Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
File: c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft (raw, json)
Hash identifier: LNjEV6zL1hw5K0Hx5wxLkNcOtytMxbo3WIZplZ9Unqw=
Subject key identifier: 43:F7:53:07:79:A4:0B:42:8F:2D:B2:4D:CD:B4:DD:90:AB:05:1E:C7
Authority key identifier: 73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
Certificate issuer: /CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Certificate serial: 019D37890B191574F213D8FFFF2C17AAE9D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
Manifest number: 0D34
Signing time: Sun 29 Mar 2026 03:00:21 +0000
Manifest this update: Sun 29 Mar 2026 03:00:21 +0000
Manifest next update: Mon 30 Mar 2026 03:00:21 +0000
Files and hashes: 1: JLdoGMzQo3AeuLJQfRuR1G4NdBc.roa (hash: Vl0xLqESsMyxlanXnevOLg/LtIR0/LLBMgnk3RuFu6Q=)
2: c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl (hash: H2QEMTIo3nwGPnfS7LVGb+I8vyS94Lv1InGhLPpt7Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:0b:19:15:74:f2:13:d8:ff:ff:2c:17:aa:e9:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7383fa438a6fae62b35f9091876c44dedb9c0da3
Validity
Not Before: Mar 29 03:00:21 2026 GMT
Not After : Mar 30 03:00:21 2026 GMT
Subject: CN=43f7530779a40b428f2db24dcdb4dd90ab051ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:b3:f3:42:ad:e5:cb:d9:ce:58:fb:0d:3a:
f6:3f:ab:d1:5e:ad:3f:17:71:ae:5c:38:ca:fe:a2:
d5:c8:49:14:8d:4b:24:86:44:e6:ff:df:6f:54:f9:
13:56:94:01:61:7f:c6:95:11:38:e1:a7:63:c2:67:
0b:d5:b5:58:d6:99:1b:59:e8:91:35:d2:83:d7:95:
0b:62:95:74:f1:a5:1f:d3:9d:fc:49:2a:48:67:4c:
7c:b2:fb:9b:4c:f1:a5:ba:f0:3e:27:af:dd:9a:9b:
91:fa:78:b7:ce:f5:da:f4:9f:ac:ea:67:2c:31:e4:
03:86:6a:2d:8f:9b:7a:36:e5:eb:1e:93:da:1f:50:
d4:d7:11:a8:ac:15:10:db:8d:6c:29:5f:6c:eb:c8:
5f:d7:e6:95:c2:1b:09:ee:53:8c:e9:08:dc:ac:53:
b7:f8:e5:c8:ab:b5:98:58:58:09:a3:ae:17:27:1a:
6b:68:bc:e9:9c:68:2d:14:0d:52:83:1a:80:ff:ba:
62:5e:ee:9b:a3:75:eb:ed:4e:a7:f0:0e:67:a6:99:
25:ec:3f:64:97:b6:af:c2:8c:17:4b:18:3f:07:a6:
69:b9:b6:32:dd:c0:5e:bf:c3:ca:04:b5:e6:8c:43:
64:78:b2:26:06:d0:17:0c:d3:47:b1:c0:86:ef:87:
99:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F7:53:07:79:A4:0B:42:8F:2D:B2:4D:CD:B4:DD:90:AB:05:1E:C7
X509v3 Authority Key Identifier:
keyid:73:83:FA:43:8A:6F:AE:62:B3:5F:90:91:87:6C:44:DE:DB:9C:0D:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4P6Q4pvrmKzX5CRh2xE3tucDaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6aeda8-b75c-4bbb-8e7d-8feaafac7e89/1/c4P6Q4pvrmKzX5CRh2xE3tucDaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5a:fb:3a:6b:38:b5:fe:a9:4e:6a:6c:55:e5:28:62:8f:97:
0f:f0:a7:d2:fe:5d:b8:9c:b3:7f:1b:d6:bc:3c:05:3f:3a:7e:
70:ff:5a:7a:77:2c:a8:4e:96:22:82:d5:76:29:86:20:00:c7:
8a:28:53:79:46:ef:8d:18:74:b1:7d:f6:b7:4b:f1:f6:38:87:
24:1b:20:53:10:55:2e:f7:5f:e6:46:64:67:05:c0:e3:39:9c:
28:6f:9c:7d:69:9f:a5:b3:74:3f:34:98:86:bd:ce:53:b1:08:
1d:ca:01:36:f3:38:7b:fa:39:98:27:4a:bd:01:fd:18:ff:d4:
3c:7b:9a:cd:57:48:a6:64:61:1b:cc:e6:c2:eb:66:02:10:8c:
0a:85:b4:f5:5d:d7:5b:95:0b:84:5e:13:8e:00:9f:56:89:c7:
a9:a0:81:a9:cd:d3:51:06:a4:ea:b3:fc:0b:7f:b8:7d:93:9b:
c3:02:67:1c:f5:89:e3:ea:a8:65:c6:a3:b5:ef:1c:ee:df:3f:
78:3a:0a:0e:d4:b9:fa:6c:b3:b7:6c:99:9a:2d:c8:a9:79:48:
b4:32:56:a5:49:23:aa:83:7f:09:da:da:9f:01:ae:33:9e:96:
c6:07:5d:0e:ec:e7:1f:46:3e:53:3b:f2:ef:6d:d4:de:a0:6b:
89:6a:48:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:36 2026 by rpki-client