Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: kp5NjdGluX1s3N9/SP9WwqzeJK4rUoT6EMWpVA0MS9U=
Subject key identifier: 21:93:8D:7B:6F:0D:70:63:F3:4B:C4:85:44:40:2E:9C:CE:F9:E7:21
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 019CAA21504E655CFA2ADEEF4E4AB54E7DD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 16:00:35 +0000
Manifest this update: Sun 01 Mar 2026 16:00:35 +0000
Manifest next update: Mon 02 Mar 2026 16:00:35 +0000
Files and hashes: 1: 102rhK3hZolwzCt7IJfuq8GdQf0.roa (hash: YO/FD+MWLi1I9ePrVvUS7xZGRfMEMrX2LxQRpa4cPxs=)
2: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: vyqlSm0Ifbo0hgn0uHm/+b3LBaatouEOjW3kAYkbbkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:50:4e:65:5c:fa:2a:de:ef:4e:4a:b5:4e:7d:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Mar 1 16:00:35 2026 GMT
Not After : Mar 2 16:00:35 2026 GMT
Subject: CN=21938d7b6f0d7063f34bc48544402e9ccef9e721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:b5:96:bb:8f:b3:05:86:8a:46:31:92:28:
ef:df:7e:c3:29:dd:78:59:04:4b:1a:43:fc:37:6d:
a9:b8:bf:a9:68:7b:aa:d4:11:9d:a0:76:03:9e:e5:
46:76:45:40:a1:c5:62:33:b6:0b:9c:64:3b:d5:36:
cf:35:34:d2:5c:09:3d:12:b6:a7:3b:d4:ae:2b:77:
21:63:43:e5:56:22:14:69:a0:2f:15:cd:c2:2d:48:
f2:ae:9c:1e:8c:35:b6:66:7b:3c:0c:48:3b:3e:d4:
ac:8b:dd:07:58:bf:1a:2e:17:1b:64:7b:5b:76:63:
2e:46:e2:c4:fb:44:0c:c9:1e:ae:fe:0f:c2:9f:1f:
a6:f1:28:9f:81:9b:ab:d6:f8:ee:fb:51:42:9a:3a:
dd:b3:a2:c4:53:80:75:5e:5a:f8:d7:a0:b3:01:a9:
d7:63:b4:90:00:4f:c2:8b:d4:e1:4c:a5:26:6e:b7:
8e:56:cf:db:db:29:ca:96:58:88:9b:da:9c:89:59:
ec:0c:ad:4e:6e:b7:8b:b1:1c:7e:64:c8:50:b8:31:
7c:23:1c:a7:6f:c8:10:d5:83:b6:d7:7f:34:9f:1f:
f5:27:a9:85:df:8a:c4:f8:53:c2:bf:dd:20:3c:08:
f4:bb:15:66:1b:5f:52:55:a8:ff:e5:1c:88:a5:2a:
4c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:93:8D:7B:6F:0D:70:63:F3:4B:C4:85:44:40:2E:9C:CE:F9:E7:21
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:03:85:83:31:0a:b1:8a:72:ce:67:b8:15:ba:61:9f:65:97:
31:56:0c:ae:bb:6d:1e:85:a3:22:6d:b5:19:a7:a3:84:87:59:
81:08:b2:c8:f3:ab:0a:05:ed:b1:fe:02:b0:d5:55:4a:af:e9:
22:33:28:10:96:c7:b8:11:d8:2d:a1:cc:56:85:46:b6:cd:eb:
74:95:96:b8:d6:c9:d5:d9:f9:42:c1:05:9f:86:21:4b:e5:2d:
b2:e1:8a:62:eb:e0:0c:7e:27:10:ff:91:92:06:e4:b5:f1:61:
8e:a5:9b:fa:5f:6a:c4:ed:77:9b:7b:87:87:94:a3:1c:d3:93:
59:95:06:3a:55:29:09:04:e2:b9:18:27:ee:e0:ec:09:29:b4:
ff:ec:ef:fe:fc:9a:65:9d:02:0e:af:14:d5:e1:1e:5b:57:a2:
86:31:6a:76:d1:91:eb:28:c6:06:86:0b:ba:2f:96:b2:4f:8f:
ec:ac:5d:2b:04:f9:4c:f0:1f:f2:57:6d:89:84:b4:5c:a7:e0:
60:30:b1:ab:e1:f9:ea:f5:69:41:52:a9:2f:d6:a5:4e:56:2d:
8b:86:9d:bf:65:1c:16:36:5c:15:a5:0a:72:29:b7:1f:83:9d:
3e:9c:e1:9b:2a:b8:22:14:d3:ac:a8:84:8c:70:e8:c5:68:2f:
73:56:07:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:29 2026 by rpki-client