Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
File: 4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json)
Hash identifier: hcX4Kz/EeugQ1JfllUcaKg5gSQr9v81S1Qpu8ysLzwE=
Subject key identifier: AF:3F:DA:56:F1:79:67:76:C5:A9:43:E7:9C:3C:70:A2:3D:20:48:62
Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Certificate serial: 019CADFE5BFADA3E221E10288E4630C92397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
Manifest number: 05AE
Signing time: Mon 02 Mar 2026 10:00:53 +0000
Manifest this update: Mon 02 Mar 2026 10:00:53 +0000
Manifest next update: Tue 03 Mar 2026 10:00:53 +0000
Files and hashes: 1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: 0vMXBS5U0ZXZG8U835U3XiaQrhzMXcbvKfECbjfyw/Q=)
2: WoJCGFQyPD7fJgWRXTNxxrmi7IA.roa (hash: rPmZbrV7SIsTdeGu/1qJQQ8AkYuLMStM58OYdp4CW6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:5b:fa:da:3e:22:1e:10:28:8e:46:30:c9:23:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Validity
Not Before: Mar 2 10:00:53 2026 GMT
Not After : Mar 3 10:00:53 2026 GMT
Subject: CN=af3fda56f1796776c5a943e79c3c70a23d204862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e6:af:04:30:36:e2:d9:0f:85:74:5e:6f:60:
69:18:91:66:43:6d:5e:97:5f:70:04:d9:7c:ab:71:
19:fd:bc:27:7f:69:3e:93:59:d6:1c:54:86:87:59:
f8:65:73:cf:3f:ad:77:9e:a0:3c:e2:c4:b7:ac:9f:
17:61:ea:a1:50:78:2e:11:f3:f8:53:28:1f:4d:04:
9e:32:a9:17:f6:8d:13:e3:8d:de:6c:2f:04:7e:5e:
16:f2:26:7b:d1:b1:8e:c6:8b:9b:f8:d3:d2:c1:2d:
51:5f:23:15:91:af:14:a1:c9:42:18:af:d5:bb:e4:
b5:2b:d1:36:55:45:a6:d7:b0:2f:cc:93:32:06:c5:
91:f5:72:a1:87:3f:4d:48:45:74:d4:7c:40:98:6f:
5c:0f:ee:f7:07:93:a3:70:7f:c6:f2:26:da:d3:f7:
84:b6:f9:4a:42:9c:b8:88:f2:ef:50:61:69:f7:e1:
c6:0e:26:df:9d:4c:b5:38:fc:81:9c:02:ca:83:67:
8d:1a:01:f4:c4:90:e8:64:a5:06:ef:6f:10:6d:e3:
ff:e2:1a:9d:40:bc:26:0e:1a:bb:de:25:ba:bb:34:
fd:a2:05:e3:01:28:0c:b3:98:91:90:00:82:42:ef:
96:a5:d6:0d:89:99:ad:10:23:dd:c5:ea:5d:32:a3:
9a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3F:DA:56:F1:79:67:76:C5:A9:43:E7:9C:3C:70:A2:3D:20:48:62
X509v3 Authority Key Identifier:
keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:71:5f:c9:b3:f4:19:92:e5:bd:53:84:fb:da:37:f7:9e:87:
ae:4f:c2:f6:d7:9f:5c:d2:ac:df:72:51:4d:ab:1c:14:96:db:
4c:16:3d:65:16:f0:d0:b4:a1:82:42:73:7d:de:9c:5a:98:94:
28:1a:ae:66:c5:34:c9:f3:66:99:48:68:dc:ce:66:1a:99:5e:
3e:57:4d:d8:b6:fb:fb:59:56:81:8a:4a:a1:db:8a:45:43:5b:
d0:d9:41:33:d8:aa:cb:6d:ad:22:cd:41:cb:1d:b9:bd:12:7e:
cc:7d:e5:7d:f3:b9:d3:91:59:b2:02:d9:a3:4c:73:63:5d:8f:
b4:fa:a6:a2:86:7a:1c:70:52:59:68:d8:36:f0:d6:d5:96:cd:
34:96:f1:87:c2:07:c4:92:94:a4:8c:7d:4f:f7:4e:fb:8a:f9:
52:54:41:87:1e:ff:cf:91:d0:32:e6:ab:96:21:f4:de:fe:5c:
b2:58:bf:83:e9:f9:ef:68:70:d1:63:a0:ef:d9:ea:19:b1:af:
18:f5:77:fa:72:f7:ae:0a:af:1c:4f:29:64:e3:13:7e:6b:95:
be:d1:a5:71:be:8f:73:1e:39:b5:e0:69:38:40:8f:b2:eb:09:
a3:a9:c9:26:f9:4c:3d:52:65:0e:2e:6b:7b:d5:f3:cf:6d:2c:
5e:6f:e8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:37:10 2026 by rpki-client