Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
File: 4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json)
Hash identifier: 0wG8i7X23aXcm2thm+yqKIsQPLz3QQ8PB8M3ncCDshY=
Subject key identifier: 1B:5F:7E:FB:FB:0A:F4:92:22:20:B3:B4:87:53:08:06:C6:F8:BC:FA
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Certificate issuer: /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial: 019D37C089C483A78A48C853525A38FE0EBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
Manifest number: 08A9
Signing time: Sun 29 Mar 2026 04:00:57 +0000
Manifest this update: Sun 29 Mar 2026 04:00:57 +0000
Manifest next update: Mon 30 Mar 2026 04:00:57 +0000
Files and hashes: 1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: S5STOKiOHPrfCi4cMVEkJMuhDAxUwP1m6zRi1Ky9VmQ=)
2: BxZPTQDdLKKz_KzmvAmu63Br_30.roa (hash: RJzmMfXa1i3UOXt5apo9yzIAminXwO5ap7oBJzJBEJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:89:c4:83:a7:8a:48:c8:53:52:5a:38:fe:0e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Validity
Not Before: Mar 29 04:00:57 2026 GMT
Not After : Mar 30 04:00:57 2026 GMT
Subject: CN=1b5f7efbfb0af4922220b3b487530806c6f8bcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:1d:09:a0:b8:da:d6:75:31:11:c6:4b:33:
a4:ef:90:fa:ab:72:7d:9a:14:46:f6:b7:83:c9:8f:
62:0a:da:0e:26:07:80:9b:8a:52:fc:4b:10:4f:15:
b7:f4:11:ac:74:d1:d3:09:23:80:e4:ce:4a:c0:6a:
38:b5:7b:ce:d1:1d:a5:de:1e:52:0d:3d:8b:a5:18:
e0:3e:98:b1:9e:60:8f:17:84:83:18:d8:ff:ef:79:
f4:47:f4:a8:24:86:ab:dd:9c:43:10:4f:8c:c5:9b:
5e:40:53:45:35:bc:33:1a:d8:29:50:75:93:9a:c2:
8f:95:44:d3:7f:e8:6e:6e:f3:1c:bf:d6:ad:73:5e:
ea:03:d2:ca:87:21:1e:59:6d:02:4c:5a:cc:08:5f:
3e:ad:db:e3:69:1a:51:88:70:5f:96:aa:ec:9e:08:
72:92:8c:f5:aa:30:fd:0a:0b:30:df:41:b8:4c:07:
01:c6:5c:fa:e4:02:4c:5e:ae:81:87:7c:61:5e:dc:
d1:7a:a5:4d:e6:c8:b9:e1:57:35:4f:1d:a5:9c:23:
b5:bc:72:1c:0e:d0:22:f5:c9:07:19:6a:b6:f6:bb:
f7:3e:1f:5f:f4:88:09:8c:65:c0:cc:22:05:94:e4:
b5:20:b7:b9:a2:be:da:a5:f6:df:3a:64:da:15:71:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5F:7E:FB:FB:0A:F4:92:22:20:B3:B4:87:53:08:06:C6:F8:BC:FA
X509v3 Authority Key Identifier:
keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2e:2c:dd:2c:2a:06:0e:98:a9:eb:e2:f6:2e:c1:11:50:48:
0b:93:1f:38:6b:29:cc:a7:9e:ab:03:4b:ae:49:5e:2f:59:6c:
9f:06:44:7d:51:c0:1a:1c:65:bc:b0:5e:2b:9d:18:fc:7c:9d:
34:07:5b:fa:17:b8:c8:0c:f1:6e:4b:06:c1:b0:5a:77:58:a5:
5e:cb:19:2d:1c:4d:c6:56:6f:92:41:87:2b:db:e9:26:7d:f2:
0e:f5:39:de:f3:ea:9e:db:3f:07:7e:5f:9a:6a:5f:17:7c:4d:
74:9b:c7:8e:be:ac:d2:18:b9:65:d2:98:f9:8a:7a:31:29:31:
0d:d8:7e:f8:7d:3c:f0:57:33:42:d2:cd:fc:f8:79:8d:c8:75:
9f:1d:53:e1:d5:db:b3:b6:8c:67:20:1e:89:84:2d:49:8a:b2:
0c:ba:a1:8d:03:4b:85:66:8a:6e:70:2f:8f:9a:09:5b:6a:fa:
3d:a4:4c:9b:ab:2d:27:ac:31:29:6a:2a:fc:b1:f4:4b:7c:06:
41:c4:5c:4e:db:44:8f:75:0a:24:1a:42:da:7d:61:b4:1b:d1:
32:0d:56:a4:40:d8:d0:8e:53:8e:71:a3:96:bc:0e:d1:5d:8b:
2e:4d:02:d4:61:a3:1c:91:68:0c:52:12:15:94:fe:52:80:00:
14:b1:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:43 2026 by rpki-client