Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
File: 4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json)
Hash identifier: JPq1ltaFAgII87qGE9J3YOaV+BH2z8oan2Jd6zO1wAI=
Subject key identifier: 1B:D8:7C:D4:C1:DA:DA:B4:A1:61:D3:A5:DB:00:C7:F5:AA:73:1C:72
Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
Certificate issuer: /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Certificate serial: 019D38D3342064EC7F25E104BCEDE3BB28F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
Manifest number: 0B05
Signing time: Sun 29 Mar 2026 09:00:58 +0000
Manifest this update: Sun 29 Mar 2026 09:00:58 +0000
Manifest next update: Mon 30 Mar 2026 09:00:58 +0000
Files and hashes: 1: 1-8kJiWXbzYyQn9Z_qYA1FhOH3SQ.roa (hash: sbcGPB93z3YNWrVB4YHHakteB4jeVAtpbXTGFYuXZTU=)
2: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: ynrnX+h5Zf8tWpohe3LYqgDKMsLrzm0CqT6Giezh+0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:34:20:64:ec:7f:25:e1:04:bc:ed:e3:bb:28:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Validity
Not Before: Mar 29 09:00:58 2026 GMT
Not After : Mar 30 09:00:58 2026 GMT
Subject: CN=1bd87cd4c1dadab4a161d3a5db00c7f5aa731c72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:5e:66:cc:2b:2a:c7:5d:6a:cf:25:0a:49:
ea:7d:ca:a2:2c:f2:54:9b:b8:e9:c7:ed:76:77:2e:
b6:d1:27:b2:a1:39:1b:18:de:a1:e2:88:7a:a1:57:
f3:d0:b1:14:21:16:a1:23:d1:06:d8:af:4c:b5:67:
08:c8:45:d3:bd:5f:18:71:5e:67:21:c0:ca:1f:7a:
4f:f5:93:55:c6:ca:2f:14:96:1e:ca:50:6c:ca:e8:
b8:de:1d:ac:c3:16:76:3a:7e:b7:62:d8:19:0f:63:
8d:26:91:39:eb:68:8f:15:f3:50:77:d6:f4:15:04:
f1:f4:92:5b:91:e2:e7:3f:9c:07:29:f7:fe:79:b5:
50:64:20:62:56:77:14:c2:32:be:0f:e0:e5:f0:05:
48:09:2e:13:d6:ca:60:61:25:48:5f:95:da:f3:7a:
f9:fa:3e:e1:5b:de:4d:67:55:61:f2:12:96:13:ab:
b4:41:98:2b:58:4b:4c:61:c3:da:58:f7:6d:7c:79:
15:e0:bf:a1:85:48:ba:69:ec:db:cf:48:0d:28:34:
a3:fe:18:09:7b:3d:b7:03:72:9c:e8:eb:a3:0b:4c:
1c:22:e2:2d:67:1c:36:19:43:89:95:dc:ce:8d:0e:
97:bc:97:7d:02:7b:99:78:e5:18:9a:f1:a4:eb:c5:
89:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D8:7C:D4:C1:DA:DA:B4:A1:61:D3:A5:DB:00:C7:F5:AA:73:1C:72
X509v3 Authority Key Identifier:
keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4b:64:04:4d:0c:3b:fe:02:86:93:fe:40:3c:29:5a:0e:a3:
24:bd:18:b7:5f:45:a1:9d:64:6d:7d:54:02:05:92:b7:71:7b:
16:a3:7e:d4:aa:0e:79:8f:0f:2a:5e:0a:6f:54:19:cf:d8:9a:
db:8d:98:5b:b8:4e:59:fe:24:3c:18:b6:bf:a7:6e:d4:42:7a:
d9:dc:dd:02:ad:37:c0:f9:ba:d8:f9:cd:a8:98:7b:33:fa:2e:
b6:ff:e1:2d:6d:7b:3f:c6:a1:af:65:f4:97:d4:a5:e3:fb:a7:
9d:5d:ce:03:e2:a0:69:8c:d8:e4:77:83:ff:88:87:20:d5:b1:
1d:1d:4f:66:e1:90:cb:58:5e:a3:c3:8e:4e:f8:33:94:e5:d7:
03:6b:e6:17:05:81:9d:68:32:2e:a1:da:02:6e:70:5a:94:3a:
a5:9b:d2:cf:55:31:ee:e8:26:0b:aa:a9:06:db:f9:21:ff:50:
2d:8f:9f:8c:1c:87:6b:fe:e5:59:df:31:d0:ae:23:31:fd:2c:
bd:d7:f8:ad:46:ea:9a:d5:e7:05:25:5a:74:4f:10:12:7a:01:
79:31:6c:52:b8:1e:89:0d:fd:14:ff:0d:c9:aa:38:4b:be:67:
db:c8:f2:e8:69:cd:74:44:b5:7e:16:a0:42:be:a5:74:b2:2f:
52:85:c0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:48 2026 by rpki-client