Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: FpohqvXNRHeXLRZlXS2ZtpTftD9SHu+Yc2Kb/Geti84=
Subject key identifier: 6C:CB:D8:8F:61:B2:2F:FE:1A:BF:A5:AE:30:4B:E8:A9:BE:88:26:27
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 019D3789A622D46BCD1C06A7F45E568E4C38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 0955
Signing time: Sun 29 Mar 2026 03:01:00 +0000
Manifest this update: Sun 29 Mar 2026 03:01:00 +0000
Manifest next update: Mon 30 Mar 2026 03:01:00 +0000
Files and hashes: 1: 1-B3zpBegmWPzlYxvi-lHZZrjuQA.roa (hash: WqRlSVx1Vu6h+ixUdX0cx9Mi9fCqLKMKSDgwbsVbLZ8=)
2: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: Dse0wS3NqulafCaiKrct8OT58aMdyvzpAp2/OvZNgdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:a6:22:d4:6b:cd:1c:06:a7:f4:5e:56:8e:4c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Mar 29 03:01:00 2026 GMT
Not After : Mar 30 03:01:00 2026 GMT
Subject: CN=6ccbd88f61b22ffe1abfa5ae304be8a9be882627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:26:2f:e1:99:54:5b:d8:87:53:df:8b:e9:cf:
de:4e:84:24:c8:85:bb:a8:e5:22:b2:f3:68:d9:b8:
34:81:97:36:e0:8e:36:b0:d1:f0:fb:a9:13:9b:01:
f0:c3:33:78:22:6b:d8:01:b1:ae:66:57:4d:d2:5c:
7e:8b:39:4c:53:88:88:38:20:71:3b:55:d9:1d:f1:
a6:a5:44:26:05:4b:03:9a:99:b1:04:10:a3:4f:26:
66:e2:1c:56:4c:3b:8d:86:b6:d7:ee:46:18:fe:b0:
d3:b8:64:36:70:6b:f4:0c:d4:7d:1e:f1:ab:fe:a6:
c5:2a:ee:2d:b5:33:eb:e6:43:2c:5d:09:8d:d0:3a:
ab:22:49:8f:ce:74:ff:eb:18:66:3e:4a:1f:bf:ef:
b4:57:34:a4:a9:60:7d:c4:34:db:b7:d6:e5:4c:8e:
99:2d:8a:fa:03:05:e3:26:f9:fb:1f:ed:ae:87:22:
7c:db:c9:01:df:2f:91:d3:11:6e:74:22:44:a3:fe:
9c:f2:51:14:a2:e6:04:14:6f:98:9f:d5:4e:6f:bf:
d9:11:dc:ed:71:98:e8:21:9e:89:d8:0c:0b:99:16:
52:17:93:47:82:e3:71:46:6e:b2:d0:27:63:32:51:
59:04:29:d0:42:c0:d3:ba:21:0c:f8:83:00:c7:da:
22:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:CB:D8:8F:61:B2:2F:FE:1A:BF:A5:AE:30:4B:E8:A9:BE:88:26:27
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:77:d2:9f:22:0a:a7:dd:58:d0:3b:15:42:a3:30:28:a4:4c:
2d:56:e6:49:d1:eb:a3:df:96:68:08:66:17:08:54:b5:26:53:
86:ec:a9:b9:13:62:33:37:28:c2:aa:61:65:60:4c:2f:23:57:
58:40:67:79:44:bf:ef:39:4a:9d:ce:34:f1:80:44:65:61:76:
6f:84:6e:1c:d0:4d:bf:7d:e2:24:16:68:04:ff:2b:c1:17:7b:
be:c8:16:ee:9e:63:d0:97:65:0c:7c:bb:f0:29:57:da:d2:68:
7e:97:93:04:d2:8a:8e:c2:83:53:1c:d6:0e:83:89:cc:dd:39:
9c:bb:af:a1:f1:c7:3f:e3:fc:a1:ed:74:31:2c:ef:c6:02:c2:
c2:de:5b:93:c2:a2:61:ab:3f:65:63:cc:35:2a:3d:8e:28:59:
0b:9d:a6:1d:ce:8e:8f:5e:89:62:e2:e0:46:ae:6d:29:e4:05:
0f:8b:ac:f9:86:b7:29:63:b2:f1:de:43:bd:a5:21:42:5a:c3:
7b:03:e2:14:aa:d6:2a:b1:13:26:64:b5:ba:5b:01:f4:be:d9:
1d:88:8b:b6:b0:32:de:c3:b7:c2:78:7f:2f:13:fb:9f:88:28:
4e:d4:17:23:b0:88:71:21:8f:5e:a5:31:23:02:c9:80:6b:56:
56:b1:3e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:25 2026 by rpki-client