Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier: YJ50piiri3rJhY+nFdEUzQCAyhnVoo1lQF5/sr5fOi8=
Subject key identifier: FA:74:78:63:9E:4F:9E:21:F7:5A:5F:96:B5:AB:39:D2:96:5A:B7:8E
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 019D39AECAD482C4CB2B890BD6ECECB51F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 13:00:49 +0000
Manifest this update: Sun 29 Mar 2026 13:00:49 +0000
Manifest next update: Mon 30 Mar 2026 13:00:49 +0000
Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: gYS5Y1HhbxO3+i17t95qrMdw1NPacz2AolWc9fwkoHA=)
2: PpggW4Z2oygN7a5ac0zakE7Pnfo.roa (hash: 22hm4c5Osenfb32qhznGQLzeTvo39sm+f1ynIhOO3B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:ca:d4:82:c4:cb:2b:89:0b:d6:ec:ec:b5:1f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Mar 29 13:00:49 2026 GMT
Not After : Mar 30 13:00:49 2026 GMT
Subject: CN=fa7478639e4f9e21f75a5f96b5ab39d2965ab78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6e:94:fd:48:ec:7c:0e:45:13:51:64:d3:fa:
40:e5:4f:1c:e2:06:9e:78:9b:df:0c:83:7b:ad:f6:
79:ec:b0:9a:73:05:5b:27:4c:ac:f2:e7:f0:f9:ce:
2b:55:20:84:c8:6b:54:ae:9e:f1:01:e3:64:09:5a:
76:cd:fe:c6:ff:fb:1c:6f:dc:c6:5a:ea:d1:22:a0:
7d:50:17:a0:ef:72:a7:ad:23:af:66:14:ce:c7:8b:
54:0f:1a:f1:30:76:a8:e6:3a:0d:c3:24:4c:76:a0:
dd:c7:0b:26:f9:b6:54:9c:f1:03:49:c0:55:91:1d:
aa:4e:83:e8:ff:54:f0:b4:7c:44:3e:c0:9b:aa:dc:
b6:2a:ee:ef:d8:f1:3e:92:b8:05:72:c5:e1:37:34:
6e:95:ad:03:90:27:94:c6:b5:40:4f:26:f6:c0:d6:
39:a5:fe:50:ca:d8:ab:d6:e0:81:b0:b1:7f:fa:a4:
75:d1:5e:d2:41:d0:f6:be:78:7c:f1:bd:4a:24:4a:
2c:b0:2e:cf:f0:ec:30:95:b2:5a:d9:ab:e4:a1:42:
35:30:f1:b0:f4:ea:6b:59:19:3e:5d:cc:7d:f4:f3:
86:47:d6:bc:64:10:09:3a:0e:e9:6e:3c:ae:34:16:
70:f6:0b:e2:43:f8:91:de:02:8f:5d:c4:87:4f:e9:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:74:78:63:9E:4F:9E:21:F7:5A:5F:96:B5:AB:39:D2:96:5A:B7:8E
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:cd:81:4c:58:04:f4:a6:b9:29:a7:c0:de:90:c5:4f:ac:57:
4b:9e:03:5c:bb:a3:ca:1a:7d:79:b9:49:37:28:9e:19:c5:8a:
21:4f:1b:84:31:3c:a3:14:44:14:f9:95:69:d0:35:db:0a:eb:
71:c1:76:99:1e:98:9e:ca:c4:54:e8:55:03:60:c6:e1:61:c8:
72:ee:18:0d:af:01:3b:23:85:31:7a:e2:fa:1d:9a:20:6c:b9:
d2:0f:c2:c3:c5:11:18:02:6d:e1:db:f0:79:5a:4d:51:94:42:
3b:54:95:84:da:6d:dc:44:9c:8b:fa:5c:fd:e3:48:08:70:08:
b8:7a:e8:50:69:44:04:75:6e:7d:a7:68:32:c6:06:eb:d8:49:
41:77:bd:0e:2a:b6:25:a0:7f:e1:88:b0:68:d5:52:39:5e:63:
93:8b:29:70:f7:81:d9:4f:69:78:af:50:ec:f6:b4:88:d5:49:
39:f5:5d:a7:25:66:0a:ce:a2:9f:0e:cf:83:76:ef:8f:45:73:
c3:45:ef:41:18:94:e1:43:7a:6c:b4:e4:67:de:b1:7a:6f:24:
f0:03:46:14:de:c1:59:95:6f:50:9f:ee:f8:e2:5a:e7:b2:8d:
4b:b2:ec:1c:05:9a:06:a9:2e:1a:16:bb:24:cc:3d:7f:83:cb:
42:1f:cf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 21:09:56 2026 by rpki-client