Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: jE+jr7DyDOphXbovH5XZ1QS+8hk7fO1bDpZQjPBHs9I=
Subject key identifier: D1:E5:4E:CB:83:BE:C9:91:62:37:D5:CD:8E:58:0B:9F:92:46:94:19
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 019D3A53ADCC8A1AD70D46DDB07F52EAFCE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 075C
Signing time: Sun 29 Mar 2026 16:00:55 +0000
Manifest this update: Sun 29 Mar 2026 16:00:55 +0000
Manifest next update: Mon 30 Mar 2026 16:00:55 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: unlEJMhZQw8B+3yNUtpQFazd48jjlwmMFI/3aAbhl74=)
2: AHfZCvtyXR1N7LVfRri-RiC1E6I.roa (hash: Rc0GVzYrZ//kqYZ3Jv1c6BblzqpktiqTIXdTmceeo7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:53:ad:cc:8a:1a:d7:0d:46:dd:b0:7f:52:ea:fc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: Mar 29 16:00:55 2026 GMT
Not After : Mar 30 16:00:55 2026 GMT
Subject: CN=d1e54ecb83bec9916237d5cd8e580b9f92469419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:90:27:cb:22:34:08:cc:aa:cd:a3:ff:e0:78:
e9:a0:1a:7d:7d:8e:3a:f5:b6:f0:ee:69:a6:2a:54:
70:0f:d7:ce:a6:5b:05:48:1a:6d:98:f9:66:ec:5b:
e6:f9:5c:90:3c:19:78:db:89:27:7e:41:9d:d3:df:
c5:9e:63:95:e5:78:60:e9:2a:f6:b3:92:8e:62:1e:
90:ea:9b:b3:3a:61:81:ad:e0:df:f8:20:3e:9e:95:
89:b7:81:f8:16:3c:a7:03:b7:6a:d4:94:0f:86:ad:
b0:e7:82:37:5c:e0:98:10:0b:ec:5f:90:19:99:2c:
cd:69:d9:58:a6:31:46:72:8f:60:ea:a5:0e:25:ff:
9e:d6:d7:39:1a:88:d0:0e:52:ef:75:79:03:54:88:
7a:c0:0c:7f:6c:f2:27:a6:64:e9:c3:b9:96:a0:47:
66:98:90:29:e7:e9:7a:32:29:4f:38:b0:d4:a5:d8:
c9:2c:8d:87:41:c2:5b:b4:5c:6b:2a:c8:f0:22:20:
c4:65:1f:63:8d:08:d3:c0:ba:b3:71:06:56:e7:be:
c6:ab:a9:13:96:80:a1:7f:40:c5:fe:8f:96:2d:e6:
36:77:86:a5:69:2e:d8:f4:b1:1b:87:85:bd:d4:51:
aa:7a:f6:11:e9:db:7f:6e:23:10:cd:f6:f9:fb:d6:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E5:4E:CB:83:BE:C9:91:62:37:D5:CD:8E:58:0B:9F:92:46:94:19
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:79:85:b7:5b:2d:3d:38:16:31:fd:03:52:81:55:88:dd:db:
43:3d:c7:cb:29:cd:aa:b1:d8:d6:39:14:6e:96:bd:ec:49:0b:
0f:7d:bf:ca:e6:18:a6:2f:65:67:74:c7:e4:cd:f3:ca:cc:e8:
18:4b:69:20:24:ea:24:7c:e4:91:79:a4:08:58:a8:5f:be:3c:
95:14:cb:c9:6f:ec:c5:e8:c5:44:fd:54:49:25:4e:c8:42:83:
53:2e:a3:4e:37:35:68:87:8f:f4:82:f3:ce:75:6b:9a:91:5f:
40:33:0a:d1:46:09:9e:dc:34:52:32:90:8b:30:59:a3:9c:6f:
0a:d6:95:19:a1:b6:e3:d5:1d:a9:aa:6d:1f:58:d9:a7:9a:07:
38:00:d8:23:b0:26:52:59:63:46:5c:c7:f4:db:13:46:7e:bf:
31:06:d0:f7:b6:f1:18:db:a9:c0:48:e5:ca:3d:88:35:73:90:
9b:3a:17:55:9b:4b:60:89:73:97:50:35:01:d2:64:ef:1e:e5:
15:29:96:88:ff:6f:3c:ca:c9:a2:77:41:b2:40:7d:f0:30:93:
6c:c8:be:31:df:a0:22:3a:4a:e0:56:35:f0:e9:ac:4f:96:14:
89:9b:ee:82:f8:a4:f8:5e:82:20:86:42:1d:40:7c:ea:4f:1d:
62:c1:86:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:50:33 2026 by rpki-client