Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier: KVvW1eANeLjnMlCdEr0sPlxdcPtOmQS4vuOHzNtUleE=
Subject key identifier: 7C:A5:74:F0:9D:8A:72:68:E7:4E:FD:9E:2D:1F:73:8C:25:22:1F:97
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial: 019CAA8F69006D3FE48DDC86BFD9CFD1D2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 18:00:50 +0000
Manifest this update: Sun 01 Mar 2026 18:00:50 +0000
Manifest next update: Mon 02 Mar 2026 18:00:50 +0000
Files and hashes: 1: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: noaFntqvxU9FpgTTpGrpMc8bjs7cnPcsOP6jEqmvePU=)
2: K1FdA87T8eFrwlS20DD-axC_KRg.roa (hash: UelE8kISfcUjG8bRU19xRhDTFmmSIXEMYIXQuI26se4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:69:00:6d:3f:e4:8d:dc:86:bf:d9:cf:d1:d2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Validity
Not Before: Mar 1 18:00:50 2026 GMT
Not After : Mar 2 18:00:50 2026 GMT
Subject: CN=7ca574f09d8a7268e74efd9e2d1f738c25221f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:45:06:c2:9f:93:f4:63:86:8e:34:06:c0:d6:
6d:74:88:2c:03:a9:45:26:00:e9:30:d7:8b:8b:30:
9e:b1:15:1a:8f:58:7c:4e:46:64:91:21:8d:3d:08:
ff:f8:f5:99:98:5e:83:d0:37:fa:79:63:f3:f1:74:
5b:eb:b2:46:99:bb:68:47:47:ae:89:00:0a:7c:2c:
56:34:d1:e5:6d:c5:cb:68:00:2b:8e:1e:f4:43:33:
42:f5:7f:80:a5:24:04:7a:fe:f1:cb:2d:3f:f7:6d:
7f:49:7b:1d:a0:61:3c:bd:47:77:cf:d5:b8:e8:42:
0a:a5:e0:61:21:30:17:7d:5e:9e:10:53:f7:96:b4:
59:a8:3c:c3:db:5f:6b:33:a6:f6:22:6e:05:f8:62:
04:1b:00:4d:44:8c:15:76:7e:a5:9b:3e:3c:a8:fc:
42:9c:97:b3:c5:81:a0:e5:ee:cb:02:f3:56:0b:4f:
7a:fc:7b:d6:5e:21:77:82:e2:5c:55:da:44:58:6c:
8b:69:f0:19:bd:54:33:76:b6:dc:8b:91:0d:db:5f:
71:6f:63:6c:b5:e1:4e:b1:bb:bf:3d:c6:2b:48:01:
7d:c2:25:ce:96:d5:24:87:6e:50:94:1c:66:b9:79:
82:05:18:f6:5e:c7:7e:e1:12:b4:83:59:81:18:a2:
63:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A5:74:F0:9D:8A:72:68:E7:4E:FD:9E:2D:1F:73:8C:25:22:1F:97
X509v3 Authority Key Identifier:
keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:22:d3:ad:56:eb:3c:1a:eb:80:6d:ee:b1:e7:c2:ca:77:ec:
2d:ed:47:83:6c:0f:bc:b9:d3:74:64:e2:57:cf:be:4c:76:d3:
f5:e5:c1:9d:a6:9a:50:d7:b2:5c:9d:e6:a5:25:9c:71:ee:8b:
40:1a:77:06:ce:65:7f:ee:a7:b5:1b:ac:d1:3f:94:85:95:e3:
84:49:5b:4a:34:f3:4b:a5:fd:11:01:c7:ad:a2:33:e8:cc:c6:
e3:d7:f3:50:8e:f5:d6:cc:19:cc:9c:b7:eb:77:b0:d7:cc:b8:
f7:34:65:8d:56:18:ca:3e:ab:09:b4:75:37:01:68:a5:db:65:
52:8a:d0:13:8a:09:1b:84:6b:6a:e9:b9:35:a0:39:18:6c:33:
81:38:78:e6:9c:08:f9:e2:7f:7c:75:2e:b8:48:5b:91:5c:40:
9d:97:b3:ff:15:97:96:bc:ea:94:a4:69:3f:2b:55:53:7e:0d:
d1:dd:fa:a4:8b:b4:97:c3:5c:03:af:42:a5:22:a0:58:18:8d:
31:c2:4c:27:d7:3d:1b:b2:56:c6:89:a3:7b:26:57:b9:d4:7f:
7b:e0:80:ee:10:40:a3:63:af:03:a6:f6:3e:51:c7:b2:ec:97:
05:47:06:ee:86:94:e3:11:53:6c:9d:4c:6e:93:65:6e:11:a3:
51:b5:0a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:33 2026 by rpki-client