Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
File: 4Vanhb9_5NfEpca3ISFPDpbzrsk.mft (raw, json)
Hash identifier: LNyuSk1d1ODGiEsQDGZuKFxbP9iy0Pt/U3MAq1Fjn0Y=
Subject key identifier: CE:C5:D9:F0:7A:82:34:15:DA:61:A8:31:A8:40:92:81:B9:4D:07:C3
Authority key identifier: E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
Certificate issuer: /CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Certificate serial: 019CAC0F9A4D73A07472D62798E3FB9C8862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
Manifest number: 136F
Signing time: Mon 02 Mar 2026 01:00:29 +0000
Manifest this update: Mon 02 Mar 2026 01:00:29 +0000
Manifest next update: Tue 03 Mar 2026 01:00:29 +0000
Files and hashes: 1: 4Vanhb9_5NfEpca3ISFPDpbzrsk.crl (hash: tRDAzPWHoZ1CP2+1dxFWFxywsUwYIDBMD7BMAKfJUa4=)
2: 4xl3tok9SorpWFsyI4hTWRVgL8I.roa (hash: D/WQvDz0YD7aThz9pG4ZIXECMXp1ea6y/G/Bk0u0Mqg=)
3: vzJwebJ7E7PLEVf89eADV1dlWKk.roa (hash: Yr+W4PaEcUNg/gK3cVZEvL18EsHfc2QVQ1cTqMJ7HMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:9a:4d:73:a0:74:72:d6:27:98:e3:fb:9c:88:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e156a785bf7fe4d7c4a5c6b721214f0e96f3aec9
Validity
Not Before: Mar 2 01:00:29 2026 GMT
Not After : Mar 3 01:00:29 2026 GMT
Subject: CN=cec5d9f07a823415da61a831a8409281b94d07c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a6:6f:71:71:de:3f:40:f7:72:4a:19:08:7b:
23:ed:2e:2c:fc:8b:42:a0:0a:5d:28:81:0a:37:2e:
2f:b4:f0:4f:e2:6b:55:e2:bf:5b:9b:a7:c6:a1:86:
a2:9b:17:24:57:11:f7:a6:22:07:e4:5c:5a:58:24:
49:b0:b2:90:ae:92:61:03:21:c5:05:1b:e7:39:06:
7d:f8:01:30:12:85:2c:cd:be:ed:55:d5:a6:f8:c6:
25:d1:34:bb:c8:7b:de:01:20:da:85:ad:f6:b6:d3:
85:2c:39:ae:ac:6d:29:1d:36:c1:6a:ae:ac:62:66:
ac:71:f0:97:b1:4c:34:b5:e9:c6:c2:ce:54:93:01:
15:df:48:3f:5c:ff:30:d7:13:f9:f3:b2:ac:04:c3:
4c:31:27:5c:23:47:4a:69:eb:6a:48:50:b2:e7:44:
d6:43:27:e9:9b:03:3b:a6:8e:32:82:28:18:60:7e:
1c:f1:ae:f8:89:ea:0e:d4:af:8f:90:43:fb:55:99:
d8:19:5c:88:59:79:00:63:56:4b:af:46:00:ae:c3:
ba:bc:ab:fd:97:50:86:c8:84:52:29:26:80:e2:95:
c0:a8:6c:41:ba:db:ed:da:3b:9c:d0:84:19:5d:55:
8c:7b:df:38:fd:45:3b:dc:86:96:60:7b:c9:1f:56:
3f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:C5:D9:F0:7A:82:34:15:DA:61:A8:31:A8:40:92:81:B9:4D:07:C3
X509v3 Authority Key Identifier:
keyid:E1:56:A7:85:BF:7F:E4:D7:C4:A5:C6:B7:21:21:4F:0E:96:F3:AE:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Vanhb9_5NfEpca3ISFPDpbzrsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b18f32-473c-4d9e-ab85-7bd0cfa239f6/1/4Vanhb9_5NfEpca3ISFPDpbzrsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:1c:90:ce:31:b7:1a:73:99:da:0d:ea:2f:5d:89:55:63:41:
63:eb:61:0c:ab:cd:36:36:9e:e5:f9:0c:60:7c:e9:21:3b:e9:
79:84:a9:91:75:79:13:07:fe:aa:88:a5:c1:ad:b6:12:68:d1:
9e:55:85:11:ba:d9:35:be:e7:06:3c:60:13:52:cc:b5:fe:ff:
2f:7e:d8:72:b1:e6:86:e9:d1:cd:bb:7c:0e:99:31:0d:3c:30:
3d:2b:29:43:51:5a:fb:87:c8:cb:eb:02:40:35:83:33:6b:47:
f2:72:97:6b:57:0d:01:0b:75:23:4b:f7:30:8c:23:43:66:16:
c1:7d:b6:3d:33:2d:2f:ca:46:9c:ae:7d:fd:25:56:ac:b5:81:
29:e6:21:bd:dd:cc:f8:29:7b:41:eb:61:a3:50:86:11:89:24:
a9:84:79:70:34:e7:03:b5:93:05:4c:c7:f2:62:29:72:f3:f8:
21:a5:69:3d:cf:b2:f8:64:9c:1f:7b:e8:ba:6f:56:53:2d:da:
df:08:4f:ec:20:7c:b9:ea:ea:99:fa:96:60:5a:f7:fc:e7:d5:
4c:52:9a:77:fa:da:15:83:fc:f4:7d:50:74:d3:1e:1d:af:7d:
9d:2a:9a:cf:69:16:b6:c5:a3:2c:62:af:57:8d:71:0c:f9:a1:
42:1e:26:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:43 2026 by rpki-client