Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: 7CWgxptMrhxTgDBUIWbR5dmMbkhpWJs5BnRH1lOcG/I=
Subject key identifier: 14:56:49:5B:E6:14:4D:BC:5F:16:CF:3E:EE:A4:F7:DE:92:98:E7:F5
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 019CE4B5D133DBA5B61210942F3E26E120D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0F1C
Signing time: Fri 13 Mar 2026 01:00:46 +0000
Manifest this update: Fri 13 Mar 2026 01:00:46 +0000
Manifest next update: Sat 14 Mar 2026 01:00:46 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: RknLTAGIUvtJxWg9tm6agujR/JvLx5EbE7nS1XXnVqg=)
2: JBq5eeimT_KUG5CSYUSbXpxqVWI.roa (hash: gVtfIX5m38x7+oKJNfUCQUZTbh8OCnW9g2Um9M+EpJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:b5:d1:33:db:a5:b6:12:10:94:2f:3e:26:e1:20:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Mar 13 01:00:46 2026 GMT
Not After : Mar 14 01:00:46 2026 GMT
Subject: CN=1456495be6144dbc5f16cf3eeea4f7de9298e7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4a:76:8f:be:26:22:39:7d:7c:cc:e7:fc:fa:
e9:25:55:d9:ee:b8:4b:94:56:0e:2b:b8:b3:b0:ea:
d4:0b:20:80:fb:72:09:5c:5a:8f:fd:15:fd:41:8b:
96:9a:87:05:28:2b:05:b6:3c:97:7f:35:32:0a:b1:
9c:be:7b:08:ec:68:ab:0c:52:af:8a:f2:dc:94:96:
9a:8e:91:09:ea:4d:39:09:01:02:49:25:7f:d6:4d:
80:5e:ea:b4:6e:a4:9f:fb:46:16:bc:20:86:01:59:
48:ee:d8:98:fb:0c:ad:41:1b:9e:2f:8d:ca:b6:47:
ea:81:a0:23:69:6d:0a:81:e0:a3:b2:d0:6a:52:35:
dc:e7:bc:40:f9:e7:56:12:92:00:3b:a2:19:47:64:
66:09:b5:a8:1a:e1:53:0a:7f:16:bb:96:17:85:96:
50:e3:30:30:11:db:a4:14:88:30:f3:2c:51:d0:aa:
7e:36:a3:30:ad:c3:8b:82:56:33:f3:31:ad:54:6d:
e1:f4:13:f0:30:42:84:57:03:87:98:34:0a:dc:5e:
3c:ef:15:7e:75:9c:ad:03:76:7f:2b:03:10:64:a7:
9c:a3:60:fa:80:5d:dc:08:c2:23:e0:75:b7:e0:21:
61:90:02:07:66:79:32:70:26:2a:7e:ac:03:ba:f4:
71:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:56:49:5B:E6:14:4D:BC:5F:16:CF:3E:EE:A4:F7:DE:92:98:E7:F5
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:60:21:49:10:f1:9e:e0:11:0e:3c:95:3b:15:35:66:67:87:
f5:9d:10:f9:00:1c:db:5a:96:4b:70:75:5b:6d:95:b1:5d:2e:
37:56:79:c5:1d:b2:0d:a6:27:c5:9d:a7:d0:2e:91:c5:49:84:
21:86:ae:21:7f:2e:2e:51:4f:0a:90:23:4c:94:14:d4:d7:c6:
4e:51:c8:71:76:9f:35:f6:9b:7a:06:80:39:4b:2a:b4:99:b8:
64:62:f6:8f:4b:72:bb:d1:eb:75:28:58:9b:84:ba:a3:b9:3b:
84:60:8c:3d:c0:d7:f4:76:bf:f6:40:8b:63:db:73:27:ce:4d:
87:6f:a5:4b:73:d2:6d:2a:e3:e0:a8:0f:12:aa:43:45:dd:b3:
ad:0c:e5:1e:0a:07:09:9c:8c:5e:d9:f7:cf:53:19:cd:e4:c7:
ff:25:8d:0d:c5:88:48:4a:f7:94:e2:20:ac:7d:18:f9:5d:ff:
81:85:ae:89:76:b0:01:17:07:9b:09:d0:ad:65:4c:34:05:35:
c8:1b:04:ee:55:be:42:2d:e2:cd:08:a2:2f:b3:68:55:79:75:
38:d2:63:c3:79:f4:1c:80:90:c9:41:0d:a5:48:1b:d7:49:6b:
0d:4e:a3:59:46:36:d8:d7:23:e1:e5:c6:84:28:4a:74:75:c4:
64:d8:fb:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:30:37 2026 by rpki-client