Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File: u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier: ydFxGcwwxCgwb93qsvVlTcaV+mdiIqn+2a+5UDxTyVQ=
Subject key identifier: 60:06:37:4F:8C:CE:1A:DD:83:A7:9F:AF:D9:E0:D5:FE:39:F5:2C:B4
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer: /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial: 019D389BDAC1EFA562E02D16095CAF3AFD22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number: 1289
Signing time: Sun 29 Mar 2026 08:00:31 +0000
Manifest this update: Sun 29 Mar 2026 08:00:31 +0000
Manifest next update: Mon 30 Mar 2026 08:00:31 +0000
Files and hashes: 1: e7qW7ktzFbhQzttwga3E9zXgNCo.roa (hash: ROhx5VIRKogH2P7o1oUw2zoKl8d9a5YmW7HEMyeGDjI=)
2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: gVQn0EWyybj4Y9R7xrqsiAmoIHpzzZSgI9A7/TM9AmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:da:c1:ef:a5:62:e0:2d:16:09:5c:af:3a:fd:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Validity
Not Before: Mar 29 08:00:31 2026 GMT
Not After : Mar 30 08:00:31 2026 GMT
Subject: CN=6006374f8cce1add83a79fafd9e0d5fe39f52cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d1:4f:74:37:0b:08:68:94:68:4b:e4:6e:16:
ef:20:16:0f:0c:ba:b1:9e:9b:74:d2:ea:0e:c5:81:
dc:8f:aa:6c:3a:b3:06:fa:da:76:c3:64:7a:1b:db:
29:f6:78:c4:89:e8:38:64:25:89:96:1d:f5:eb:60:
aa:48:ee:30:46:c5:86:fd:be:d4:e3:b4:98:cd:15:
f3:ff:70:af:40:1c:54:f7:63:e2:58:2a:e2:2b:3f:
ec:33:7d:b9:3d:43:23:2c:4a:ed:f4:69:3d:dc:6c:
3f:af:83:44:9e:39:91:99:01:f9:56:dd:8c:4f:19:
8b:51:7a:d5:c3:9e:85:2e:2c:5c:16:e5:cb:12:c1:
27:f3:2e:1b:b6:f3:4a:7a:9c:8f:76:3c:62:1e:16:
c6:e5:ad:00:e3:06:50:26:88:0c:6e:f0:d0:f1:a5:
15:3a:af:c1:64:08:a3:18:0a:3a:2c:fd:fb:7e:e7:
b0:28:97:77:dc:5c:02:3b:da:92:b3:75:0f:4e:2b:
68:36:d7:9e:df:b1:a2:35:2a:54:d0:51:92:13:d7:
36:df:54:21:e0:64:14:3a:b0:1a:ad:5e:9a:b1:d5:
29:10:00:63:f3:b9:d3:19:d2:f6:b3:8c:ec:5a:c3:
53:4e:83:68:8a:5a:5e:e5:1b:0a:6e:34:8f:22:94:
9a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:06:37:4F:8C:CE:1A:DD:83:A7:9F:AF:D9:E0:D5:FE:39:F5:2C:B4
X509v3 Authority Key Identifier:
keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:78:92:3e:6d:99:b1:c7:6b:42:0a:94:17:bc:65:39:75:44:
8e:06:5b:3b:48:f7:03:2e:fc:6c:23:a3:54:9d:66:d8:14:4d:
ef:e3:48:e7:1c:66:41:e7:16:4e:48:91:35:ba:90:24:07:2f:
ab:46:62:98:08:34:ba:7a:79:ac:bd:4c:f7:3b:d7:93:0d:d4:
4a:a8:a4:29:fb:35:7a:c6:e1:2c:96:9c:f2:f8:5a:c5:d1:ec:
fa:c7:02:9b:bb:c7:d3:d1:3d:c4:da:72:6f:81:4b:94:13:9c:
f3:c2:e9:5b:74:5a:a6:8a:13:e5:5b:8a:47:e4:14:9f:6a:01:
a9:01:48:0a:68:c0:7c:c6:f5:71:72:a1:a2:18:64:8b:bf:4c:
2d:67:2e:50:b3:c4:4d:78:73:0f:2c:af:2f:60:f7:04:a9:35:
18:6a:6f:45:1b:f7:89:6f:8c:19:95:42:4e:af:9f:65:83:f7:
9f:82:8a:c1:d1:0f:53:14:6a:c1:ce:41:07:fd:0d:8a:3d:58:
8b:77:99:ad:1c:dd:5c:0e:fd:3c:a3:03:e3:8b:bd:54:7a:a0:
1c:96:4f:af:c5:de:e0:4a:2e:75:59:a0:55:e4:95:33:06:39:
37:91:75:d1:b3:34:be:97:61:ef:3b:d0:ba:1a:2a:55:a2:34:
01:09:fd:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:10 2026 by rpki-client