Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
File: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft (raw, json)
Hash identifier: SG+yUl0aVS+2ACGWP6x/5xxqNXXRzN4bzWfIrlDtxko=
Subject key identifier: 99:BB:FB:1E:35:09:E3:27:78:88:87:48:A9:31:62:D8:35:3F:17:51
Authority key identifier: E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
Certificate issuer: /CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Certificate serial: 019D39AE4D8B62F85EFFDF33CE0A2BD08E83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 13:00:17 +0000
Manifest this update: Sun 29 Mar 2026 13:00:17 +0000
Manifest next update: Mon 30 Mar 2026 13:00:17 +0000
Files and hashes: 1: 4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl (hash: vIZS+seh5bFpZjOS4Yfun61lYRHfADiGRUdK084XMDY=)
2: limcXQL5irLoJkXVtLb_HxKT9Cc.roa (hash: aQ8BkEO1FUkjaNo1mk5XdjSymKmGcpWue4kgaoY47rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:4d:8b:62:f8:5e:ff:df:33:ce:0a:2b:d0:8e:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31da2ba057e9a54a6170f257ff97856dc97e068
Validity
Not Before: Mar 29 13:00:17 2026 GMT
Not After : Mar 30 13:00:17 2026 GMT
Subject: CN=99bbfb1e3509e32778888748a93162d8353f1751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ed:40:64:4b:72:9b:9d:b1:68:88:0c:f9:fd:
7e:70:24:8d:1c:ee:02:5f:8f:21:68:c6:81:24:8c:
83:90:82:6d:f3:78:1f:43:9d:fd:2f:2d:0f:41:cc:
39:cb:f7:39:11:33:4f:47:3c:55:c0:62:6e:95:eb:
22:db:44:cf:c1:8b:e0:fb:57:51:89:5c:3c:39:38:
53:ca:d6:d1:be:62:47:73:44:d8:4a:33:6b:c8:ae:
3d:cf:94:9a:9e:dd:e2:c5:a2:fe:b7:5a:fd:81:38:
d4:a2:44:a3:c4:8a:a3:32:ea:10:bf:bb:7a:cc:e2:
82:c1:c5:b0:02:24:1f:20:f4:59:ea:a5:ae:71:a3:
48:b7:19:41:fa:56:da:ae:81:fc:ab:a6:24:b4:b5:
90:8a:50:d2:28:6e:f5:8c:9c:c4:9c:a1:15:72:43:
c1:d5:1c:42:eb:a4:90:ab:4e:12:78:41:93:64:59:
37:37:27:34:98:8f:68:ed:03:9d:2f:76:a1:40:27:
3b:54:76:92:a3:7f:77:e9:ff:04:0a:8d:00:96:4e:
b3:12:71:cc:1c:d7:28:68:64:8c:0d:9a:4a:4a:1a:
84:94:81:86:de:8b:e1:5d:35:c2:cc:b5:21:1d:3f:
f4:9d:c7:f2:0f:b2:ec:8d:8b:23:d7:b1:01:8a:dd:
a4:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BB:FB:1E:35:09:E3:27:78:88:87:48:A9:31:62:D8:35:3F:17:51
X509v3 Authority Key Identifier:
keyid:E3:1D:A2:BA:05:7E:9A:54:A6:17:0F:25:7F:F9:78:56:DC:97:E0:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x2iugV-mlSmFw8lf_l4VtyX4Gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69a209-fa57-43f0-bbc2-7507e819a795/1/4x2iugV-mlSmFw8lf_l4VtyX4Gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:6f:4f:23:f7:e9:56:0e:d2:9d:a5:44:e4:04:a7:69:a9:8f:
c5:79:6f:90:35:a5:a5:3f:94:88:06:c6:3f:0d:ee:49:18:ea:
78:96:f6:74:ed:b3:9c:79:41:d5:e8:e5:9a:29:bd:d2:0a:30:
ca:d8:2d:2d:c9:20:16:83:aa:ac:e0:56:18:33:e9:83:2f:ca:
ce:4c:f3:7a:75:1e:87:82:0d:c0:da:c4:f2:ac:7f:d2:1f:03:
b6:ff:6d:42:78:fa:69:17:1c:0c:ee:f9:12:ec:03:73:d8:05:
60:04:7b:bf:d1:c6:bd:64:42:7a:4f:87:44:45:09:98:f8:33:
52:bd:f1:66:a8:cc:e2:34:57:ed:58:12:8a:f3:d0:4e:25:79:
26:d3:07:39:e1:18:59:34:f8:06:4e:e4:65:82:b7:ab:4d:21:
be:09:9e:8b:75:d0:cb:07:f3:f3:a6:b6:4a:69:c4:27:8f:ff:
ef:0b:2e:f5:15:79:aa:6c:d4:69:41:41:22:da:ec:6f:11:9f:
8d:60:fc:35:be:75:c6:b8:c3:70:86:27:bc:a6:00:ee:f9:ea:
94:a6:3d:a5:03:3a:35:1c:13:cf:15:c0:20:d5:2a:b2:20:02:
2e:96:44:d4:53:d1:a1:c8:bf:8d:d2:86:42:8f:71:de:39:ca:
50:01:b0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:26:04 2026 by rpki-client