Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
File: pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft (raw, json)
Hash identifier: 5Lb40HNXIn9BHu4Ji31ZFbRaEX72KdlhbqMEAUp3IGY=
Subject key identifier: 75:27:49:1C:A5:DF:94:BC:E4:F5:71:E0:F9:87:2B:B0:B8:C9:0F:B1
Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Certificate serial: 019D08FA449C4BB9D5CFF1661E74AEC538FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
Manifest number: 1266
Signing time: Fri 20 Mar 2026 02:01:52 +0000
Manifest this update: Fri 20 Mar 2026 02:01:52 +0000
Manifest next update: Sat 21 Mar 2026 02:01:52 +0000
Files and hashes: 1: nPVHMKh_KfMvRao_vET8GSNdB60.roa (hash: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY=)
2: nT0dZV9vpJOe4Ur34PRwza0i0vo.roa (hash: NbPGPMvzh32ZwAt9Bg1XTBpSWoDxY/0tDyiOFU+i+30=)
3: pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl (hash: IFMTqXcoYwiT71PgJTWRaW85OUQmZbFQRhhOQ4SthLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:08:fa:44:9c:4b:b9:d5:cf:f1:66:1e:74:ae:c5:38:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf
Validity
Not Before: Mar 20 02:01:52 2026 GMT
Not After : Mar 21 02:01:52 2026 GMT
Subject: CN=7527491ca5df94bce4f571e0f9872bb0b8c90fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b5:4f:72:b4:cf:a3:e0:b1:26:03:b9:22:b5:
ef:ae:7c:02:6f:e1:f5:fa:a4:27:0c:f3:be:3e:9a:
aa:95:b7:fb:c7:ce:3e:05:10:5c:cc:31:9b:98:7b:
b7:58:37:a3:8d:da:a9:16:60:83:e0:33:37:e8:8d:
b5:96:ae:23:f5:49:e4:5b:17:fc:fd:ec:1d:d9:e1:
d0:53:16:1d:26:12:bb:c2:c8:cb:a9:3e:2e:1f:f4:
6c:12:b7:bc:03:b7:06:30:54:86:7e:f7:d9:5b:dd:
1d:11:f6:b5:83:69:ea:21:94:6a:6f:c4:c6:4a:1c:
13:85:fe:2a:ad:da:97:c8:33:51:1d:59:b4:2a:ae:
93:11:50:97:6c:b8:15:51:d4:8d:f7:46:c6:86:a5:
4a:f8:44:03:ef:fa:51:33:a9:ef:e2:e6:3c:dc:e3:
dd:63:99:a4:e7:c6:3c:64:82:c3:54:0e:67:82:9f:
84:85:b5:ce:a3:db:41:5a:88:a8:0b:79:4f:91:17:
38:6c:c4:da:1a:f4:57:59:9d:93:69:7b:45:58:69:
9f:ed:30:d2:16:be:42:0f:3b:3c:e9:f0:ff:af:fe:
dd:6b:c8:43:9d:b1:3d:0b:5c:7a:06:c4:89:75:8b:
06:ce:d2:3b:40:55:20:2c:5f:45:97:cb:d0:b4:1d:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:27:49:1C:A5:DF:94:BC:E4:F5:71:E0:F9:87:2B:B0:B8:C9:0F:B1
X509v3 Authority Key Identifier:
keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:e7:ab:7d:30:cb:92:bf:c2:55:21:37:53:96:e3:5e:4a:11:
ea:fa:76:c9:39:ce:04:e0:bd:64:cb:fe:f6:d7:e6:0a:e2:61:
f2:49:47:df:4c:89:10:35:4c:9c:66:41:ac:18:4f:d3:28:95:
50:6c:9d:b9:a4:8b:6b:49:f3:ee:da:55:bd:20:6e:94:54:77:
71:04:b7:94:b0:98:93:7d:fa:37:62:29:3f:ab:44:d3:6e:5f:
23:9b:d3:78:78:d1:f8:c1:17:33:b0:75:69:48:40:bc:f5:a5:
6f:a0:41:73:4b:05:be:ea:51:fb:30:b1:cf:ff:ea:ef:f1:8b:
57:72:ce:b6:8e:04:93:0e:fb:0d:22:66:5a:b6:39:cf:fb:63:
c8:1a:c8:df:c8:4d:66:9d:d6:54:97:51:3a:bd:21:be:bb:9c:
bf:94:32:ae:c6:54:cb:ca:62:dc:d1:ac:12:4f:d1:73:34:3e:
61:f9:3a:e8:5d:02:2f:54:6f:3e:5b:4b:03:8f:7c:a7:55:76:
c1:96:95:83:b5:83:cd:05:41:a0:b2:1b:c9:76:cb:13:58:b2:
2e:0c:67:ee:12:67:e2:f5:7d:7b:da:7e:e3:15:7a:95:8d:25:
39:3c:d2:62:61:06:b1:46:a4:24:93:a1:3f:9b:92:04:de:f6:
15:47:c3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 11:31:24 2026 by rpki-client