Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier: 8R7AXpd8HlunxbEp7/6akz+2eAGbxcxI4R+Eb/nsVK0=
Subject key identifier: CE:8A:04:7A:5B:94:CD:20:7E:D1:3B:75:F1:F2:47:77:3B:0E:FD:CA
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 019CB7A6924A9846FF4111D8A62021BBBC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number: 094B
Signing time: Wed 04 Mar 2026 07:01:12 +0000
Manifest this update: Wed 04 Mar 2026 07:01:12 +0000
Manifest next update: Thu 05 Mar 2026 07:01:12 +0000
Files and hashes: 1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: b7sB7LEVb0ue9Tw2oeudOfqhjDu1+AKtUgnvtqmZogY=)
2: iJ2dkGge62Vh8toLziz4BBDFsIU.roa (hash: FGUiRuQcTHwY2x/0lhI9Cq7axh0DNfE+YZZ6Pi8PjoE=)
3: sCOccEobS0CKX2jbYbLooprkkiE.roa (hash: Nm3XOh4/JChri89+OWUhzN86V5dk49MnIMuXjoKwQEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:a6:92:4a:98:46:ff:41:11:d8:a6:20:21:bb:bc:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Mar 4 07:01:12 2026 GMT
Not After : Mar 5 07:01:12 2026 GMT
Subject: CN=ce8a047a5b94cd207ed13b75f1f247773b0efdca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:aa:ef:9e:9c:91:3b:3a:e5:ce:e0:e9:52:1f:
5c:e4:61:7c:cd:86:48:8a:37:58:6c:b5:07:c5:f5:
4c:7e:9a:44:f8:55:ea:e2:50:3b:f2:59:38:dd:6f:
8b:4b:2f:ae:1b:e1:43:90:04:c5:2c:20:11:30:87:
ac:3c:a4:ed:e7:80:a7:49:a8:35:45:9a:d4:04:0d:
e3:90:e6:72:fc:90:be:30:f8:c8:17:ba:2a:f1:73:
1a:72:1c:e8:a7:8b:8f:56:46:1d:1b:39:38:33:0f:
b8:77:9a:72:76:e3:eb:aa:da:a3:cc:fe:28:7f:16:
59:ec:f9:a0:89:25:5f:c5:6a:ce:3c:eb:6d:69:14:
88:b3:3d:34:b8:92:98:f1:63:e7:0f:06:e9:12:67:
2e:1f:4a:1a:4e:6d:fd:8a:25:17:d7:86:d9:da:1a:
b3:a2:38:04:83:6a:01:91:f9:1b:02:48:ba:e0:92:
f1:9d:b6:3e:d0:c4:e1:7d:45:91:d1:42:80:6f:c3:
8e:5f:ac:f9:eb:0a:1d:66:e3:35:27:66:01:3a:97:
fe:35:f9:84:e7:d8:d4:7c:31:f0:c4:cc:df:c2:f6:
de:d6:3e:ae:5c:25:3a:6b:e2:ad:d0:06:3a:88:e4:
9e:7b:ff:21:f6:17:a4:5c:ab:d5:df:20:4a:2a:c5:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8A:04:7A:5B:94:CD:20:7E:D1:3B:75:F1:F2:47:77:3B:0E:FD:CA
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:de:61:e5:9b:f8:4b:33:f1:06:49:a6:46:e8:44:fd:1b:7d:
1c:5b:b6:e8:fe:a6:3c:7c:93:27:80:07:58:6e:6d:cf:f7:4c:
74:ac:37:1c:d5:0c:d3:b3:c6:87:42:c5:e6:2f:33:d3:44:62:
d0:91:91:ad:23:06:92:ea:83:26:3c:7c:06:98:37:c0:c8:23:
4d:4e:0c:c4:cf:bb:29:68:8a:63:d6:21:8b:85:b2:ab:50:0f:
bd:46:6d:cb:45:d6:6f:41:58:36:40:66:71:3a:20:c6:28:17:
9f:56:28:97:fc:0b:fe:75:fa:c1:04:87:92:da:35:21:8f:c0:
c7:0d:28:cd:b7:8d:35:ba:71:8b:0f:8b:45:1a:38:0c:2e:9c:
0b:0f:22:ba:43:08:45:3c:13:82:f5:17:98:a7:c3:87:e8:8f:
97:01:21:87:92:ae:56:4b:ab:1c:5c:d2:68:66:a9:5e:ab:11:
91:87:d9:e6:8c:5e:64:0d:4a:4f:6f:16:d8:87:21:fe:73:6a:
04:0e:3c:b7:0a:8b:ad:e0:ae:80:1d:60:3a:9c:e0:b0:0f:fa:
5a:34:01:e3:4a:c0:9a:5e:0d:a2:94:2e:53:f0:4d:b2:63:7d:
c6:b5:c1:0f:d9:51:64:4b:3c:20:a3:ee:f7:d1:29:52:a8:15:
10:4a:70:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 15:39:25 2026 by rpki-client