Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
File: 4ucXSfgCklOQH3HUZBA56Q8al_o.mft (raw, json)
Hash identifier: mIgQIpM5vz0vmEXxX8MgFlL/EhJzQNLE9X0FT7mgwIg=
Subject key identifier: 8C:C2:C3:E3:17:F1:12:05:3F:B1:27:8D:E4:79:B3:02:D7:91:78:C9
Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa
Certificate serial: 019CA7FC39F9FB7CC987B3ECFEFEDD2F197E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
Manifest number: 68
Signing time: Sun 01 Mar 2026 06:00:50 +0000
Manifest this update: Sun 01 Mar 2026 06:00:50 +0000
Manifest next update: Mon 02 Mar 2026 06:00:50 +0000
Files and hashes: 1: 4ucXSfgCklOQH3HUZBA56Q8al_o.crl (hash: 77XKAdqpWaXPt+WjYRGLOvPHed2lG6GCg1SYnDlw0t0=)
2: JcRsIAV11TxO42T56xBXGNtE8kc.roa (hash: 3pabyOSkwOQBV5aehMnDFgC88a6tehv2gFnKarnZZow=)
3: XbFlHyCBOID9fwZAWWJUvKR3I1U.roa (hash: d1XG1P6bU90g/zeLcvn00HiiT+uT6qBEWhZA1fPBjyc=)
4: ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa (hash: Ilz4iptmtb2hDf1QiYufOvE04YvbCXcLVA+AVaG4uKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a7:fc:39:f9:fb:7c:c9:87:b3:ec:fe:fe:dd:2f:19:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa
Validity
Not Before: Mar 1 06:00:50 2026 GMT
Not After : Mar 2 06:00:50 2026 GMT
Subject: CN=8cc2c3e317f112053fb1278de479b302d79178c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e5:09:de:7c:fa:95:c1:b7:1c:52:08:43:c2:
08:30:82:23:ee:44:0f:4e:f7:a4:1c:74:40:44:99:
37:57:84:9e:3e:8c:6a:52:c2:22:6e:b2:87:5e:df:
2c:d1:c6:92:d2:b2:d2:32:04:7c:d4:56:d6:8f:25:
c9:af:8d:d2:ef:96:12:06:98:67:32:50:58:7f:81:
7f:77:e1:a1:b3:8a:31:ac:93:54:03:21:39:27:cd:
7b:6d:7d:c7:ad:2d:23:2c:6b:3f:b9:a1:57:55:7e:
ef:c2:da:6b:a4:31:10:28:05:41:3c:55:f0:e3:ff:
f1:96:0b:5f:e1:0a:07:fe:1d:81:37:4a:d3:16:b2:
74:5c:74:4c:38:97:eb:fc:91:2d:fb:4b:77:3b:72:
a5:ba:42:cf:cf:d3:61:79:6b:75:90:9c:8d:a5:30:
95:4f:b2:bf:a0:39:5c:e3:a3:1d:b1:8c:17:53:e7:
77:4d:e3:b4:4a:96:b0:80:65:44:10:45:57:70:75:
b7:4d:54:9a:29:83:11:ae:91:37:4d:b2:17:60:79:
2f:e0:8f:eb:77:d9:76:4f:ba:67:03:4e:7d:8c:69:
af:3d:36:2f:45:35:19:25:87:f9:cc:8b:3f:3e:a9:
dc:a6:0a:74:fa:11:e4:6e:37:53:7f:0f:cb:0e:da:
c2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C2:C3:E3:17:F1:12:05:3F:B1:27:8D:E4:79:B3:02:D7:91:78:C9
X509v3 Authority Key Identifier:
keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:01:8f:40:10:04:19:67:dc:13:80:1c:18:73:51:7b:54:f7:
7f:b8:46:a1:27:3d:34:9d:f2:19:c8:9d:7a:e6:50:43:c9:a8:
65:4c:96:e0:60:8b:d3:70:24:d8:b6:39:a8:34:80:fc:db:49:
dd:87:d6:3d:61:67:0a:85:a0:b7:95:ac:1c:6b:3d:4e:7a:27:
c6:1e:89:4a:06:87:d9:66:c4:4f:0f:a2:01:36:c3:b3:82:ad:
35:3c:2c:16:c5:2e:ec:5f:c8:f1:a4:96:43:1b:e0:2b:b9:15:
ff:b7:ec:dd:01:b2:f1:66:3b:4c:d2:14:9e:66:56:f8:2f:3d:
73:c9:60:54:88:cc:91:5e:fa:be:46:94:7a:1f:24:9c:39:5b:
9e:23:cc:34:4b:08:52:19:79:55:b1:1b:25:c1:f2:52:b4:9b:
fa:c4:90:8d:8a:4a:47:85:cc:ee:b6:76:a5:36:89:2c:41:47:
cf:da:75:94:01:e9:a0:61:2e:1d:27:a2:78:8b:31:f9:eb:dd:
dc:4f:93:13:05:32:d9:e0:fc:52:30:fd:c9:ac:00:90:17:c4:
52:e9:bc:63:61:54:d2:2a:25:cb:83:30:b5:47:ca:aa:90:be:
eb:b5:d5:9d:12:49:ca:72:5e:94:60:05:61:5d:84:b3:5d:18:
af:b5:c0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:24:48 2026 by rpki-client