Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File: 4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier: MlzzM06rKO2OINUlAdAfBTXZIYZLlK02prsOD/aJcR0=
Subject key identifier: 8E:8D:EC:EC:3E:00:9D:C9:EE:7A:20:F0:EE:FF:C3:06:C7:9A:36:94
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer: /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial: 019D37F6FC7C3105946177914E52298BF77D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number: 0BD2
Signing time: Sun 29 Mar 2026 05:00:26 +0000
Manifest this update: Sun 29 Mar 2026 05:00:26 +0000
Manifest next update: Mon 30 Mar 2026 05:00:26 +0000
Files and hashes: 1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: WrHhH442nARF0VSV03ZhqU9wQo6ra3514V0qn5bHDrM=)
2: NCPy2V4MTJIxw6Eeglyn4k9-c8k.roa (hash: e6t60cVHGwxB0yMWg7tXzy3uxaUsUhD5hfxLuTTJHN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fc:7c:31:05:94:61:77:91:4e:52:29:8b:f7:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Validity
Not Before: Mar 29 05:00:26 2026 GMT
Not After : Mar 30 05:00:26 2026 GMT
Subject: CN=8e8decec3e009dc9ee7a20f0eeffc306c79a3694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:6e:71:70:39:6d:8d:84:7c:57:c1:17:d5:ca:
c5:72:b1:a2:88:9f:d5:c1:83:e1:f2:f3:ac:00:86:
e8:dc:43:0e:35:32:23:8d:c4:56:9d:82:26:e5:c6:
05:92:b7:28:16:65:9c:c9:53:10:8d:22:7c:af:6b:
3a:08:33:4f:3f:c6:50:4a:56:35:33:65:d8:ae:2b:
96:a2:c0:2c:77:28:51:11:49:f4:7d:1c:15:76:70:
37:8d:50:03:82:5b:bc:12:b6:68:ad:6d:bf:f7:26:
8a:ab:3d:5c:62:42:75:59:80:97:5f:24:43:77:0c:
df:5d:82:61:66:44:5c:cc:d4:48:78:a5:af:92:97:
8e:43:68:08:d4:eb:d9:9f:71:93:d4:1b:5c:6f:85:
1b:d0:1c:c8:78:5c:51:00:0f:62:f2:ec:41:66:21:
61:f4:ff:f8:c9:19:02:83:48:a9:d9:03:5b:32:84:
1f:7a:54:64:cf:14:f0:80:fd:e1:84:49:a8:67:8a:
7f:b9:9a:d0:b6:e0:4e:c6:34:09:b0:6c:c6:f2:d1:
86:42:e1:c3:63:a9:d5:17:69:bf:61:84:8e:e6:21:
65:ad:1f:d5:6e:e8:91:cc:a7:b7:d4:3b:0e:24:a6:
e3:90:c1:b0:6a:6b:0a:8b:22:31:9d:b8:2d:ed:28:
ad:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:8D:EC:EC:3E:00:9D:C9:EE:7A:20:F0:EE:FF:C3:06:C7:9A:36:94
X509v3 Authority Key Identifier:
keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:1b:7a:cf:67:4b:a0:af:74:d9:26:7a:b7:5d:4f:28:51:14:
9f:51:e2:93:36:e5:32:e3:dd:03:6b:bc:c5:11:fb:5c:5b:3d:
b9:be:61:21:6b:9d:55:e3:43:ca:4f:bb:19:ed:eb:2e:6b:3f:
fb:65:97:b9:73:15:0d:c5:22:6e:e1:64:a7:f0:ec:7b:4a:33:
f0:3c:6c:e5:eb:d2:30:45:44:4a:7d:3b:ef:2d:3e:02:ca:3a:
03:62:c4:e6:45:02:55:fc:c3:80:d2:bb:99:5e:d9:44:92:1e:
3a:00:b4:90:41:0c:0c:2c:29:64:5b:bc:68:f6:12:db:3e:b9:
f4:fe:72:b5:21:01:4d:22:f0:2d:6a:9f:4e:31:a5:a4:f6:21:
a3:77:79:be:e9:b5:c1:9b:65:84:03:f6:1b:74:9e:cb:ac:28:
df:c2:07:4f:78:04:24:99:a1:85:b5:0c:58:fa:7f:0d:31:3b:
c4:b3:3d:bd:16:d5:83:66:4d:67:44:49:33:24:cd:87:b6:ea:
8c:2a:16:4b:4b:ef:65:72:33:8f:b0:96:80:0a:08:f4:08:24:
ed:7c:eb:2c:0a:01:c7:c9:63:bb:72:0a:3a:d6:9e:08:68:55:
77:45:5f:3c:eb:8d:6d:51:68:a4:76:a7:68:0c:a2:6c:cd:4a:
4b:b5:b4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:55 2026 by rpki-client