Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: Ad3VghKCXLsVW3hI2JkUNbU3dMrW/vY1EuDNfFxq2pw=
Subject key identifier: CE:29:92:22:90:51:61:5A:90:B5:93:61:8B:87:CE:27:4A:43:61:71
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 019CE47ED03719861225BA75FE9F4D458912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 08CA
Signing time: Fri 13 Mar 2026 00:00:41 +0000
Manifest this update: Fri 13 Mar 2026 00:00:41 +0000
Manifest next update: Sat 14 Mar 2026 00:00:41 +0000
Files and hashes: 1: 1FYfIdL8zbkSOUaiU4Dqwqal0zE.roa (hash: /XeBvwgyOqHyg56chvGRDFMd+7ExlJpVYmiAYZyhDGM=)
2: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: onynHG9GnEDH8fGajy1HINSWtYHbF0/1YYZdhRDPkOo=)
3: cgkSjyInxeBAfsrMtADKQej1dQA.roa (hash: NJBBWIxm8P9FWZLPw5DFC5dmcCI2sjb8UDnkU7sydo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:d0:37:19:86:12:25:ba:75:fe:9f:4d:45:89:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Mar 13 00:00:41 2026 GMT
Not After : Mar 14 00:00:41 2026 GMT
Subject: CN=ce2992229051615a90b593618b87ce274a436171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:48:0b:d6:89:5f:1b:44:d1:94:98:1e:49:da:
8a:b9:9e:e3:ee:c9:c7:4d:61:df:7d:c3:82:16:ff:
fc:95:1e:c2:c7:e9:38:0a:4a:39:f7:98:da:1a:d8:
07:4a:1a:60:fe:88:e1:47:bf:48:fe:98:bf:df:17:
aa:0d:61:66:07:b3:d0:ba:49:b6:b0:35:5b:89:a5:
e9:c5:d4:59:d7:ad:e1:02:1d:f4:71:f5:8d:a9:17:
99:65:95:da:42:b2:72:f2:1d:da:8e:7c:29:01:ac:
6d:de:a3:1d:c8:dd:25:1f:27:13:95:0f:b3:c6:3f:
91:55:eb:7e:b9:d1:e8:81:df:46:49:ba:10:83:c5:
65:4e:fc:e1:c0:1b:48:f0:23:b7:1b:14:06:09:3a:
d5:cf:47:4f:b0:d4:02:7f:fb:a1:3f:e5:76:0a:9d:
d9:de:12:e5:e0:8a:bd:b5:f4:76:19:62:4a:2d:01:
41:7e:d1:d6:5a:c9:0e:ec:8b:b8:68:60:dc:d8:43:
e5:00:12:90:75:42:fc:15:7e:ef:92:d9:11:76:e2:
ec:f9:1f:00:b8:8e:0a:46:fa:c7:1b:50:3e:fc:19:
ec:61:28:b7:19:fd:71:ee:fd:97:7a:54:35:e7:9b:
a3:88:f3:fa:91:cf:61:c9:bf:fd:68:e4:2b:7c:67:
87:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:29:92:22:90:51:61:5A:90:B5:93:61:8B:87:CE:27:4A:43:61:71
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:b6:d1:2b:c6:d6:f7:cb:d4:44:bc:53:1d:66:43:7c:ce:08:
4a:19:51:b7:1e:ac:87:35:b7:bc:f8:95:26:69:4b:d1:11:44:
7f:f6:43:db:ff:44:5a:ce:08:49:26:10:f2:6f:52:c4:b7:2f:
a2:b1:29:7c:8b:b9:9f:b8:97:27:48:03:3e:d2:dc:6e:a0:e4:
e1:aa:cf:05:ec:aa:bc:d3:ec:6f:1d:36:89:db:46:fd:cf:ea:
45:da:24:51:f1:b6:31:db:f6:68:8c:61:ed:4b:1f:83:d7:c7:
f5:94:a4:3f:4c:6b:20:5b:12:df:06:6f:60:65:df:f1:22:fa:
32:b5:d7:61:39:4c:6f:53:68:8e:61:3f:ce:25:bb:da:9c:c6:
6c:d0:e4:3a:04:61:6e:01:17:8d:c3:6a:33:20:84:df:74:e3:
1e:02:42:4e:eb:c3:a8:14:a7:20:dc:44:47:ed:d2:40:01:d3:
c7:08:19:55:d9:2d:dc:ba:ae:20:96:5e:da:52:4e:d4:b5:90:
ad:3b:da:fd:f3:59:85:84:6b:3e:32:5b:8a:fd:0b:38:8f:d7:
4c:47:b7:9b:d1:2a:29:19:df:cb:2d:a3:0b:a8:2d:9e:38:d5:
2f:a0:57:f8:64:47:fe:5a:52:39:94:04:a8:0b:96:4e:d0:fd:
11:92:92:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 09:28:37 2026 by rpki-client