Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
File: 4bYF1mYOmDMcLiBJgPKldv30lhk.mft (raw, json)
Hash identifier: cDxqxdmIcKYNL7xToVocBTSozCgIbbVSDrbmT26RVXE=
Subject key identifier: D0:74:6F:2C:E5:BF:ED:62:95:3C:D3:98:F9:EB:DA:E2:7A:14:6D:02
Authority key identifier: E1:B6:05:D6:66:0E:98:33:1C:2E:20:49:80:F2:A5:76:FD:F4:96:19
Certificate issuer: /CN=e1b605d6660e98331c2e204980f2a576fdf49619
Certificate serial: 019D38D3A333CB671DAF19F8F6ED4BB823F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bYF1mYOmDMcLiBJgPKldv30lhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
Manifest number: 30
Signing time: Sun 29 Mar 2026 09:01:27 +0000
Manifest this update: Sun 29 Mar 2026 09:01:27 +0000
Manifest next update: Mon 30 Mar 2026 09:01:27 +0000
Files and hashes: 1: 4bYF1mYOmDMcLiBJgPKldv30lhk.crl (hash: pP6rY/ti3owg4ldTq+bPN3ci20m2R4sDcVL9JyJNRlA=)
2: 5kAvBd30hpJ31v7a5btR1f3C5_c.roa (hash: z1wDX3ExFB1UHqUZVdNED873b9M0TIqJFILLETY+deY=)
3: J4mXmms4TiP28PN9LBCVFRM01HA.roa (hash: VUMEpxKdTm7c58+fUJJlRr+8yRrKuCjq0GD1rQWYd3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bYF1mYOmDMcLiBJgPKldv30lhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a3:33:cb:67:1d:af:19:f8:f6:ed:4b:b8:23:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b605d6660e98331c2e204980f2a576fdf49619
Validity
Not Before: Mar 29 09:01:27 2026 GMT
Not After : Mar 30 09:01:27 2026 GMT
Subject: CN=d0746f2ce5bfed62953cd398f9ebdae27a146d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:00:d4:b0:b4:64:eb:84:97:15:4d:6c:06:84:
cd:b2:14:a3:34:28:09:c2:18:61:13:4e:15:d8:e6:
e4:ac:c6:f0:02:e0:e5:8a:6d:55:b3:68:a0:2b:96:
03:12:ed:79:bb:14:26:bd:79:4b:47:18:f8:b5:55:
46:0c:6e:68:95:7a:8d:dd:56:23:f2:a4:89:dd:dd:
a3:45:2d:d6:cd:7c:9b:8a:26:ac:e9:cb:b3:36:ad:
26:05:d0:a3:d1:0e:dc:c2:f1:f7:53:50:35:d5:c8:
60:fe:fa:2f:df:65:ae:6d:63:9d:eb:89:b9:11:1b:
0a:c7:11:2a:64:80:ac:a5:57:79:0a:b1:ce:27:e7:
b2:78:f0:7b:64:d9:09:14:25:9d:a7:49:f0:e5:74:
53:ce:1f:e0:19:69:5c:72:5f:00:a4:4a:69:3b:97:
b8:bf:cd:9b:1c:60:bc:5f:9c:d5:c8:29:6d:2d:35:
de:bd:3a:dd:3b:08:80:81:c4:fa:09:44:fc:11:86:
2a:d7:2d:86:b7:7d:33:10:f6:6c:b7:7c:35:4f:a0:
dc:e8:42:78:af:0d:f5:80:38:7b:21:6b:80:32:27:
d9:74:60:42:ee:79:f6:9a:dd:ec:f6:2a:fe:92:73:
fc:22:7d:e3:d1:35:a9:4b:83:d3:78:b4:d8:cf:f4:
37:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:74:6F:2C:E5:BF:ED:62:95:3C:D3:98:F9:EB:DA:E2:7A:14:6D:02
X509v3 Authority Key Identifier:
keyid:E1:B6:05:D6:66:0E:98:33:1C:2E:20:49:80:F2:A5:76:FD:F4:96:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bYF1mYOmDMcLiBJgPKldv30lhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b809c4-4b54-4e39-98bd-64a992205f51/1/4bYF1mYOmDMcLiBJgPKldv30lhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e0:6c:e9:76:43:40:22:d2:4a:b4:40:a7:56:3c:35:2f:96:
7c:9d:58:98:96:c9:f6:13:ec:97:b7:63:d9:08:15:85:c3:0d:
db:af:0d:eb:76:63:b4:f1:c7:b3:7c:d4:06:71:53:5c:76:91:
4f:7f:b1:03:ec:3f:74:7e:f1:b5:76:33:85:98:e0:f9:9a:0e:
e1:db:be:08:d7:5d:ff:cc:45:0d:e4:7b:ca:74:85:23:61:e4:
9d:b6:97:48:5f:a6:60:34:2d:04:f6:66:82:84:a0:8d:6a:87:
11:b4:3c:02:6d:ea:c5:f1:23:d6:f1:6e:cf:24:86:e5:5f:ce:
dd:6f:50:6f:2e:aa:4c:98:dc:56:63:e1:eb:eb:b9:df:ed:a8:
c6:85:cc:b6:2e:71:9d:62:0d:09:8c:21:48:da:cc:f3:75:49:
82:ea:6c:63:ff:f1:9d:6e:51:b0:16:0f:92:7f:b5:90:3f:56:
62:5a:08:93:92:48:fb:fe:cb:1b:0e:64:be:33:2f:f8:47:d0:
92:9a:de:3c:08:85:d9:49:12:e4:f0:17:69:9b:2e:1d:fd:43:
0f:26:b4:c6:78:eb:99:c1:25:e5:68:84:a9:c7:ea:14:fa:cf:
2d:c6:71:bd:f4:d9:27:e2:97:a5:11:4d:f6:43:80:8e:10:a1:
1f:ab:9e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:27:40 2026 by rpki-client