Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: +UEo0gKi7w8f0Sd4Q483NJGYYl5EjByEQXzcdazS43c=
Subject key identifier: BB:17:38:6D:EF:C4:60:EE:5D:A8:DF:C6:0D:88:CC:04:DB:52:12:FF
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 019D382E5265B23079F298A0421DC743525D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 0691
Signing time: Sun 29 Mar 2026 06:00:52 +0000
Manifest this update: Sun 29 Mar 2026 06:00:52 +0000
Manifest next update: Mon 30 Mar 2026 06:00:52 +0000
Files and hashes: 1: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: Xgu/mIpw5XxsKqVHFfPlWBsaNiJzMZsv+WIqyReUVWE=)
2: Ev9DIl3UcKO2QOG-vO3Xbh6afQ8.roa (hash: imyx+MqhErllzPgURUbLOjPqBlQ0hxwFitun79GI6bQ=)
3: pIH-PyJ-S7KYRBMhx3HzyVyBgpM.roa (hash: 1cLs+Wdw+wnP8h4XUUBLHG3PCH085TENzzZDNYgitoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:52:65:b2:30:79:f2:98:a0:42:1d:c7:43:52:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Mar 29 06:00:52 2026 GMT
Not After : Mar 30 06:00:52 2026 GMT
Subject: CN=bb17386defc460ee5da8dfc60d88cc04db5212ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d2:6b:b2:8e:e1:e2:23:49:bd:a2:ca:6f:b7:
61:6f:96:45:39:be:ae:b2:a6:90:c6:24:2e:dd:0c:
07:4f:ad:fd:cc:78:b1:8e:57:74:2b:b5:7d:b7:b8:
65:d7:1c:e2:fa:78:ce:9a:27:37:90:51:9e:9e:11:
6f:2d:b1:c1:3f:5e:99:e6:69:2c:fe:5b:d7:af:84:
f8:4d:c0:00:8a:b8:b9:6e:42:93:5f:72:52:68:ad:
d9:e9:ea:2e:b9:26:ff:95:f3:1d:98:6a:e0:1c:13:
35:93:fd:13:91:72:5f:06:be:5b:ae:fa:19:37:34:
66:25:f4:cc:fc:19:d8:d5:36:82:5b:d7:db:ef:2e:
57:5d:02:a5:14:01:f6:4c:b0:fe:66:c2:90:5c:dd:
97:32:f0:ac:59:b3:1e:29:6c:35:09:1d:be:8d:cb:
92:d2:d0:f8:df:66:5b:7c:54:76:e2:88:29:31:64:
83:fd:e5:33:f4:b6:e2:a2:06:6c:be:aa:39:87:2a:
36:79:a7:97:73:33:27:bb:58:af:72:ac:44:a2:22:
4d:b5:41:66:79:1b:9d:07:b5:26:83:6c:d6:de:9f:
8c:ea:ac:48:64:cd:cb:3a:b1:41:64:91:36:62:5e:
d3:7d:9b:33:48:d9:fc:76:ce:1f:f4:d8:57:00:ee:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:17:38:6D:EF:C4:60:EE:5D:A8:DF:C6:0D:88:CC:04:DB:52:12:FF
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:02:4e:9a:a6:b2:5a:8b:70:2e:9e:ef:66:d7:b3:24:bd:f4:
b2:ac:fe:9b:1a:e7:5a:34:d2:eb:b3:8d:6e:0f:5e:e3:33:d3:
e1:e0:ba:4f:46:61:11:9e:9a:38:9e:e0:ad:e6:ca:d5:b7:0d:
33:e8:43:88:d0:e2:00:f6:5b:4b:b2:2f:16:60:1e:e5:0b:1c:
47:25:eb:9b:e8:be:8c:51:95:9b:75:da:fb:f6:17:c7:a8:61:
d0:da:29:23:81:e9:36:b4:7a:5d:02:c8:ed:ee:57:0f:20:8a:
d5:e0:36:8c:eb:82:1f:2e:25:a4:56:f4:dc:b5:8e:e4:dd:f6:
09:49:5c:ad:d1:6d:e5:b8:03:54:f2:ca:b9:b4:1c:81:29:05:
c3:a0:9c:f1:59:cf:26:bc:ac:dd:fb:18:23:51:1f:16:1d:7f:
b1:f9:02:a6:1e:8e:b4:f1:9e:18:f6:c3:75:5b:d3:85:30:5d:
35:17:8b:6d:5c:5d:fc:df:f8:2e:d1:8b:4d:77:18:7a:a0:e7:
fe:f2:e9:4b:24:0f:3b:bf:fe:d2:b0:3e:71:c0:6a:1b:71:f9:
9e:37:9e:35:0c:86:b3:27:23:1c:8e:99:02:12:51:cc:b5:61:
10:a7:74:4c:ab:7e:bd:7a:3e:fb:7d:0b:73:5d:9b:44:e8:3f:
7c:a0:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:26:18 2026 by rpki-client