Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: TTPK7EYY46F699by2ng3yEowAJNs5DC4BWEhqLxmpEc=
Subject key identifier: 2D:B4:A5:07:92:41:31:25:F0:6A:E0:BA:0E:79:01:0E:38:8F:C3:3B
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 019D38D3C5A7FE53B8D71A8691C30E959848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 09:01:35 +0000
Manifest this update: Sun 29 Mar 2026 09:01:35 +0000
Manifest next update: Mon 30 Mar 2026 09:01:35 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: 5N3UegV5UGRbtHLDAKKtU0elHDgXv6MPgghudr05Ac4=)
2: CTp1GS2fYaQIruu9tWpwYU6UL5U.roa (hash: 1woVFgn9dNEGbuwWBJn4MG4ChUl6MAOmb6s5dU16yL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:c5:a7:fe:53:b8:d7:1a:86:91:c3:0e:95:98:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Mar 29 09:01:35 2026 GMT
Not After : Mar 30 09:01:35 2026 GMT
Subject: CN=2db4a50792413125f06ae0ba0e79010e388fc33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:bd:9b:03:e9:63:bf:49:40:f3:2e:a5:d7:
8e:8d:c0:f9:5d:2c:c4:f9:7e:df:a1:3e:d8:c8:f3:
d6:f6:ab:28:10:7c:9f:43:17:01:92:77:49:56:c7:
d0:ff:19:54:74:b7:bc:60:d5:5d:34:80:da:74:06:
4a:9b:9b:0c:42:84:56:7d:19:ec:a4:81:2e:99:fc:
a9:8a:4e:2f:f0:e7:75:98:5c:6c:85:d6:e7:5b:e1:
ff:49:ec:d8:a7:96:8b:d1:bb:f3:d4:9d:9f:99:42:
6d:0e:56:0a:20:4b:2b:40:f1:20:e8:c4:36:46:1e:
09:ec:32:08:45:aa:6b:10:7a:e5:dd:16:a1:96:97:
58:03:16:aa:ee:41:8c:ae:8d:19:8e:d3:d1:36:38:
6f:07:13:60:16:fd:c0:63:d9:a1:4e:bb:a2:ea:ad:
60:f6:72:96:ee:ad:6c:13:38:ef:d9:88:64:24:13:
b7:34:7e:14:34:2a:44:06:55:b4:b3:5a:4a:2f:d1:
2e:3f:3e:1f:57:aa:6e:4e:1a:82:57:a3:57:1f:56:
02:24:d5:f2:ba:63:f0:99:08:f9:c6:82:8a:c8:6a:
89:62:61:28:4a:74:93:06:92:f6:d6:1b:1f:d2:23:
82:b6:14:8b:91:89:19:43:d4:71:39:90:c0:6c:dd:
60:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B4:A5:07:92:41:31:25:F0:6A:E0:BA:0E:79:01:0E:38:8F:C3:3B
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:dc:aa:d6:b9:40:42:78:a7:da:22:ec:c4:72:d6:3d:ef:ac:
44:21:05:2b:cb:37:6c:5a:57:fd:1a:01:7d:b8:0e:7c:77:4e:
61:39:a0:36:fa:d1:5e:c7:1e:c1:d4:f3:99:84:04:0b:c2:ba:
37:06:a6:f9:66:35:78:93:c2:06:82:66:9b:19:91:70:99:39:
41:02:fa:c3:5d:52:4c:c4:0a:58:06:e0:13:35:3f:ec:42:ce:
9d:a9:f1:d1:c6:10:bc:b1:f2:51:e4:77:f5:5d:34:4b:1d:1a:
a5:b3:ad:31:34:2a:f6:35:1e:a7:85:84:7a:2c:1a:ae:93:df:
dd:57:f2:31:d3:d8:be:b1:9c:56:e4:96:6e:ea:86:81:88:c4:
0e:83:5d:29:17:a0:17:58:ca:85:80:a6:46:1b:da:d6:28:71:
57:47:2d:ef:21:fb:1f:8a:76:8b:c2:ab:b6:76:b8:cc:82:98:
99:bc:d0:cc:d1:34:f3:5c:46:8e:87:99:3b:27:b2:ce:ba:76:
9b:b5:13:ce:1f:17:6a:d0:3a:e1:a7:a1:88:2c:1a:51:4f:cf:
78:74:fd:fa:4b:e1:1b:7a:55:45:42:1d:cb:ad:d4:3c:66:73:
b0:f5:cf:18:c2:2d:35:e2:a6:b5:f6:0a:ee:68:10:e8:b3:0b:
32:4a:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:09 2026 by rpki-client