Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
File: 4m4BgY9rbo42iNfzYfdTwSNeDNw.mft (raw, json)
Hash identifier: VFgpRrFjHIYoKA/5jhSX3omlkkZ/aO//7yoPu3eF+1E=
Subject key identifier: BC:9F:C5:A3:49:28:0D:B1:97:23:17:5A:C0:12:45:EB:EF:43:7A:B6
Authority key identifier: E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC
Certificate issuer: /CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
Certificate serial: 019C86830C73D238B74B753B80E28E1FAEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
Manifest number: 22
Signing time: Sun 22 Feb 2026 18:01:01 +0000
Manifest this update: Sun 22 Feb 2026 18:01:01 +0000
Manifest next update: Mon 23 Feb 2026 18:01:01 +0000
Files and hashes: 1: 4m4BgY9rbo42iNfzYfdTwSNeDNw.crl (hash: 4Drkd9G4hc88v4+sYU0ZSXGy2LRDCiP7H+zVqAnj/yM=)
2: 55lgQHjawIWIBPegmtUWO19P1qY.roa (hash: xr29hGNw/G2B+5szsIy5zpkogZqhj2L/lLvicw1+OJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 23 Feb 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:86:83:0c:73:d2:38:b7:4b:75:3b:80:e2:8e:1f:ae:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
Validity
Not Before: Feb 22 18:01:01 2026 GMT
Not After : Feb 23 18:01:01 2026 GMT
Subject: CN=bc9fc5a349280db19723175ac01245ebef437ab6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3d:3d:2f:4b:b8:77:f2:82:f3:1d:53:d5:47:
45:e7:7e:d0:d4:b8:ea:29:b1:88:8e:15:e9:1d:5b:
e2:79:0b:40:83:3c:97:11:7c:65:7f:32:47:b6:70:
96:10:1c:35:cc:7d:fd:d0:f5:b7:05:e5:5b:a9:2e:
d8:ad:65:f1:26:a9:04:37:e6:c6:eb:f2:46:8d:c2:
f9:a9:43:da:b9:31:ed:33:6f:93:01:1f:94:c2:d1:
21:64:35:30:71:e0:8c:b3:83:3a:fd:4f:0c:1e:7c:
df:92:93:bd:ff:a7:94:ec:33:4f:e1:d6:e5:b6:26:
0e:d7:da:9c:6b:2f:cf:df:44:a4:c7:97:6f:c9:ab:
9a:1f:b6:2f:43:92:38:88:59:da:f8:1a:59:3f:93:
5e:2b:97:2a:a8:86:51:d5:d5:98:7d:5a:25:8e:47:
85:02:22:83:26:9c:88:8c:67:db:df:9e:ec:b2:38:
fa:37:2b:eb:c9:f9:1d:b4:c0:82:9f:25:4e:92:85:
3d:fd:d8:fb:f5:10:60:a3:90:58:77:a9:4e:98:f3:
89:b9:26:e3:0c:8c:7f:a9:d4:0a:0b:0d:a2:6e:04:
dc:f4:7b:48:7a:b6:3b:a3:e6:10:d8:24:f6:aa:95:
76:1d:ce:2a:96:21:43:1d:78:57:24:89:78:d1:70:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9F:C5:A3:49:28:0D:B1:97:23:17:5A:C0:12:45:EB:EF:43:7A:B6
X509v3 Authority Key Identifier:
keyid:E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:18:28:6f:ba:4a:6c:5f:b5:54:f0:c7:06:a5:a4:3e:6c:9e:
66:b1:11:21:a1:b8:ac:cd:34:a1:17:b8:c8:d5:9c:57:5c:8c:
90:54:c8:5f:4a:6d:ad:5b:ec:d6:06:c0:04:d0:68:af:c2:48:
a5:00:3d:96:30:3f:01:1e:ab:5e:d7:c7:37:37:d1:46:df:b4:
d0:0b:cf:86:5b:fe:ff:61:bf:49:8e:ce:ff:04:9a:9e:07:81:
c6:98:f4:4f:68:95:a3:a2:d7:e7:13:dc:1b:30:a6:ae:91:a5:
c2:79:9d:92:cc:6a:52:d9:61:90:6a:25:1f:d0:b6:84:4f:35:
18:b6:34:76:d6:e2:54:b5:84:83:f1:00:21:bf:5b:7f:06:f9:
ab:c3:74:98:2a:85:d4:9e:56:95:dc:a9:1d:de:fa:f7:87:0b:
ff:0a:40:c1:06:fb:b2:82:83:93:36:2e:d2:ec:0d:05:40:77:
1d:29:33:08:82:0b:c4:98:08:fd:09:ed:33:e6:3a:6e:52:c6:
db:bd:a0:d8:53:2f:a6:43:64:0b:6c:0f:b5:30:6d:ba:c9:30:
97:35:b5:63:a7:82:c9:fc:f7:4d:1c:d7:e1:93:45:bd:ef:a9:
cf:63:f7:16:e2:5e:ab:73:44:34:37:ce:62:2b:01:af:33:23:
da:96:8e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 23:22:13 2026 by rpki-client