Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
File: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft (raw, json)
Hash identifier: lv21jzU22buPJ6qR2927F5YGiKHiw3B7SJ0bC9tSEZM=
Subject key identifier: E8:B4:7E:EF:13:1C:F5:A4:C3:D3:70:8D:55:2B:BA:8D:B7:F6:93:92
Authority key identifier: E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
Certificate issuer: /CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Certificate serial: 019D38D2F0788FCE48C47CC2412C3D8F7869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
Manifest number: 0170
Signing time: Sun 29 Mar 2026 09:00:41 +0000
Manifest this update: Sun 29 Mar 2026 09:00:41 +0000
Manifest next update: Mon 30 Mar 2026 09:00:41 +0000
Files and hashes: 1: 4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl (hash: C/LncrkOr35c8+aJe7JPaVNA1hNmTr8jBHsgZ4HClI0=)
2: Ktt8ktJBB9tg2gRD-ixp-YhTibU.roa (hash: HW7h2XnvN7F3euJL4sahv9OWYDM7sKHWz8LB9hcLvk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:f0:78:8f:ce:48:c4:7c:c2:41:2c:3d:8f:78:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d15e36cdb388276f04a606b02266260e2a19f8
Validity
Not Before: Mar 29 09:00:41 2026 GMT
Not After : Mar 30 09:00:41 2026 GMT
Subject: CN=e8b47eef131cf5a4c3d3708d552bba8db7f69392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:35:b5:ca:2d:da:d2:db:b3:9d:a2:92:46:8a:
45:95:75:fd:ff:41:b9:be:42:a2:f2:3a:ad:bd:64:
14:03:b1:01:a2:e0:02:12:4a:0e:2a:44:ee:4d:7e:
43:f7:6d:77:65:cb:b1:4b:a5:d6:0f:02:a6:d2:80:
55:df:07:45:94:a0:d4:9d:c1:b1:b4:dc:ae:8e:b1:
cb:2e:16:5c:80:b2:be:f9:05:97:15:bd:05:de:6e:
66:18:19:30:93:91:2c:59:c2:78:19:41:18:52:3e:
a4:06:19:04:8f:bf:f5:80:34:81:d0:08:33:8a:8c:
6a:86:c4:49:78:94:46:9e:f5:31:da:7e:2d:8f:73:
97:02:fa:30:93:cd:bf:3b:33:5f:9a:b8:b6:9c:04:
47:06:7c:97:8d:84:c4:13:6d:64:40:a8:fe:6a:c1:
50:73:fd:29:3b:d7:c1:49:d6:b3:41:9e:e8:29:70:
d7:ec:7d:0a:f8:8a:e6:98:11:88:c7:36:33:a7:99:
96:43:4d:0e:27:a2:be:f5:7a:5a:b5:ea:6c:a9:39:
f5:0b:a0:d8:f2:c8:c8:09:fc:c6:79:37:58:e4:41:
1d:75:bd:1c:1e:5f:02:19:04:7a:4f:d6:8d:09:c7:
5d:00:ff:46:15:13:27:92:42:75:37:8c:e6:eb:bb:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B4:7E:EF:13:1C:F5:A4:C3:D3:70:8D:55:2B:BA:8D:B7:F6:93:92
X509v3 Authority Key Identifier:
keyid:E1:D1:5E:36:CD:B3:88:27:6F:04:A6:06:B0:22:66:26:0E:2A:19:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dFeNs2ziCdvBKYGsCJmJg4qGfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/725635-41fe-40d5-81ac-23442a14a5f7/1/4dFeNs2ziCdvBKYGsCJmJg4qGfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cd:6a:d4:88:27:9e:52:0e:ef:5e:eb:fe:86:f3:ee:e4:c4:
03:30:65:5d:e7:bd:69:d5:a4:40:11:ee:bf:5d:f4:c5:fd:e7:
97:65:77:71:4a:bc:e6:fa:ee:41:32:b4:dc:05:e6:23:7e:d9:
0f:05:2c:88:58:11:5e:a1:63:06:03:25:d6:02:be:1e:d6:30:
67:50:b0:3a:56:2d:e0:a2:94:4d:56:30:f7:b0:59:22:f8:1e:
26:3a:98:60:41:c6:70:57:63:04:6a:3a:0f:36:96:63:32:87:
94:58:0e:f9:39:a5:80:f3:a4:b5:cd:13:d0:d7:07:44:cd:74:
6b:20:38:e3:9c:38:04:71:1c:c8:34:04:23:59:2e:52:bc:2c:
3a:d5:a9:18:01:a3:fe:8b:da:44:af:88:32:c2:9d:78:f5:45:
c4:49:c8:96:c7:23:9b:47:cb:b2:09:54:fa:1f:0a:6f:89:25:
57:0e:a8:fc:c9:91:ff:9a:b6:fd:7b:41:f9:c4:16:7f:95:3b:
9c:cc:4e:c6:54:6b:86:fd:d2:0f:ba:02:3d:89:7f:7b:8f:3c:
c8:82:fe:7e:d0:e0:86:c4:d3:56:54:cf:99:a7:46:d3:61:c2:
e6:13:f0:00:e2:0e:05:66:01:96:0c:57:ed:7d:92:dc:cd:80:
37:cf:80:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:16 2026 by rpki-client