Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier: HhwrVQ6Gx+emth8K6e9tR3JazIN8N66M1RE7Y4Vh+M4=
Subject key identifier: 62:5F:B4:ED:C3:BE:B1:A2:6D:2D:5A:FF:E8:01:0C:F3:1D:8C:D4:48
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial: 019CADC7E4B157DDA9F34CC7708953B78C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number: 0670
Signing time: Mon 02 Mar 2026 09:01:24 +0000
Manifest this update: Mon 02 Mar 2026 09:01:24 +0000
Manifest next update: Tue 03 Mar 2026 09:01:24 +0000
Files and hashes: 1: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: ZtPHgAWlWcmaR5iu5S4j0A0c2hhKD4XZNrUON8Scx9w=)
2: QzeP51koEMjHeE88RWvwCqM_qGQ.roa (hash: nwOrnYkRQHY2ElWIiV63spIPWkoVMJum1Nxinn4biHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:e4:b1:57:dd:a9:f3:4c:c7:70:89:53:b7:8c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Validity
Not Before: Mar 2 09:01:24 2026 GMT
Not After : Mar 3 09:01:24 2026 GMT
Subject: CN=625fb4edc3beb1a26d2d5affe8010cf31d8cd448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7d:40:76:71:da:ed:08:4c:4d:86:a6:df:85:
bf:91:dc:1a:b7:15:3c:a1:5b:1c:11:95:43:97:f6:
63:31:04:09:26:f3:d2:55:3f:38:80:96:bf:08:43:
2f:98:6a:93:b4:06:aa:94:98:4e:62:76:40:14:83:
a9:8f:0d:28:b3:71:12:9d:29:bc:f8:31:bd:87:28:
7c:39:28:d4:ee:2b:3b:41:22:a8:fc:c1:0e:76:a4:
8b:37:4a:ab:10:5c:6f:eb:9b:94:48:81:ec:2c:80:
d1:67:1f:63:f9:26:86:06:9a:f2:27:c4:50:b5:af:
2b:b4:d4:9b:90:04:55:52:fe:04:2b:3f:06:49:d8:
d7:89:dc:08:87:4d:cf:d7:29:48:c1:39:f8:da:4e:
e7:1e:ae:67:b3:6a:d4:a5:9a:45:4b:be:49:a8:a8:
da:e1:4c:9c:44:ec:4d:79:a5:d8:aa:60:80:3d:e5:
67:01:6b:7d:8c:68:cf:82:29:d7:85:91:74:4f:5d:
a8:76:c6:1e:22:cf:60:18:e5:76:3f:63:a7:be:0e:
a3:4b:02:ba:5a:03:91:3d:24:2b:92:48:77:b2:79:
8a:e5:0f:44:18:db:fa:2d:d5:32:57:6a:36:77:26:
15:9a:77:a6:50:01:46:45:30:ab:ca:04:22:88:11:
b1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5F:B4:ED:C3:BE:B1:A2:6D:2D:5A:FF:E8:01:0C:F3:1D:8C:D4:48
X509v3 Authority Key Identifier:
keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f7:e7:69:91:a9:f1:5d:e8:ea:64:8f:87:ed:ac:37:b0:f1:
7a:f4:1b:0e:8b:d1:21:e9:ff:b1:29:54:d0:94:c9:71:86:be:
e5:ef:46:6e:89:fe:84:41:cb:00:32:99:7b:d9:f0:f0:d6:19:
5b:5b:8a:f0:f7:94:40:bc:52:4f:ad:c2:20:1e:d8:4d:08:eb:
f0:eb:c9:a5:7d:81:45:11:70:be:39:b3:d6:47:d7:82:c1:45:
51:5a:c0:99:bc:10:61:b0:e4:40:ab:29:77:ca:00:ed:7e:11:
d2:c6:63:b4:44:15:4a:ec:74:06:74:38:4c:fc:36:d3:21:9c:
5d:3f:49:08:57:ae:d0:af:b8:f5:6a:10:8c:49:00:bc:46:9d:
ca:ef:62:98:49:80:1c:3e:88:37:86:b9:34:e0:94:a5:a8:b4:
ba:3b:83:8d:bc:98:45:ed:0a:7f:45:b8:a8:e0:21:12:24:b2:
f9:56:e6:cb:49:43:5f:5e:b8:0e:a1:4e:0b:a6:69:b5:0f:71:
eb:9f:2e:ad:ac:5c:6e:42:be:19:13:f6:08:16:d0:96:6d:2e:
b6:3c:3d:5f:f7:5b:25:fd:50:d8:82:53:20:b6:c1:27:7c:41:
8a:02:3a:8b:85:6f:f1:bf:28:27:81:2e:0b:29:9f:5d:02:63:
a1:ed:23:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:00:58 2026 by rpki-client