Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: CjvgLu2I6LKh1o40VpGT9eLPUzpaGaNnUiGCn5OqZ+0=
Subject key identifier: A1:7B:24:28:8C:51:DB:7E:B7:12:A8:C9:B7:C3:A6:48:EB:31:A7:3A
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 019CABD98D7E1FC9749A53EDCFA57D7FDA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 1851
Signing time: Mon 02 Mar 2026 00:01:27 +0000
Manifest this update: Mon 02 Mar 2026 00:01:27 +0000
Manifest next update: Tue 03 Mar 2026 00:01:27 +0000
Files and hashes: 1: 1-5V3M6zE3wKBEweDO-7_cCen51c.roa (hash: LwMI3fPGMvfyxbI/YBNs8zyBRZxgnVuUyiN/3FDRb40=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: kXPlCmfKpyZ2MddbiACdan8ChC2vpHh1ZcB9lBPoW6Q=)
3: tJXMZewUy_qQorxapIfDeK0TRA4.roa (hash: 2jFBZw5YSsGd1/9a3dRJA3x3ClgECy8D4Vl48wSzo0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:8d:7e:1f:c9:74:9a:53:ed:cf:a5:7d:7f:da:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Mar 2 00:01:27 2026 GMT
Not After : Mar 3 00:01:27 2026 GMT
Subject: CN=a17b24288c51db7eb712a8c9b7c3a648eb31a73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b3:64:52:41:47:c4:a0:a2:62:1d:2e:3a:41:
dd:ad:49:df:2a:c8:80:0d:66:02:f5:a1:85:0d:37:
8b:80:aa:1b:38:5c:eb:53:1e:e1:a5:10:f7:4c:78:
4c:64:f6:1a:ba:d1:c8:2f:3b:86:43:8f:8a:22:3d:
3d:ee:dd:31:60:f9:43:00:bd:55:9b:a6:01:05:2e:
11:42:bd:6e:1f:f6:37:0d:3e:51:79:37:c0:09:ae:
93:94:96:db:fc:bf:8d:eb:03:e2:56:c7:d6:34:11:
a7:a3:89:86:20:49:59:8f:2d:8f:c8:26:a4:79:48:
ea:26:18:41:d9:d5:36:e5:37:ba:8d:46:bb:19:23:
fd:90:1b:19:3a:f3:be:0c:10:20:1f:f4:03:1e:1c:
c6:1b:98:6a:c4:65:90:b8:da:11:12:7f:e9:fc:7c:
bb:18:e7:4e:52:68:31:d5:81:c2:01:f0:2b:7b:6c:
1d:fa:80:6e:2e:1d:5f:10:e7:4e:63:10:7f:ae:c9:
fd:74:ab:50:df:4d:ff:4f:c4:1a:8b:92:d3:d3:b0:
af:1c:d0:22:e7:36:8e:3e:7b:37:8e:2f:82:ab:2e:
d8:ff:1b:f4:0f:ae:4f:a6:d2:a0:69:fd:6e:64:6d:
83:9c:a1:d2:70:b0:58:49:79:e7:41:03:eb:d7:e1:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7B:24:28:8C:51:DB:7E:B7:12:A8:C9:B7:C3:A6:48:EB:31:A7:3A
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:73:66:35:9f:d1:5a:19:55:d9:d4:55:d9:eb:4a:b4:37:e2:
10:e1:e6:d8:f7:dc:e5:38:87:77:d7:77:68:e8:1b:a8:1d:f5:
7f:a6:c1:16:1d:0e:93:2f:7d:46:3a:be:b3:0f:4d:14:e4:b4:
0e:5d:7b:f5:2f:c3:ec:ce:43:54:de:60:35:1a:3b:58:37:18:
3d:dd:79:bd:d2:94:ac:91:e9:7f:67:95:cf:af:ae:b3:0b:ad:
ba:9b:18:be:d0:36:32:fe:5c:01:19:30:91:3c:dc:0a:40:5f:
54:41:9a:0a:18:1b:bb:92:0d:ce:68:2d:69:63:18:ab:b5:a4:
e6:fa:ab:0c:90:9d:5a:a1:f1:21:da:75:55:db:af:4a:ad:84:
62:b7:68:fd:99:b8:5c:b0:6b:48:f3:bc:04:76:ca:61:40:cb:
c0:b5:7c:68:07:9a:44:5a:1a:41:41:6c:f3:ec:14:c4:ba:12:
71:59:06:4a:78:b0:14:12:35:6d:2b:c9:28:5a:14:70:2f:a2:
ac:c7:0d:71:fe:d5:66:7d:df:e0:39:dc:7d:ea:5f:84:e3:c3:
65:12:e1:2d:bf:ea:e1:42:ae:b5:af:db:89:1a:2c:6a:de:53:
21:7b:e8:b8:3e:8d:9d:e0:60:3d:07:36:71:0d:7a:09:fb:0a:
0c:33:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:34 2026 by rpki-client