Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
File: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json)
Hash identifier: qwQgbff84I2ZNEr0RAJj9uVKHZfC5bFgb5W7BTeXSp4=
Subject key identifier: F6:45:BD:C6:EA:C2:1F:0A:17:CE:CD:B1:1E:36:EC:EF:A6:C4:33:0D
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial: 019CC7503B5A0230BBB6E0943BF9DB5DAEE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
Manifest number: 0E9D
Signing time: Sat 07 Mar 2026 08:00:49 +0000
Manifest this update: Sat 07 Mar 2026 08:00:49 +0000
Manifest next update: Sun 08 Mar 2026 08:00:49 +0000
Files and hashes: 1: 0gBlJTwbURvMna08HGkpbxF3GuY.roa (hash: +AHpd/2s8j+dmg3ibj8zF8ms1DXXH4Z/pjBe0gUwZIo=)
2: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: RlaAGdbUfQT8suMjlBlOVVNyYQaSuYSzfL7SjVS0P8A=)
3: olTnJZOeBxSGSHdFIbwThqvRrwM.roa (hash: 7ZVXpb1BUMxPZ9Jc/FGOlyUwvnj11IZVQ1xQChFmpVk=)
4: v41zPODCDOKyhQh2VYGpMRTzGHg.roa (hash: 9WUhwKCjU+8D4DCY2CpCRa3hsSY6UWz+kGJAJ8Vl43I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c7:50:3b:5a:02:30:bb:b6:e0:94:3b:f9:db:5d:ae:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Validity
Not Before: Mar 7 08:00:49 2026 GMT
Not After : Mar 8 08:00:49 2026 GMT
Subject: CN=f645bdc6eac21f0a17cecdb11e36ecefa6c4330d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:20:6e:31:d6:9e:78:c9:b8:b3:25:5a:74:2f:
f3:8d:20:2d:3c:b0:65:49:61:28:b2:fd:30:82:a3:
5e:06:f9:4a:3b:ac:e5:67:2f:80:a0:4c:87:6d:1d:
a1:59:91:a2:63:e4:9f:e9:0c:36:96:2b:41:42:a2:
19:2a:08:18:fe:0b:eb:71:26:6e:13:e5:c3:81:d3:
75:80:83:50:14:6d:9a:ab:3a:cc:a2:16:7a:a0:ee:
c3:0c:d0:3f:0e:09:0e:9c:56:a3:73:74:d2:36:a7:
eb:36:ce:5f:e6:85:21:72:c0:93:c2:57:95:8e:81:
98:3b:c0:a3:a0:c2:fe:97:68:8e:57:16:62:4f:95:
44:05:63:74:8a:6b:c0:a5:5e:0d:89:6a:f2:6b:57:
41:e1:fc:2d:3b:b8:67:75:5b:7c:6a:95:fc:ce:d6:
ff:ba:1e:ba:56:a7:46:00:20:e0:63:f7:76:5c:02:
77:b0:47:17:d6:95:0c:36:f5:e8:24:00:ed:8b:ed:
fc:ab:a8:31:0c:64:13:4f:a0:03:71:4f:6e:c4:20:
5d:35:a4:f7:36:42:5c:c5:7d:9b:2a:ca:c8:77:a2:
21:90:4e:95:3f:f8:95:67:ea:45:28:cb:7b:86:96:
fb:85:72:2f:df:49:a4:8a:ab:12:8e:65:1b:cc:41:
9c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:45:BD:C6:EA:C2:1F:0A:17:CE:CD:B1:1E:36:EC:EF:A6:C4:33:0D
X509v3 Authority Key Identifier:
keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:e9:6b:57:e5:0d:45:8a:9c:c3:9d:e0:70:cc:be:85:c3:20:
ff:05:2d:4f:cc:8e:3b:81:a4:f2:c4:be:66:df:1a:04:8a:61:
6b:5f:1d:b8:b7:47:14:a0:88:38:9c:06:ca:92:a0:51:20:e2:
52:66:57:5c:22:05:bd:a9:89:27:78:ce:ae:57:36:d2:f4:8d:
ca:b6:1a:54:56:79:42:ed:e4:c4:fc:ac:8b:f5:e8:6d:c2:f1:
c1:dd:b8:eb:81:1b:ef:23:19:eb:e2:49:de:77:97:47:60:38:
36:76:e7:87:ed:8b:14:52:bc:e5:bc:e0:2a:ce:c6:f4:d5:a1:
1d:41:a1:b0:03:fa:34:13:5f:a7:93:6a:77:fc:75:14:74:9f:
f4:7c:46:be:81:b3:64:f4:e7:2e:88:d2:cf:bd:9e:8f:51:07:
bf:04:65:89:26:e6:6d:af:55:53:ed:66:ee:f1:c2:9c:61:fa:
2d:83:46:c9:42:e7:fb:5c:02:41:4d:4f:e7:be:36:f7:53:11:
ff:01:6f:28:02:87:7d:81:bc:8d:21:d9:3b:82:ce:ae:d7:04:
15:93:e7:30:27:a2:ea:83:c6:f9:d0:11:b2:bc:b3:cb:62:c4:
5f:9a:d3:da:74:a9:18:39:d1:58:b0:d7:f1:62:61:29:13:2a:
39:9a:6d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:55:34 2026 by rpki-client