Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier: qJC7fgOSqgLoiPFUXVxQxVJM/JkSdOU0XJO/dprfCHs=
Subject key identifier: 91:46:55:6C:6C:D1:9E:2A:A6:04:77:0C:E6:91:A9:5A:44:0E:CB:00
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial: 019CA9EAC4E93E1DCC6683FC2B8F7301AAC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number: 16C6
Signing time: Sun 01 Mar 2026 15:01:01 +0000
Manifest this update: Sun 01 Mar 2026 15:01:01 +0000
Manifest next update: Mon 02 Mar 2026 15:01:01 +0000
Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: 4DQKLnWFyoCtCrb9hRnVc/SiXYkdXJ3v8x/6+Xn8R/Y=)
2: wxMlSMWtQ0ndBMMV3tfXfzI4pMo.roa (hash: Cum4Di2WX2Vf5OYvq7GxldvC9jsMY0qM5fo7QBzndMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:ea:c4:e9:3e:1d:cc:66:83:fc:2b:8f:73:01:aa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Validity
Not Before: Mar 1 15:01:01 2026 GMT
Not After : Mar 2 15:01:01 2026 GMT
Subject: CN=9146556c6cd19e2aa604770ce691a95a440ecb00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ce:fd:40:fe:f6:a2:3d:41:b3:08:e1:30:c7:
e2:e2:6a:0e:34:0b:aa:f3:d5:31:f1:44:1a:08:49:
5b:fd:d2:1e:a4:53:65:fa:a8:58:34:1b:1c:2b:09:
c0:f6:c4:54:2e:be:ad:59:d7:aa:28:ab:e5:8e:eb:
5e:6f:6e:c3:ca:f7:14:7d:ca:29:90:9b:cf:05:c4:
3c:bf:57:57:9e:80:eb:df:ae:ee:4d:29:4f:55:d2:
d2:7d:ef:3b:1a:40:28:1a:e3:a0:d8:21:9b:a0:0f:
90:76:65:15:d5:da:71:7d:ff:29:7d:60:2b:73:34:
e8:0d:49:d6:01:83:ce:7a:1b:fd:02:4e:39:41:4c:
5e:53:86:88:ec:ce:b1:55:f0:01:ab:6a:aa:0e:23:
a5:13:83:61:67:0b:94:fa:5f:04:17:d3:13:e2:66:
30:46:12:ac:c1:8c:b5:20:16:a1:19:cb:30:6d:68:
80:3e:30:ba:64:7e:61:7b:27:1e:cf:77:8b:5d:c3:
5d:c2:51:0f:ba:66:ec:57:4f:76:84:c8:19:86:20:
5d:d4:34:1b:84:c6:d3:4c:4f:8d:df:4c:89:66:64:
26:1a:6c:ca:fb:2c:d5:c9:63:c7:2e:55:b6:ea:c0:
7d:5c:3c:42:16:ea:51:c2:ab:5e:8c:aa:0a:ef:dc:
3a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:46:55:6C:6C:D1:9E:2A:A6:04:77:0C:E6:91:A9:5A:44:0E:CB:00
X509v3 Authority Key Identifier:
keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4b:bb:04:7d:33:34:d2:35:b3:d5:e9:d3:6f:63:43:c1:4a:
b1:45:89:c6:03:bb:ef:4b:2c:4e:32:eb:4f:ad:00:e5:85:e7:
35:ba:f1:63:04:8e:92:71:b5:2b:17:43:0f:8a:b6:78:2f:83:
87:cf:2a:a7:c9:e9:85:d1:08:d8:d7:bc:b2:15:7f:cb:25:2f:
8d:fe:5b:8a:94:0e:09:81:46:ba:6c:93:0a:6e:05:d6:be:94:
d9:a9:fa:11:69:bc:48:bd:1f:87:6f:fd:f5:4b:80:33:76:8c:
dd:15:4f:ab:67:76:76:fd:8f:f0:75:e3:f6:bb:2c:af:83:48:
49:04:fb:f5:7c:9f:26:9e:f9:58:5c:03:f4:da:3e:45:64:43:
14:9e:e0:6f:b2:85:ff:46:17:19:7c:e0:07:f0:26:56:ce:5c:
3b:b5:46:54:7c:f6:e1:17:f1:da:c5:bb:e7:2b:3d:ee:23:c8:
10:d4:79:ce:71:7c:6e:18:6e:96:0d:ec:da:4f:4e:50:bf:0e:
f1:63:83:99:7c:45:0e:5f:b0:d9:9a:b6:4b:60:86:9d:ca:4d:
07:e3:69:1b:36:91:95:c0:7b:9c:0b:ca:39:ac:f1:a3:8d:f3:
d8:e6:93:68:e7:0a:34:b6:61:ef:df:4a:39:89:87:a3:43:15:
37:be:0d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:59:06 2026 by rpki-client