Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: MlsjKaPU8D0SaOWbGUeMv8VMiGu3nq10osj9deHhghA=
Subject key identifier: 1E:12:EC:A6:9F:BC:69:40:B9:1E:66:1B:83:96:6D:64:69:D4:85:8A
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 019CA86A6AC325E3DE684083C06F99E3F029
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 08:01:12 +0000
Manifest this update: Sun 01 Mar 2026 08:01:12 +0000
Manifest next update: Mon 02 Mar 2026 08:01:12 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: Oh+LyqR1Bbegd982TbdDNq92MvqqasRmzk1WysjxzNc=)
2: BfP2bGOW8HthUfuXXggXfcuAbvE.roa (hash: dmLHFskk9KIm4+573JvglcI2K8WR/PAM7m+/RW2L1vs=)
3: Gqd_X9Cp3EkyhF_XljM8cJVBjSo.asa (hash: J5j3yc/QFcGihvZazzwI8F9VHttAgOTYUiy+DL6NbuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:6a:6a:c3:25:e3:de:68:40:83:c0:6f:99:e3:f0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Mar 1 08:01:12 2026 GMT
Not After : Mar 2 08:01:12 2026 GMT
Subject: CN=1e12eca69fbc6940b91e661b83966d6469d4858a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:68:74:2d:b3:c8:4d:aa:02:22:e9:84:1b:82:
95:c3:7c:8b:f6:1b:09:a7:c3:e9:27:d9:47:bb:6c:
f6:f6:67:d0:3c:5b:93:a8:12:ad:6f:e0:d5:1b:5c:
66:a2:b4:cd:cc:6e:89:fc:da:87:55:3e:93:ce:dd:
1f:0e:6c:97:4d:eb:cc:f1:3a:4f:7a:22:a5:34:15:
f1:2d:48:71:5d:4e:6f:e8:49:af:92:c3:52:b0:58:
48:8a:34:6a:2c:a3:2e:f4:f6:3e:c0:bb:49:4f:be:
5a:59:8f:62:0f:de:ce:65:91:e2:48:84:95:d2:7c:
fd:b2:62:1f:45:59:91:f4:1b:41:48:1d:a5:36:2e:
a1:25:d8:81:47:9d:c2:52:5a:0e:d1:ab:bf:80:78:
6b:eb:8a:7c:00:e7:5e:4a:9e:69:67:de:3f:bc:1d:
1b:5e:c4:83:1b:c5:30:24:5f:cc:90:4d:48:63:c0:
61:64:c3:99:59:e3:74:08:a3:62:61:50:aa:56:85:
c3:7f:c1:60:ea:f1:6b:80:61:dd:1c:5c:54:ce:df:
e3:3b:53:10:ac:f2:48:a5:17:d8:ad:e2:6e:d4:bb:
75:be:a9:15:05:58:78:c8:93:c0:05:17:71:39:67:
46:fc:81:f0:f9:28:47:dc:c6:a7:3a:b0:44:7e:9a:
b8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:12:EC:A6:9F:BC:69:40:B9:1E:66:1B:83:96:6D:64:69:D4:85:8A
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:92:cf:32:28:63:c0:61:fb:19:c1:15:c1:b7:6b:09:12:72:
c8:ea:3a:4b:9f:eb:45:60:16:11:50:9f:a7:3e:ab:4a:25:3c:
a6:b8:78:04:8c:f0:6b:6e:70:59:0c:59:56:9d:f0:71:95:57:
dc:c0:4b:a5:7d:f1:04:0d:0f:f5:f3:cc:92:9c:31:b1:2e:4f:
7b:a4:8a:16:a8:10:4a:de:75:de:e0:1b:bf:50:1b:6b:36:ff:
81:71:74:c2:88:9a:de:7a:0b:6c:fd:fd:5b:7f:be:29:19:1f:
c1:77:13:9b:ab:60:b7:2f:69:01:e2:41:e7:d9:72:2d:a5:7a:
2a:0c:71:13:cb:e0:04:fa:ee:78:c7:a5:f4:ac:03:28:c7:5c:
9e:b9:a5:dd:65:ae:e0:fc:d2:3d:01:e3:a2:63:d3:9d:96:f6:
70:7c:ea:de:0c:1d:85:4c:26:1e:8c:26:60:9a:73:d4:e7:12:
33:4e:5d:a2:4f:1e:90:dd:42:73:2b:a7:46:46:4d:06:d5:8a:
61:fd:6c:f3:d1:98:dc:ed:bc:20:02:b2:a0:8b:91:44:20:54:
f6:e7:0f:94:dc:2f:f9:6d:d3:9a:ca:05:a8:f0:99:7a:e1:f4:
05:52:f8:4e:0a:85:b0:77:1e:fe:d7:fc:58:ae:21:e3:31:54:
b1:b2:d0:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:24:01 2026 by rpki-client