Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
File: 4kB6dpbweYQUMFTUEePKXxg27NQ.mft (raw, json)
Hash identifier: WCXv1TscMIS07Pa86DMSi3yY06MnkV+aRnrL/OyhzNU=
Subject key identifier: E6:6A:17:74:19:D4:F4:22:5F:BE:2E:37:B9:68:76:57:40:5F:72:32
Authority key identifier: E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
Certificate issuer: /CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Certificate serial: 019D39AF4AC3186032F273ABA3C76EF11B15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
Manifest number: 0D5A
Signing time: Sun 29 Mar 2026 13:01:22 +0000
Manifest this update: Sun 29 Mar 2026 13:01:22 +0000
Manifest next update: Mon 30 Mar 2026 13:01:22 +0000
Files and hashes: 1: 4kB6dpbweYQUMFTUEePKXxg27NQ.crl (hash: deDaQBFxw8cy6GZKtO7KOotUKD0w+SydLjeOR2xYo5w=)
2: XexrTT-WjOfF1IH0hIaeXZfiLag.roa (hash: HDA8bu6O9RqOeUyNIrj9FwIn/BuM4ZQvluzThKczOzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:4a:c3:18:60:32:f2:73:ab:a3:c7:6e:f1:1b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2407a7696f07984143054d411e3ca5f1836ecd4
Validity
Not Before: Mar 29 13:01:22 2026 GMT
Not After : Mar 30 13:01:22 2026 GMT
Subject: CN=e66a177419d4f4225fbe2e37b9687657405f7232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:2b:16:05:8f:d2:27:36:e9:86:ca:b2:82:
97:86:30:68:90:d7:3e:76:23:2c:90:cb:68:bb:7f:
8d:88:ad:02:4b:37:76:9e:18:28:5d:7c:b8:7e:c3:
02:d0:c2:83:f0:98:5e:b5:5f:74:ec:10:b6:58:54:
31:24:d4:c0:30:39:84:fa:0e:7a:96:1f:21:17:50:
a6:58:c4:00:3b:c2:46:b3:2a:46:5b:d7:79:42:de:
03:9f:03:2e:35:39:fe:9f:5a:75:cd:8c:93:d4:b1:
d7:c3:b5:b8:04:c5:56:3d:42:94:9b:c2:68:a4:f7:
1a:b0:92:6d:11:b4:f6:48:9a:0d:2c:f0:54:a7:1c:
b6:74:ec:7b:b1:99:d4:02:b1:b9:aa:3a:96:9b:28:
3a:45:76:11:b1:8c:c3:8c:c4:ec:e5:03:c2:86:71:
c5:f2:36:43:60:2f:d8:b8:fc:42:56:24:1f:73:ec:
07:82:2e:e5:cd:e1:34:78:ab:7c:90:09:e7:4c:26:
fd:4d:79:0c:05:da:d1:1f:27:a3:f8:c9:bb:8f:f7:
35:b0:0e:45:9d:b0:db:a8:da:79:28:c1:9f:06:9c:
f1:3c:e0:92:1b:e7:c9:a7:94:df:52:c5:3e:d7:b0:
5d:2a:ba:4f:32:2e:64:47:1a:de:f8:ce:05:4c:1e:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:6A:17:74:19:D4:F4:22:5F:BE:2E:37:B9:68:76:57:40:5F:72:32
X509v3 Authority Key Identifier:
keyid:E2:40:7A:76:96:F0:79:84:14:30:54:D4:11:E3:CA:5F:18:36:EC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kB6dpbweYQUMFTUEePKXxg27NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/2d6ddf-d448-4566-b364-f0b2dd07f727/1/4kB6dpbweYQUMFTUEePKXxg27NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e7:99:98:45:00:b4:83:db:4b:15:7f:d0:01:a7:4e:f6:f8:
cd:54:a7:8d:67:a3:80:a4:41:e5:80:86:b4:ad:2f:44:93:90:
ff:72:74:bc:1e:d6:5b:bf:84:74:2f:66:7a:8c:48:51:fd:8c:
3d:b1:09:b1:b8:81:2a:8f:ce:be:98:86:18:55:92:a8:b3:c6:
05:31:c1:87:01:b1:54:3a:04:17:1f:e7:1b:14:22:24:d5:00:
b1:b5:3d:4d:d4:c5:03:f8:e9:96:18:de:a9:82:10:ee:53:b6:
03:7a:83:3c:00:7d:fe:8b:31:2e:fb:ae:30:8d:6e:e1:3d:9b:
23:50:cd:b0:85:02:a4:21:7a:99:02:20:fc:48:b6:cd:88:4a:
31:15:0a:59:50:db:63:d3:f7:9f:47:cb:af:d5:07:df:31:97:
cb:62:03:de:e4:d8:e8:c0:d1:99:1d:3b:4d:dd:72:4a:fd:f1:
72:d2:a1:0e:ae:c2:8b:48:c9:9b:14:a2:93:dd:ca:7a:44:c8:
d5:d4:86:56:18:0f:90:c4:20:a3:98:77:9b:9f:3c:48:06:ec:
25:78:3d:5e:c9:ce:3b:2b:5e:22:ee:08:ca:d1:c2:aa:5f:c1:
b3:da:40:e0:2d:30:a9:38:8d:7a:ed:fb:cb:20:40:91:fe:77:
b2:ef:bc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:33 2026 by rpki-client