Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier: I63zWLFcYCI9jHVpDLi7CstXqBh5VdDrsfnkJkqemCQ=
Subject key identifier: ED:55:12:05:DC:58:63:4C:F5:DB:8D:80:39:83:1E:A2:47:5A:45:3A
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 019D382E2B9F51B787348DF8F6B5BE786B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number: 14C8
Signing time: Sun 29 Mar 2026 06:00:43 +0000
Manifest this update: Sun 29 Mar 2026 06:00:43 +0000
Manifest next update: Mon 30 Mar 2026 06:00:43 +0000
Files and hashes: 1: 3Kqw9tljPQG5d-js0HaYveBuk-4.roa (hash: D1nlz+BjAzn+Pt0loadLXbRjBXPaaFlVhaNwxEkZAGY=)
2: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: QoLDpJIHBYb/jwi7iqkOsoWSp5w9Y1wsYpg9CrJgpkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:2b:9f:51:b7:87:34:8d:f8:f6:b5:be:78:6b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: Mar 29 06:00:43 2026 GMT
Not After : Mar 30 06:00:43 2026 GMT
Subject: CN=ed551205dc58634cf5db8d8039831ea2475a453a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:04:75:57:6c:f7:17:c3:f2:74:41:ce:a0:
9d:39:e9:5c:23:5f:a7:6e:4e:5d:ed:c0:9d:2a:e0:
15:5e:e0:28:9f:d7:21:38:7a:92:72:95:07:28:82:
1f:0d:8c:4e:c9:fd:cc:5e:e8:5c:84:9a:8d:1c:69:
2d:a6:27:60:bf:a2:94:4a:3e:42:1c:f6:d2:f5:63:
62:70:c4:18:3d:4c:03:df:77:de:15:08:41:99:4b:
97:c6:51:9c:03:af:27:ee:15:25:0c:e5:3c:70:2a:
a2:62:df:9e:d5:5e:d7:23:97:82:68:ec:c9:c8:9c:
57:b4:48:11:d8:47:25:92:32:1a:d1:52:bc:b6:19:
3c:cc:6d:9a:6e:0e:bd:b6:1f:8e:15:29:2d:a7:79:
99:5c:42:62:50:e9:7f:59:91:f0:f0:39:76:c2:0d:
e5:00:d7:2c:76:98:44:ed:95:5c:89:9e:9c:80:1d:
9d:48:f3:51:b8:0c:3b:f8:b1:74:d2:79:e8:cf:9e:
c9:84:3b:92:12:c5:e8:9c:b7:7a:82:25:f0:75:80:
be:f7:52:09:60:39:28:6b:45:4d:fe:c4:34:17:b5:
73:90:74:16:2b:2c:0d:15:09:46:da:06:a5:7b:46:
84:fe:08:49:0c:7f:93:97:f0:ea:52:6a:ad:f5:5e:
57:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:55:12:05:DC:58:63:4C:F5:DB:8D:80:39:83:1E:A2:47:5A:45:3A
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:8d:89:12:be:95:bd:1f:fa:92:e7:b6:33:7c:7b:79:03:b1:
0a:49:02:d6:60:ed:f0:f1:83:bd:bf:fb:c5:33:64:84:21:e6:
5b:32:93:14:3a:a3:9e:ef:f8:11:72:eb:c6:d8:f0:78:e9:15:
a9:44:89:27:93:08:25:33:18:70:d7:fa:53:3f:1a:f6:c7:00:
6b:36:08:3d:88:94:aa:2b:36:a8:58:bb:aa:d0:c7:5a:5b:52:
f1:e7:2c:ba:15:d7:fc:e2:88:6d:0c:ad:92:5f:76:4d:ff:73:
82:c6:a6:ec:50:ab:1e:55:9b:36:3d:b9:b2:92:25:10:97:88:
b9:cd:8a:a0:1f:f1:3e:6b:aa:45:49:b5:75:22:8a:93:ce:d6:
0c:b4:9b:88:05:01:6a:6e:14:38:c2:3a:11:4d:2b:3e:30:f5:
93:08:24:0f:6a:22:cb:a6:5b:4a:e0:2e:32:78:cd:48:be:94:
97:ae:b2:a8:d2:e3:4a:df:62:7a:e4:41:49:19:32:47:38:9a:
1a:f6:c5:7e:89:b5:23:0b:83:ec:b0:cd:62:7c:51:1f:ae:e1:
02:a5:fa:93:8e:1f:ba:d0:15:ab:b6:6c:b5:79:03:23:37:55:
ca:55:af:c9:44:7d:d5:de:9a:8b:90:97:28:18:e5:cb:4e:7b:
18:9b:e3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:37 2026 by rpki-client