Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: 1NPIitPB7ZKyymoJo5qnDzArtLjvl+kGzD4/ApFZ0Jo=
Subject key identifier: A8:A3:E0:E1:D4:23:6F:E2:6C:F0:4F:1F:98:AD:03:54:69:15:A9:28
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 019D394166DE2D0DA86EAAB175A840C50E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 11:01:20 +0000
Manifest this update: Sun 29 Mar 2026 11:01:20 +0000
Manifest next update: Mon 30 Mar 2026 11:01:20 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: qvGUr7l0XnbVxN2xfnXTMDqCApY1Dt9At8PIh8qrZcg=)
2: HQvqu0FyNTgLxOCtIkfc5EdcDj0.roa (hash: 130FHhBXUMCrMDc50ZJnqMVOCj69/WSdEuG7otm6jac=)
3: JDb5A2keqNNHHn7egHMcEGsac60.roa (hash: ArdL/hAkNPkcLPWJJnXPFWGPHSAOP/P5AYcbgtu+Yug=)
4: MbiryQPvDhyE4fWE2RUNJytt6AY.roa (hash: OrXM+BXuK0a9EBtLr+v3zOe94bGU/tMcOd4waL7ij94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:66:de:2d:0d:a8:6e:aa:b1:75:a8:40:c5:0e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Mar 29 11:01:20 2026 GMT
Not After : Mar 30 11:01:20 2026 GMT
Subject: CN=a8a3e0e1d4236fe26cf04f1f98ad03546915a928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:17:6a:37:56:c7:9b:34:cb:8f:d3:61:4a:62:
d9:40:f4:7a:25:22:d4:75:3c:7a:62:78:4e:ff:26:
0b:e9:cf:1a:1b:6e:97:31:95:55:0b:d7:c2:35:7e:
d1:91:07:a0:cf:43:cf:be:2e:62:bb:64:55:07:77:
aa:27:f6:43:6e:0e:95:30:3b:b0:2d:08:46:24:ee:
c4:ae:16:db:78:68:f6:e9:f1:2f:b0:fd:f8:68:cf:
ad:12:3c:bf:de:44:3b:e3:31:a8:b2:ce:bd:6d:8d:
6e:70:65:f3:45:a2:d5:d3:d5:6d:27:32:b8:70:54:
f8:a4:e6:5f:80:ba:d7:08:81:a5:66:2a:2b:cb:6f:
09:c2:d0:ef:a2:b9:1d:30:ca:15:eb:7c:2a:c7:7d:
02:09:80:47:9a:1b:19:5b:08:82:01:42:58:53:7f:
41:81:b3:83:27:13:ce:09:13:d2:ac:59:25:4d:ba:
9d:d5:bd:96:ae:47:11:38:5f:45:39:9a:97:68:db:
48:42:fe:0e:9d:11:c5:e8:80:4d:6b:23:8c:55:1e:
3b:12:9a:5b:96:8d:fb:a2:2a:72:f9:21:86:ce:9c:
48:a9:99:5c:ee:05:aa:8c:39:32:52:9c:1c:1b:0c:
df:25:41:28:88:14:ba:db:19:49:fb:dd:82:44:fc:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A3:E0:E1:D4:23:6F:E2:6C:F0:4F:1F:98:AD:03:54:69:15:A9:28
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8d:98:3b:3b:ac:dc:6f:2e:73:0b:1c:98:7c:b4:77:af:05:
4a:9b:32:5a:36:ee:c8:e4:22:40:97:21:3a:18:40:c4:91:3c:
09:12:7d:9b:33:1c:76:47:ec:47:cf:94:88:ed:15:e5:16:ca:
ef:f9:9e:47:cd:91:fc:d3:22:49:a8:8e:70:0c:59:9f:66:fe:
7f:15:1b:8a:28:46:a3:d7:68:62:25:c6:2b:3f:e2:d6:0c:00:
63:8d:7a:df:ec:61:b7:06:f9:64:cf:54:30:9f:50:4c:e6:04:
9f:b8:c6:f7:a1:15:f9:7f:1c:66:40:ba:74:e6:f9:6e:27:67:
75:3d:43:f8:2d:42:67:0c:49:e6:e3:47:5f:84:7e:67:ad:97:
f1:48:33:fa:c5:18:e8:1d:d1:fd:c5:bb:e2:20:ab:aa:db:02:
e1:71:e8:51:93:9f:29:cc:06:64:5f:37:16:53:75:8f:d7:80:
98:25:44:84:e1:47:15:80:e9:2a:b2:9b:6d:52:f5:95:b6:97:
75:1a:b2:4d:13:e4:de:f8:05:68:7b:d9:2d:03:5d:50:6f:73:
e2:d3:dc:a5:62:39:26:08:8e:90:d3:7d:25:a9:bb:66:b1:c1:
b4:17:c3:06:2d:ef:98:27:30:57:3b:1c:11:6c:cc:a8:3c:6c:
84:4e:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:56:00 2026 by rpki-client