Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: QbDn7KQWtpaICjezqzdCJpQvn9nopRy6y4egW+u452A=
Subject key identifier: 83:96:A7:4E:A1:98:7E:94:0D:4A:F9:DA:83:84:D9:E7:F2:15:5D:FA
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 019CE4EC391249F03A68D2C907E4F2280B1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 1674
Signing time: Fri 13 Mar 2026 02:00:12 +0000
Manifest this update: Fri 13 Mar 2026 02:00:12 +0000
Manifest next update: Sat 14 Mar 2026 02:00:12 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: t+cyS86BjLpwY3jBlpnufqbYfn5Yl07Rv47YywUvLO8=)
2: E582u3b_wirr6G_w4u9uogz74z8.roa (hash: 81B6PrtCWAN/tZ4dAD4doQginsu0czWU20EU6ygqMqw=)
3: XzHwdc8CnV6b37aUuwbB9K5aCVg.roa (hash: Ajp8GTPxK9A3C7R9uHBAngG8he1JSPPWTWmru9BuMHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:ec:39:12:49:f0:3a:68:d2:c9:07:e4:f2:28:0b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Mar 13 02:00:12 2026 GMT
Not After : Mar 14 02:00:12 2026 GMT
Subject: CN=8396a74ea1987e940d4af9da8384d9e7f2155dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:77:ef:5f:4a:1e:78:d4:f0:42:a1:ee:33:3a:
1b:34:86:a0:55:72:9b:bf:f9:19:d1:d3:62:ab:78:
f5:6e:8f:20:b8:6a:7e:3d:3e:8d:ae:16:36:5a:06:
dc:01:b7:72:89:7b:23:57:11:2c:c8:19:de:0c:96:
00:e1:df:9d:c2:b4:ab:cc:80:75:96:20:c5:ac:5a:
07:27:6d:46:5f:1c:bd:68:83:71:29:05:b8:14:c6:
20:1a:07:33:54:04:6e:a3:29:76:7d:2b:5f:b9:95:
32:a7:58:14:2f:84:38:92:4c:c8:1c:9f:48:ee:cd:
70:6c:9d:66:1c:2b:21:36:4a:90:da:c4:dd:92:26:
5e:7a:5c:17:11:40:6d:0f:d7:b6:c6:6c:89:28:ee:
af:34:b2:78:22:2b:a5:ad:8d:5f:98:90:21:e9:cf:
67:53:b1:be:10:f9:f1:7d:e4:07:59:c3:42:12:33:
e0:b8:fa:80:3c:0b:67:dc:3c:3a:5c:3f:c4:01:0e:
5b:b7:32:04:30:ce:7b:20:bb:87:a2:85:f8:dd:02:
80:64:d2:ea:d7:84:55:9f:ed:ed:ed:d0:49:16:82:
ce:0b:85:ee:d3:e1:fc:81:d2:81:e3:50:bb:32:ec:
9e:91:65:0e:11:32:3e:03:6f:ba:03:bc:51:01:9e:
60:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:96:A7:4E:A1:98:7E:94:0D:4A:F9:DA:83:84:D9:E7:F2:15:5D:FA
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d1:6e:52:eb:fb:2d:d7:8e:74:83:f9:1b:53:96:1c:55:23:
ca:9b:ee:ee:3d:a6:21:62:cd:4a:12:e1:3d:21:4f:f1:29:dd:
bd:de:e7:38:cb:db:9c:33:83:33:9a:81:3e:31:b7:12:17:ef:
7e:3d:0e:62:b8:81:90:d0:c5:d1:2b:6f:03:f6:8e:e8:92:a3:
60:ed:f4:84:7f:42:76:d0:fd:c2:18:bb:01:b9:7e:81:55:35:
78:31:f2:45:df:b2:44:1e:27:73:f6:9e:7e:85:d5:b3:7b:27:
91:f8:96:14:2a:24:7c:ce:b5:c8:f9:4e:88:75:22:08:ba:e5:
93:0e:ed:65:b8:39:21:8b:45:94:d2:bd:65:94:2c:2a:9e:26:
ec:96:ab:cc:88:5f:fd:9b:97:23:0e:1a:8c:c1:ee:0f:db:1d:
7a:37:48:5e:9a:b7:01:12:aa:13:b0:a1:b9:6f:30:4c:71:b4:
f0:27:50:6c:29:8a:f8:56:7d:d0:77:be:dd:dd:1e:a4:79:8e:
73:54:a7:37:cf:54:dd:63:71:36:08:50:85:d4:f8:a6:4b:aa:
4e:09:ad:94:ef:9d:4e:04:5c:07:2c:65:05:b0:d0:e5:4e:c9:
69:19:8e:48:d8:e1:10:35:3c:81:fb:18:20:e8:ee:58:8f:1d:
b0:e5:da:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:40:05 2026 by rpki-client