Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: yMZ+nzsPABUYbidKqIFeaPpYQz+pxY6IsuOUCJITw8c=
Subject key identifier: E8:4F:3B:46:FA:AB:70:57:16:D7:E1:3B:DE:B2:05:CE:5B:27:0A:76
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 019CE4EC9DF1DB0BAE1D80517F55B4AE8D48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 1867
Signing time: Fri 13 Mar 2026 02:00:37 +0000
Manifest this update: Fri 13 Mar 2026 02:00:37 +0000
Manifest next update: Sat 14 Mar 2026 02:00:37 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: HoEC4EG10cP/yxhOJ/pzVtsU8huCKKp2j4R1DlFIejM=)
2: KUodnXGsFwyNehqN551Z9d54ZJM.roa (hash: 6vmbRe0Gw7jdU6fIKbRaOK9xmSJJHl1pGRS+mY2Td7Y=)
3: RxQknk-i6X3uYtHklAq4xTvLElU.roa (hash: e3Fk8UZszFvxL51DyoJ+zqnCymh1Yk5n+ob0FV7BX9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:9d:f1:db:0b:ae:1d:80:51:7f:55:b4:ae:8d:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Mar 13 02:00:37 2026 GMT
Not After : Mar 14 02:00:37 2026 GMT
Subject: CN=e84f3b46faab705716d7e13bdeb205ce5b270a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:14:71:fd:21:a0:70:51:81:b2:cb:3f:54:28:
4d:e8:4e:77:3c:2b:64:96:ae:08:cc:81:ce:6a:36:
de:2f:6b:22:8c:42:4a:06:b3:54:ff:34:77:b8:65:
df:65:6c:a2:61:69:ec:b3:88:84:21:b6:fd:74:0c:
7a:43:c8:52:d8:e0:c8:8d:19:09:68:d7:15:f2:df:
81:34:0f:f7:f9:62:e9:5c:75:f2:fc:11:49:27:c3:
70:67:1e:29:3f:77:53:f3:5d:8c:bb:ee:69:b8:08:
69:2e:87:39:82:13:11:ac:b0:40:87:8a:b5:aa:25:
38:ed:cb:6b:ae:15:07:52:a2:1c:f3:e7:f7:34:7a:
b4:46:4f:5b:a5:76:2a:66:c1:15:c2:98:dc:6b:bb:
5c:b0:e6:3a:b0:4f:b9:ba:07:d6:29:69:f7:8c:34:
55:e8:bb:65:61:c0:44:b7:ef:20:a9:5d:fa:27:41:
5e:f5:ab:16:44:1e:31:ed:e5:6c:7c:7f:5a:2e:f9:
c7:01:82:bd:1b:3f:94:c8:14:97:3f:c1:7c:8b:5b:
04:53:83:b4:99:66:eb:4d:a3:7a:d4:67:77:a8:e4:
90:0a:0b:7b:43:f9:a6:bb:26:a8:e7:33:e3:ba:97:
ca:23:1c:33:d7:28:2d:fe:59:ef:3d:ac:e7:c3:dc:
6e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4F:3B:46:FA:AB:70:57:16:D7:E1:3B:DE:B2:05:CE:5B:27:0A:76
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:41:c3:cd:a1:ef:87:85:a2:11:6c:ce:8f:5c:9a:0e:2d:b1:
55:cc:17:3f:60:3e:91:b8:9d:7e:95:a7:0e:89:11:e9:79:9d:
6d:f2:e5:7a:df:5a:7f:e9:d1:49:d1:b9:71:72:ec:6f:96:43:
97:98:5f:59:f0:cf:cf:21:75:56:f5:b3:31:19:73:92:df:7a:
af:a7:14:14:95:d7:b3:7b:05:13:92:32:5a:ef:01:de:c0:f7:
bb:75:dd:78:9e:1b:ef:18:3a:f7:1f:d5:d7:f8:3c:6b:4c:96:
67:5c:d2:2c:9e:5a:6e:3e:94:19:a7:b8:1f:e0:dd:ef:57:7a:
26:40:fc:9d:99:1f:a5:8d:f3:d0:1f:54:6f:c1:d4:b9:c9:1e:
7c:b6:cc:d2:d6:83:25:da:06:9e:6a:41:ac:6d:6c:33:74:0d:
c4:83:8a:51:2b:ea:87:91:34:46:20:82:4f:56:cd:f5:95:fc:
e6:87:59:44:d4:d9:67:10:f4:a5:29:61:49:70:ce:bf:2c:09:
b8:a7:0d:82:44:37:3e:ae:80:df:78:61:2b:2c:28:4a:b5:75:
f4:4a:ba:ca:79:99:cc:f3:9c:a5:c1:3d:3e:bb:93:dc:29:7a:
e7:8b:ec:45:96:9f:cb:7c:99:a4:88:fa:6a:c9:a7:5c:cc:13:
2e:7b:19:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:08:57 2026 by rpki-client