Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
File: 4gThwgEU13MWlN3E8nfE3xv_xPg.mft (raw, json)
Hash identifier: dbEhcLonhnXZTQTqTscudjn0Rr1iXX2yIiS5B2ReI/U=
Subject key identifier: 20:47:46:AF:8A:E8:78:43:C1:4C:3A:90:4E:A2:B3:E1:B6:4D:9A:EA
Authority key identifier: E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
Certificate issuer: /CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Certificate serial: 019CA94635264F3483C20E36BEBB43DED2DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 12:01:16 +0000
Manifest this update: Sun 01 Mar 2026 12:01:16 +0000
Manifest next update: Mon 02 Mar 2026 12:01:16 +0000
Files and hashes: 1: 4gThwgEU13MWlN3E8nfE3xv_xPg.crl (hash: j8Gp+2/qwai6NAHbwNozSAkgX2a7D/wMacXCkpTcE8g=)
2: EC4GBb1LJjJ7pV8_x0txKCEIXSg.roa (hash: 9oW73pfxOP8M7veC/PL5Kk4ZUA5njttoIdfA+gSwRO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:46:35:26:4f:34:83:c2:0e:36:be:bb:43:de:d2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e204e1c20114d7731694ddc4f277c4df1bffc4f8
Validity
Not Before: Mar 1 12:01:16 2026 GMT
Not After : Mar 2 12:01:16 2026 GMT
Subject: CN=204746af8ae87843c14c3a904ea2b3e1b64d9aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c2:32:cd:07:0c:9b:51:fb:10:5c:28:86:b2:
a9:59:01:73:df:44:28:af:b1:29:52:82:38:04:b5:
d1:98:3e:18:12:cb:95:3e:43:a2:81:9f:d2:89:cd:
75:22:1f:bf:ec:4c:45:e9:54:7a:b6:d8:a3:04:92:
61:7c:2c:4c:ff:3f:44:7f:0b:d4:0d:56:aa:43:74:
27:4c:b2:8b:24:b7:a5:0a:a0:75:6a:6f:86:74:ef:
61:60:23:22:8e:14:c6:d6:ba:6a:fb:38:07:47:ee:
83:49:14:15:33:f7:a5:67:81:00:c9:00:fd:94:c4:
ac:93:32:ee:6d:99:99:cf:73:42:d6:3e:04:3d:cb:
54:0c:e4:b1:6a:98:c5:a9:6e:a6:54:6a:f0:ce:61:
5f:63:3f:6f:43:11:2a:18:7d:de:3b:9c:c5:68:ac:
be:5d:b1:9b:0e:d1:7b:c9:5c:92:d4:fe:0d:7a:31:
35:cc:51:78:d8:dd:e1:39:60:73:cc:59:fe:63:32:
a8:d0:88:05:93:19:0b:32:f2:d9:65:d4:fd:18:d0:
06:07:8c:74:5e:83:ce:e3:4f:fc:97:75:74:b5:aa:
42:e8:3a:b9:0f:f9:1e:1c:8a:6d:ba:da:a1:20:b7:
23:cb:e4:73:c2:01:f8:f8:b1:ef:a8:c1:d6:49:64:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:47:46:AF:8A:E8:78:43:C1:4C:3A:90:4E:A2:B3:E1:B6:4D:9A:EA
X509v3 Authority Key Identifier:
keyid:E2:04:E1:C2:01:14:D7:73:16:94:DD:C4:F2:77:C4:DF:1B:FF:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gThwgEU13MWlN3E8nfE3xv_xPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/b9df5a-a454-4e27-86af-13d380715cef/1/4gThwgEU13MWlN3E8nfE3xv_xPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:74:b4:3a:12:4a:2d:66:fb:08:b3:a8:f1:52:51:e5:07:23:
5b:f0:76:e1:41:51:eb:a4:9f:a5:7f:17:fa:9c:f9:11:27:b0:
24:6c:75:04:99:3f:c2:67:48:d7:52:0a:7a:29:9c:b6:2e:d9:
a9:fc:14:c3:b8:8f:10:50:21:6e:65:de:0d:26:f8:46:f2:54:
b1:83:16:06:fb:d2:35:7e:da:1d:8b:72:0d:da:f6:38:ff:3d:
04:0f:bb:08:24:a0:fe:b3:cc:53:f4:70:9d:58:06:2c:c0:a8:
13:90:89:7c:d3:fd:41:15:b9:70:f5:f7:77:4e:05:49:8d:e0:
32:a4:54:d0:11:48:5d:f7:de:c8:a1:6b:05:b9:b4:26:55:57:
14:2a:36:8b:48:f2:78:94:34:45:5b:5d:83:91:17:f3:b5:b2:
d4:6a:6f:83:38:b7:72:4f:a6:0c:ab:65:96:bc:59:65:97:8c:
39:16:64:fa:a9:14:32:4f:c8:ff:58:0b:5b:81:52:94:45:48:
d6:84:18:46:07:8f:03:6d:b9:93:20:65:1f:d3:1e:44:34:db:
35:7d:3d:3d:77:c5:99:e8:c5:bd:e1:b3:d4:74:f8:da:c7:6f:
ec:0d:63:3a:44:ac:4f:dd:03:c9:fd:da:df:21:da:6b:72:7a:
fe:23:ce:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:44 2026 by rpki-client