Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
File: C4-x3rCeckJbMJoUFJF9r4k771k.mft (raw, json)
Hash identifier: BmIYR5zJL3Z2i91cvsXlbv8T4UeRofIML+LHbCUEK44=
Subject key identifier: E9:0F:BB:10:06:13:B0:A7:4D:9C:12:8E:BC:BC:F9:AE:77:4E:C9:91
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 019D37F708CB10AAE913E30AF86E388A9495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 05:00:29 +0000
Manifest this update: Sun 29 Mar 2026 05:00:29 +0000
Manifest next update: Mon 30 Mar 2026 05:00:29 +0000
Files and hashes: 1: C4-x3rCeckJbMJoUFJF9r4k771k.crl (hash: HPzpuzzuIJD1SgnAZqQyGjHqv8+gdDPk+Kk8HdEjmuo=)
2: QGU4wxB9l82WtX2GlBPNcSFE_oI.roa (hash: lXWG4OK0FlcLIlRlfiL6ejBSOQfloGthHWkReJ7gUs4=)
3: oAirDjtYSawIz9t2W1uTMzbfgmg.roa (hash: hcXXhAATQAv1P0WpVCcSM3rmQFyzufHtTmG7E5Wcw3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:08:cb:10:aa:e9:13:e3:0a:f8:6e:38:8a:94:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: Mar 29 05:00:29 2026 GMT
Not After : Mar 30 05:00:29 2026 GMT
Subject: CN=e90fbb100613b0a74d9c128ebcbcf9ae774ec991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:e8:c5:d3:19:ef:26:cd:09:4b:51:1b:29:
b6:18:f2:f0:68:3d:0b:05:b2:b6:24:93:01:4d:33:
38:b1:ce:77:cc:79:74:c7:2c:78:83:67:1e:62:07:
c6:90:f9:1c:b3:fd:d5:26:59:00:e5:d7:0b:e3:48:
e5:8b:19:40:cf:da:50:db:fb:6e:d6:5c:c5:0f:3f:
d9:11:f6:21:ae:9b:30:c5:1f:e2:39:da:c4:ac:f5:
ae:c0:6b:4b:64:c7:bf:22:20:fa:bc:9e:6f:3b:77:
29:29:16:59:37:a5:80:87:83:60:33:11:08:76:20:
d5:e4:f7:6a:6f:07:38:33:5a:85:46:fc:f2:0d:86:
eb:77:96:18:28:88:c3:bc:4e:b0:94:9b:dd:c6:20:
bd:02:b5:ad:e4:a8:e0:92:b6:7b:8f:2a:2b:8d:79:
c4:8b:27:d2:86:53:18:aa:25:59:81:7d:54:c7:c9:
bc:2d:b2:a7:42:02:1b:ff:ba:5f:62:46:29:0a:eb:
22:6d:b8:b3:46:ff:27:47:98:89:c7:6c:a0:ee:83:
2f:5d:94:e1:f5:49:53:fc:7c:df:17:5e:11:e4:65:
1d:3a:f0:8b:1d:85:99:c3:3f:93:9c:ef:d3:1d:89:
af:16:c3:27:b7:f4:83:d3:a5:99:5c:f4:2b:ba:b8:
29:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:0F:BB:10:06:13:B0:A7:4D:9C:12:8E:BC:BC:F9:AE:77:4E:C9:91
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f2:0a:4f:e9:27:9d:b7:8c:46:85:93:fb:66:a8:69:70:f9:
59:42:02:6b:05:b4:6c:be:78:c0:d8:83:f0:8f:1f:f1:3d:53:
50:14:7c:13:2a:29:4c:96:ee:3f:5f:fd:10:02:b2:1d:52:dd:
6a:1c:4a:60:0e:aa:6a:f3:29:04:0d:b5:66:d0:fd:a6:6b:81:
39:9c:eb:be:52:10:1e:bf:6e:18:10:f5:36:40:36:60:d7:76:
2a:a5:e3:ca:5d:b1:80:f0:41:6b:67:41:68:58:d1:0b:09:f5:
54:95:82:ee:8b:02:16:40:ab:69:ce:d5:41:e9:27:50:01:05:
ca:34:4d:fd:04:0f:f5:5d:5c:d6:d8:e7:bc:45:c8:6a:90:c3:
85:bb:44:48:e7:b2:79:8c:9a:36:06:38:43:cd:48:e9:a0:0a:
e5:16:62:b1:74:8d:41:9c:31:11:fd:c5:f2:70:43:6d:f3:a2:
31:d0:6a:02:25:67:0e:ef:65:e2:34:ac:2d:26:60:69:04:d2:
ac:8c:d7:3d:5e:7f:60:b2:e3:88:5f:ef:16:dd:ed:be:e9:02:
cc:90:03:4d:ba:df:73:2f:33:96:64:1a:17:49:af:f5:16:52:
8a:cf:e6:5e:ec:c6:f9:7d:58:1b:70:40:d5:c6:d4:e6:02:8f:
e0:47:0b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:56 2026 by rpki-client