Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier: dN/AHhIHGpygmFJdpIYQxPoQeLQZvNz8vqrYoYlYPM0=
Subject key identifier: FA:C6:F7:54:55:28:E9:05:6F:04:1F:32:2F:39:D1:71:72:9F:D2:D2
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial: 019CE222461956E78754F0A4E9A6CF882F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number: 0B18
Signing time: Thu 12 Mar 2026 13:00:22 +0000
Manifest this update: Thu 12 Mar 2026 13:00:22 +0000
Manifest next update: Fri 13 Mar 2026 13:00:22 +0000
Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: +pIm+rcs7BoczwIyifXXMG1YB1SgKZT7kykaIgSeP8A=)
2: YTHqy1jXNV7dNzrAO_RbGYRTCcA.roa (hash: zJ9iDYD1yuxkbyK8khRTA4UqxwT49qevZssCV62H0OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:22:46:19:56:e7:87:54:f0:a4:e9:a6:cf:88:2f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Validity
Not Before: Mar 12 13:00:22 2026 GMT
Not After : Mar 13 13:00:22 2026 GMT
Subject: CN=fac6f7545528e9056f041f322f39d171729fd2d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a1:01:7c:ed:43:93:5d:ce:82:17:3f:ce:04:
6b:b8:7f:05:ce:e7:4c:66:4f:31:45:72:f3:e4:1d:
99:8c:27:9b:1b:7a:00:a5:61:95:97:bf:99:a5:47:
ce:f1:76:f2:2a:86:8e:22:cf:9b:94:1a:27:28:7a:
c2:e4:3b:27:2e:7b:36:c2:84:f3:fe:52:20:c4:0c:
77:71:55:71:f6:65:99:3b:37:97:44:94:c1:16:43:
0c:b4:ec:e8:25:b1:91:a1:92:67:2c:c9:95:70:6a:
4f:6c:67:4e:57:88:50:4a:35:dd:2b:2c:d0:d9:42:
5e:f6:59:bb:d0:f7:3a:0f:95:8f:c5:d3:9c:d1:bc:
23:ae:11:c1:a6:7b:74:7d:f6:7d:78:28:00:a5:e7:
aa:13:1e:86:4c:75:2e:69:fa:31:d9:0b:6d:1f:6d:
d1:80:ea:28:2a:e8:87:b6:98:7a:16:12:aa:a6:d5:
61:03:28:b0:c2:77:47:72:f8:aa:a8:bd:bb:d8:7c:
6d:0a:dc:67:0f:01:68:9b:f8:82:2e:2b:85:39:8f:
10:b5:d6:c6:49:52:78:94:62:6c:ba:c8:ec:44:2b:
40:4e:b9:52:c6:d3:22:72:f4:9c:5a:aa:3d:57:49:
eb:41:70:f9:29:1e:43:72:36:a5:63:53:62:ec:7b:
fc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C6:F7:54:55:28:E9:05:6F:04:1F:32:2F:39:D1:71:72:9F:D2:D2
X509v3 Authority Key Identifier:
keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a6:dc:b8:80:15:ca:31:d8:aa:53:7d:37:f3:9c:9f:8e:b8:
78:ad:78:1b:d8:5e:12:43:b0:f7:55:bb:20:86:73:49:65:64:
1a:c0:4e:3a:08:b2:78:44:2d:53:e7:3b:e0:7f:7f:57:8d:eb:
c5:62:92:19:67:45:02:26:34:4c:01:60:32:d4:fe:b8:2b:1a:
ad:d5:24:da:4d:35:75:6a:80:cc:5f:30:b8:e6:9f:a6:20:0c:
b7:58:b9:d2:2b:2a:f3:94:ec:e9:3b:f0:ce:b9:c6:dc:6a:4a:
4f:3d:7b:e0:d5:63:40:01:64:67:2d:91:d6:d6:56:ab:23:fb:
be:55:9c:8b:c2:c9:95:07:75:33:8f:89:76:21:a5:6a:36:6e:
98:3c:15:35:a0:1a:97:25:7f:5c:eb:3e:0f:7e:fc:25:5a:a9:
4d:6a:4c:b8:63:1f:73:25:fe:67:59:79:c7:3f:ed:ca:57:ad:
26:08:8b:83:19:b6:73:41:ec:ce:e1:ab:13:f4:cd:5a:26:7e:
d7:70:9a:ea:5a:17:6e:3b:36:f2:1a:b7:d2:3c:93:4f:5c:01:
8d:7c:24:34:e2:fa:14:72:ca:f3:63:1b:61:99:10:3d:2d:0e:
d4:28:06:97:3b:35:4a:cb:a8:a6:1d:44:ec:15:29:d3:21:c6:
41:96:92:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 17:09:23 2026 by rpki-client