Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier: NyD6jbfs1SQhYfpBVvgP3u6x+tJ9fjXm160cBn/b3U8=
Subject key identifier: C4:0E:75:C4:53:44:91:A9:19:30:6C:D7:D9:4E:6D:D9:AB:6B:92:C1
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 019D382E30C89863635ECDB3EE03EA9B1FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:44 +0000
Manifest this update: Sun 29 Mar 2026 06:00:44 +0000
Manifest next update: Mon 30 Mar 2026 06:00:44 +0000
Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: 46sVX2BPF6ZQWIJRuOiF8/4aAJHmWP8pNbY6HCH0seU=)
2: Dv6DzYWC8QD9B_MZto_ESNK4j6k.roa (hash: punip1kHRpKApQYHrsUHwLPlb8qszTQ5w8o2U1ESN+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:30:c8:98:63:63:5e:cd:b3:ee:03:ea:9b:1f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Mar 29 06:00:44 2026 GMT
Not After : Mar 30 06:00:44 2026 GMT
Subject: CN=c40e75c4534491a919306cd7d94e6dd9ab6b92c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:04:33:81:c9:08:e0:fe:57:ef:ef:ec:5d:23:
ac:fb:21:85:7c:bd:96:a8:35:e8:c1:7d:82:de:b9:
90:f0:04:84:8e:50:86:d2:7c:29:11:47:0a:80:61:
d0:08:c2:34:de:45:71:81:8a:af:dc:bd:ef:a8:3e:
12:13:83:ce:20:87:bd:f6:7c:f4:c3:01:74:df:0b:
ca:87:89:e4:14:e4:63:c1:08:f3:d7:10:dd:9e:46:
d3:1f:4c:30:36:61:e4:7a:43:69:93:54:8a:c8:a1:
42:64:6c:f1:03:3d:82:da:01:dd:13:5d:d5:28:09:
d7:78:55:d1:75:cd:46:36:a0:7e:d8:c6:da:1e:f1:
eb:48:19:dd:ec:e2:a9:c7:b6:ed:c3:d5:84:f4:da:
95:08:6e:10:43:78:51:e7:79:cf:5e:55:d0:28:26:
8b:c4:b8:80:90:fb:58:ed:ad:3b:d4:8a:76:3e:71:
42:17:2a:94:d2:77:01:74:80:56:df:59:ac:dc:4d:
3b:49:1b:af:13:e2:87:16:3e:ff:dd:e3:18:35:82:
6b:5e:e4:09:8c:8c:ab:fd:e9:ec:ea:06:0f:18:68:
d0:cc:9a:68:2e:f6:e1:2a:19:fc:eb:77:55:3e:28:
1c:7e:47:af:bb:c6:6f:48:02:d7:e5:55:dc:d0:df:
c5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0E:75:C4:53:44:91:A9:19:30:6C:D7:D9:4E:6D:D9:AB:6B:92:C1
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f6:fe:3a:45:1c:35:fe:61:3d:14:8b:f1:f6:c5:d0:07:a6:
1e:30:fe:8d:53:f0:d8:28:a8:3b:55:7e:dd:e3:b6:98:bd:71:
c7:6d:44:a9:e8:18:de:11:cf:ad:14:7c:a4:59:60:b5:b8:a8:
53:d1:d5:76:ad:3a:b8:93:f8:0b:ea:12:1e:9a:26:8f:34:52:
82:be:e1:f8:f1:aa:5b:69:ae:62:d0:2a:fc:25:5c:26:7b:12:
19:bd:06:07:ab:be:e0:4a:6a:ee:2b:fc:d8:0d:c8:e3:f3:fb:
82:fc:a5:65:c9:98:b4:b8:e0:f6:07:43:f3:90:cc:2a:4c:d1:
66:c2:e7:12:94:2e:0f:8c:ab:ae:81:fb:4c:84:a6:f6:7f:77:
3b:17:a5:39:84:c9:83:01:62:cb:0c:c6:ce:8f:4e:b8:b2:51:
36:c9:90:b3:b9:76:fd:b5:66:04:cc:15:d8:bb:0e:3f:eb:c9:
9c:26:9e:3b:3f:b6:44:9e:ce:f4:89:45:14:99:c3:8a:7f:ba:
37:b4:73:b8:08:8a:e7:b2:3d:4d:76:c8:f7:95:f7:3b:98:1a:
6c:61:ce:da:5c:6b:a0:3b:1e:a0:d1:2c:51:7b:2d:c2:03:e7:
64:8f:34:82:89:d5:12:71:de:d1:de:b4:6f:39:fb:93:7c:c5:
0c:29:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:23 2026 by rpki-client