cd:61:a0:07:eb:c0:62:50:a7:be:08:e5:e4:33:09:bc:cb:
6d:65:10:df:68:75:9b:7b:7a:db:06:d3:0f:db:59:7d:63:3d:
5b:e1:43:5f:3a:84:89:95:9e:4b:02:12:7c:85:1a:cd:79:df:
ca:82:50:d9:16:a8:f2:2b:78:0e:96:6d:9f:2e:af:47:f2:c7:
90:61:f2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:26:27 2026 by rpki-client