Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: MQMiWAPVXkW/k9vUb42UnAvWhg8X1hfILoGE7Xec2J0=
Subject key identifier: 87:7B:A2:D1:DB:E9:C7:E6:C8:61:0B:42:F8:BE:37:65:29:4D:9D:00
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 019D3752100EFCFA591CCF2E7C7C9DEC2084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0E82
Signing time: Sun 29 Mar 2026 02:00:18 +0000
Manifest this update: Sun 29 Mar 2026 02:00:18 +0000
Manifest next update: Mon 30 Mar 2026 02:00:18 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: pFWFi4EGsd/kKTyNF4QH//wBR3rdpds09GF+BBOCB54=)
2: k6jNcpaTNPSlXj617Gg3gS62Bto.roa (hash: 8LQYJjtnAC4ChUuR0xJhVpC5xdVYrcixNySIFaow6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:10:0e:fc:fa:59:1c:cf:2e:7c:7c:9d:ec:20:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Mar 29 02:00:18 2026 GMT
Not After : Mar 30 02:00:18 2026 GMT
Subject: CN=877ba2d1dbe9c7e6c8610b42f8be3765294d9d00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:62:58:dc:be:c2:41:b9:a8:76:d1:e2:84:9c:
5a:b3:ae:4d:07:5d:c9:70:59:ab:d0:0e:c0:f7:aa:
be:5b:fd:ab:1d:69:d8:45:e9:fb:3b:cc:29:62:8c:
db:66:26:f2:1f:80:fe:bf:88:e2:5b:23:95:c0:5c:
26:d3:b4:4a:cb:7d:2a:0b:ae:62:2e:9f:67:2e:37:
a0:6b:4b:03:36:31:fa:34:83:bd:17:11:11:30:05:
78:88:ff:f7:a4:ac:2e:12:28:5a:01:3c:32:c1:ce:
e6:dc:32:56:d8:27:af:88:a7:18:7a:cd:57:22:1a:
60:36:77:a6:4f:8b:de:1e:f5:1f:28:4f:74:36:85:
a9:89:51:4e:70:14:89:62:02:2b:74:a7:37:24:a0:
36:8a:9a:9b:45:78:a3:e0:81:9c:75:e8:2b:87:3c:
c0:4f:e7:6c:16:8b:19:d3:07:9d:93:2b:f2:47:f7:
dc:54:0e:95:f7:89:ef:fc:f7:83:94:d7:15:3d:7d:
1c:17:73:99:86:cb:80:58:02:c8:b3:71:58:a3:67:
a9:20:3a:df:62:1d:5b:f1:40:ea:f0:c0:fc:17:f4:
f7:9b:ae:c0:18:14:66:7c:bf:65:99:ad:77:01:0e:
8c:f5:04:50:22:5c:4b:bd:31:3b:43:42:c7:10:04:
ec:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:7B:A2:D1:DB:E9:C7:E6:C8:61:0B:42:F8:BE:37:65:29:4D:9D:00
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:67:f8:88:a6:a1:6f:d4:9b:68:8b:de:c1:87:b7:fe:6f:fd:
1d:17:80:1d:80:6e:36:de:27:13:d0:30:af:05:ad:80:8f:19:
6f:a0:80:b8:c1:3d:85:ef:ac:69:05:b1:89:9f:1d:0c:db:b9:
e3:e2:d1:53:3f:29:b2:b7:cc:8f:9d:27:cc:cd:72:71:25:da:
46:1f:a2:4e:ce:18:b9:73:d6:30:26:3c:1c:00:b3:c3:db:bc:
cd:6e:83:70:71:cb:7d:e8:89:1c:e5:f2:53:e2:22:37:1a:a0:
b2:2f:ba:a0:85:ab:65:d7:e5:19:87:f0:75:48:c5:f5:c1:7a:
8b:0a:f1:63:f3:eb:cf:ff:a5:49:61:08:83:c7:8c:b5:79:7f:
59:f0:a6:fe:e8:01:93:3a:04:0a:ea:67:1d:e9:3c:2f:bc:1e:
16:03:9c:79:34:2b:7c:7f:fb:7d:6d:bf:6b:43:5a:2b:f2:0b:
c4:1b:5a:6f:b2:75:e9:cb:a6:1d:80:97:66:53:e1:9e:80:33:
b5:a2:e5:33:eb:77:58:07:dc:21:8d:42:09:42:b0:e4:d3:bd:
91:fd:4f:16:5a:45:ef:ab:1c:48:21:ad:a3:d4:5d:3e:66:aa:
cb:70:7f:5c:a4:a1:71:13:5a:4d:f0:3e:d8:4a:4f:04:ba:60:
6b:90:27:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:50 2026 by rpki-client