Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
File: rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft (raw, json)
Hash identifier: dCup4tO6+EYfpfS/pmplJKAsywjVqTHjgSzit5BeTyY=
Subject key identifier: 3F:C6:BF:DD:5B:4C:62:B4:AF:5F:FD:2D:5C:16:18:62:7C:54:15:75
Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
Certificate issuer: /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Certificate serial: 019CAA900DE6D266D0BF64E77FB743381ED9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:01:33 +0000
Manifest this update: Sun 01 Mar 2026 18:01:33 +0000
Manifest next update: Mon 02 Mar 2026 18:01:33 +0000
Files and hashes: 1: Urm8LGF3nWAC-z0vN8e0GgC0tZI.roa (hash: ExuI2kIDGZzfnph2B5PPw/UGl0nESxyqgqQscTauTwI=)
2: rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl (hash: srFbOsHpb1Q+UGrjkEYB7NscSldm/ITXHOE7OBnt5Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:0d:e6:d2:66:d0:bf:64:e7:7f:b7:43:38:1e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Validity
Not Before: Mar 1 18:01:33 2026 GMT
Not After : Mar 2 18:01:33 2026 GMT
Subject: CN=3fc6bfdd5b4c62b4af5ffd2d5c1618627c541575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:3b:97:cf:96:a5:6b:00:b9:85:64:85:dc:
32:94:63:45:d7:bb:44:f4:16:33:89:d8:25:6f:11:
93:54:bc:d4:4c:90:ba:70:2a:55:28:23:f9:61:df:
23:ff:e0:a3:0e:91:5d:5e:81:a0:7f:94:d6:9a:8d:
3b:b8:ec:25:bd:1c:66:42:6a:a5:7c:97:41:8f:71:
4e:e8:03:5d:1b:0b:c8:b7:7e:1e:0c:10:ae:f2:37:
22:83:d1:eb:9b:45:d6:64:b8:be:86:b7:8f:00:22:
0f:77:6c:5d:8e:14:60:5b:e2:fb:7b:ea:ec:0d:8c:
1e:3f:dc:f0:31:dc:76:1e:12:27:10:97:a5:82:1a:
af:65:51:ec:fc:15:56:b1:7d:64:4e:bf:b9:3e:3b:
4a:95:ae:89:bb:08:7a:fe:e2:fd:c9:9f:67:34:e8:
3d:64:2f:4f:9b:2d:05:9e:fe:ae:62:b6:d1:e2:cb:
97:36:2f:50:7b:a5:be:35:31:bf:58:61:bf:77:76:
a0:f9:7b:ee:c5:da:2e:43:21:9b:30:32:48:ae:a0:
9f:45:bd:9f:ba:37:24:46:7e:ed:26:5c:dc:aa:9f:
f9:89:4b:3d:2d:7a:08:79:48:db:f5:4b:76:e8:8f:
bc:95:84:47:4a:80:a9:46:28:b6:87:a5:38:9a:dd:
01:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:C6:BF:DD:5B:4C:62:B4:AF:5F:FD:2D:5C:16:18:62:7C:54:15:75
X509v3 Authority Key Identifier:
keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:7c:3d:3e:bf:6b:f2:a3:97:53:0e:7c:6a:24:e1:e5:78:d0:
65:37:01:ab:fa:f5:15:6b:f3:93:94:f0:6e:37:b3:17:28:6a:
76:db:98:80:49:76:d0:a1:6c:41:be:27:26:49:3d:db:85:b4:
78:ef:2a:91:86:69:03:03:71:c8:04:f9:04:41:68:0a:6b:c7:
98:34:fb:d9:aa:48:70:9c:39:2b:25:41:49:7a:59:3c:56:7a:
2e:04:fd:00:52:ad:3c:7f:66:86:c4:b7:b5:63:f7:8a:0d:66:
a0:b2:37:7c:65:d9:50:38:c8:ad:0d:84:a5:13:de:a7:90:74:
42:51:38:4d:b5:b0:32:a7:d2:16:ab:17:62:f8:64:62:53:4c:
ae:97:25:a3:f4:77:bf:22:84:b3:f5:af:c5:90:60:7b:49:48:
af:15:f0:1a:c0:11:cb:10:8a:8b:4e:1d:63:a9:12:db:28:90:
54:88:9b:4c:06:c5:d9:74:31:02:ab:73:39:72:51:79:00:92:
4d:75:2f:6b:44:4f:95:ea:fd:45:ac:97:d9:6f:7d:ed:42:a1:
f1:08:fd:27:c8:61:99:80:66:55:2b:aa:03:06:ce:c8:6e:1c:
18:b1:fc:e1:cd:19:25:5c:fc:64:a8:b5:bd:64:89:26:13:f3:
d5:5f:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:28 2026 by rpki-client