Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: Aah2VflEg65zidIryXjDf5Cztd8ZAZc5CCO4uTnJekA=
Subject key identifier: 02:40:9A:D7:71:E2:FE:2B:C0:6D:4F:28:FE:85:6F:C0:E0:38:A8:AF
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 019D39AF218AEA4119EDCE92F65BAD15CA37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 0C07
Signing time: Sun 29 Mar 2026 13:01:11 +0000
Manifest this update: Sun 29 Mar 2026 13:01:11 +0000
Manifest next update: Mon 30 Mar 2026 13:01:11 +0000
Files and hashes: 1: 1-qSiDXrAhQQiEkJKVibhHHT9XHY.asa (hash: ek3lFQhBM69m11IFyrspDmCB7+jlGlnfEWGxNiaYwFg=)
2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: Qsz0m2s9/s3MNpNdijpkLfrEz1Sl00tOR9NiRQZ0ON0=)
3: s-PKc_tu2wV4rS8DFKDtN3pEWOo.roa (hash: RIeIk6mysjr3waBR5H6D0lD1jhhyLuowL03Fip2BNmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:21:8a:ea:41:19:ed:ce:92:f6:5b:ad:15:ca:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Mar 29 13:01:11 2026 GMT
Not After : Mar 30 13:01:11 2026 GMT
Subject: CN=02409ad771e2fe2bc06d4f28fe856fc0e038a8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:49:7c:db:9b:86:50:94:21:f1:c1:81:0a:15:
92:79:a2:58:f2:39:14:fa:ca:f2:a8:22:6f:71:15:
dc:1d:b4:16:43:44:9f:a6:c0:5b:e1:02:41:ac:f7:
a8:31:19:83:ea:3a:ad:52:49:8c:d5:c4:f3:0f:88:
94:9d:a9:1e:5e:c0:c4:a6:3f:02:80:3d:ee:7a:72:
fb:fd:fb:ca:57:3a:49:db:06:b1:87:b6:7a:af:45:
7d:aa:70:85:dc:b1:f9:61:4a:b6:c9:98:f3:af:01:
41:10:73:9a:6b:4e:96:c0:a2:8e:c3:e4:b6:d3:ac:
89:51:a3:4c:d0:11:35:ea:8d:66:e2:44:7e:16:ef:
37:b3:0c:ac:78:12:66:bc:be:a3:01:1d:9b:b4:79:
05:e8:01:8d:9d:9c:85:5d:40:4c:8a:49:bd:ac:7d:
3f:65:68:b1:ec:c8:b4:21:f3:30:cc:7a:28:df:54:
18:99:b2:80:63:56:1f:6b:4e:d3:86:3d:86:e8:c9:
51:aa:26:5b:5b:c1:10:1c:e9:fd:9e:00:4c:91:a6:
c1:35:18:b8:02:af:c4:61:a0:c8:8e:14:2e:06:16:
3c:e9:47:19:2a:fd:27:a0:52:f5:7f:9d:28:d9:72:
d0:42:a5:d9:64:54:1a:2d:73:6a:a7:b7:f2:73:cf:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:40:9A:D7:71:E2:FE:2B:C0:6D:4F:28:FE:85:6F:C0:E0:38:A8:AF
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a9:c2:2c:37:c4:f2:3a:12:15:bc:89:6f:43:82:b3:0b:41:
ba:53:11:5b:29:79:31:b2:fe:59:f9:aa:07:48:95:d2:80:3a:
ad:64:43:46:0f:e7:0c:ba:a4:2c:27:6c:1c:ee:98:19:64:13:
df:5d:0d:21:d0:14:70:5a:7b:ee:d0:a3:1d:f6:38:69:3b:08:
1e:3b:48:43:a0:c8:3d:68:ab:6c:eb:ca:75:b5:1d:a5:53:cd:
08:39:d5:23:4b:0f:82:dd:3e:b8:48:16:ea:e7:7e:22:29:4b:
d0:b5:73:0b:17:e5:24:7b:a5:8b:30:36:4b:a2:61:8b:02:38:
09:0e:55:23:a6:2f:04:6e:1e:87:a7:2a:b2:c5:5b:8c:ff:e7:
3e:dc:a7:7c:04:56:e2:c0:3e:e0:30:31:83:57:0a:43:a6:44:
dd:c8:93:be:73:bf:f9:0b:87:a4:db:36:73:8f:f7:68:03:8d:
6b:7e:67:e0:95:51:94:af:14:21:c0:ee:2c:63:2c:2d:65:ac:
92:1d:da:86:5a:b5:96:b7:0e:7b:9e:3f:99:e4:8e:6e:1c:f8:
38:70:9f:0e:5f:f8:d4:e9:00:37:75:e5:a6:1a:83:41:24:36:
c6:cd:cd:51:02:e4:3e:78:25:3c:b5:c3:d2:66:41:88:c8:c3:
ce:70:c7:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:43:53 2026 by rpki-client