Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier: RYP3Yya1MLXcgqJKNGzBybrDvpvJ+RhlP5PMpce3xiI=
Subject key identifier: 40:1B:09:30:02:FE:BC:BF:BD:55:5E:67:94:B8:F3:27:3B:D6:F0:E8
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial: 019D389C280C2DD8CB434D61267EC4F6BFC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number: 084B
Signing time: Sun 29 Mar 2026 08:00:51 +0000
Manifest this update: Sun 29 Mar 2026 08:00:51 +0000
Manifest next update: Mon 30 Mar 2026 08:00:51 +0000
Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: cG2bVHN52P8MsRYktGxYXjSYq+aaIoH6H2hZlOivSk0=)
2: 5sTdJeQvv6vdlppaT-0bRjKtxg8.roa (hash: b/QRqgkGgU7MnJZfBiHqIddmWZWJFgjkkxrAF3+M/Ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:28:0c:2d:d8:cb:43:4d:61:26:7e:c4:f6:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Validity
Not Before: Mar 29 08:00:51 2026 GMT
Not After : Mar 30 08:00:51 2026 GMT
Subject: CN=401b093002febcbfbd555e6794b8f3273bd6f0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:21:f0:82:e2:52:08:c0:43:1e:aa:40:4a:
f2:d1:a9:38:db:23:43:e0:b4:be:99:d3:2b:95:7a:
61:da:af:66:e8:33:a3:84:f6:6f:97:7e:bf:f6:3e:
ce:af:58:d0:b3:b2:38:da:55:27:4b:0c:b9:36:10:
b7:64:42:e0:a0:dd:bb:55:c4:be:8d:de:90:89:1b:
1e:ba:f0:ab:88:79:ba:36:0c:01:1b:bf:21:63:a2:
5d:94:84:f0:d4:22:3e:77:1b:b2:7a:6d:25:08:95:
72:74:f3:08:cb:55:f4:84:e8:b2:2b:4e:2a:5e:48:
88:a0:40:ce:77:64:43:d4:90:8c:2c:2b:93:71:10:
c3:14:97:11:29:2d:a5:a9:81:2f:2e:2c:af:ae:4a:
27:f1:bf:ec:77:bf:53:5e:12:dc:0d:5c:d9:77:ce:
ab:90:41:c8:02:db:cd:10:3c:79:53:d1:e0:bd:a5:
35:65:89:7b:9e:50:07:cb:7d:19:25:73:bb:7a:e2:
18:34:63:a8:3e:a9:f8:c3:e6:fc:0a:f9:25:c9:e6:
b4:d0:59:6d:77:46:a5:b6:ed:8c:8b:22:68:7d:e0:
bb:44:f6:88:95:b9:6a:56:f6:76:c8:ac:d5:b8:08:
0f:65:bb:5d:39:21:09:b2:07:0f:79:d8:b1:57:b1:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1B:09:30:02:FE:BC:BF:BD:55:5E:67:94:B8:F3:27:3B:D6:F0:E8
X509v3 Authority Key Identifier:
keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7b:b4:f1:e0:3e:96:b5:bb:9f:2a:f9:c2:0e:2b:08:d4:00:
d8:df:c1:0e:cf:73:3c:13:db:08:a6:9c:d2:40:7d:ad:30:29:
48:11:9d:f1:94:fe:32:63:63:eb:ac:e3:51:e9:51:79:fb:33:
c7:d5:03:6d:84:14:34:5f:f1:39:9a:6c:82:ea:72:fd:55:c4:
42:e5:56:29:31:6b:52:64:0a:fd:6c:83:d7:77:a6:2a:e7:69:
79:b6:c4:58:87:4a:43:8b:a3:82:84:59:69:05:8e:14:7a:ff:
1b:b8:7b:2f:22:66:d5:57:a5:3a:a6:cd:73:22:24:ee:e0:23:
7a:a0:40:9c:7d:64:e0:13:a0:c3:1b:0a:e3:37:eb:1c:a7:ed:
e0:25:e9:6c:b9:d6:ff:62:9b:81:29:b9:96:98:03:65:d2:84:
39:69:c9:79:0c:e5:f1:e0:66:01:2e:25:7c:70:8e:5b:81:7d:
97:4c:6c:f0:ad:ca:5d:66:2c:a1:e4:f2:de:b6:05:5b:d1:12:
de:7b:86:8d:4c:5b:8f:43:82:ac:02:96:89:72:bf:9c:44:62:
22:37:69:4a:4f:df:fc:84:ad:07:14:c3:a7:49:24:aa:89:53:
61:49:27:b3:b0:0e:53:80:5e:28:59:7c:3b:15:ef:1c:f6:98:
d6:09:32:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:41 2026 by rpki-client