Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier: 4mp+6YdEJKLTpDtgS/eUjEy2b/dY7vfljFb4HHlFa0k=
Subject key identifier: 81:3A:00:9A:DF:98:66:3B:80:05:C9:AE:A8:B4:D9:0E:00:0B:AF:6F
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial: 019CE2910C19F67B6584BA132D90BC2D6B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number: 07E6
Signing time: Thu 12 Mar 2026 15:01:22 +0000
Manifest this update: Thu 12 Mar 2026 15:01:22 +0000
Manifest next update: Fri 13 Mar 2026 15:01:22 +0000
Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: ZQsReYmJKebuLfcoYWXChsYLvyEuvhYfdqxDgzbRFck=)
2: PhborNJW4v901OmJBHlugkCPu9Q.roa (hash: Woe0vtydZEfAzh9wNFeDl+e4gU+OEGllk8tizf6C77U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 15:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:91:0c:19:f6:7b:65:84:ba:13:2d:90:bc:2d:6b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
Validity
Not Before: Mar 12 15:01:22 2026 GMT
Not After : Mar 13 15:01:22 2026 GMT
Subject: CN=813a009adf98663b8005c9aea8b4d90e000baf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:72:4a:33:c1:29:e8:9c:d9:78:d4:21:1a:bf:
dc:51:3c:8c:96:8c:c5:56:d2:6a:b7:1f:a0:00:cb:
ea:e8:20:00:aa:28:90:4c:59:20:70:3b:24:4d:06:
14:90:a7:40:d3:f2:5b:37:b4:c0:c4:85:50:cb:1d:
bc:aa:50:5e:b8:0a:e1:58:09:f9:57:e1:0d:13:e7:
c0:0c:03:ff:0e:c2:b0:8c:eb:85:4c:7e:e8:cb:cd:
76:4a:f7:64:01:80:fc:fd:1c:d6:da:1d:c8:12:0f:
e1:a3:4b:28:17:eb:16:95:60:37:a0:d7:fe:f0:97:
7c:f9:95:4e:77:c1:0c:60:1f:fd:bd:b0:a3:87:74:
db:54:3b:60:e1:15:cd:62:6f:7b:24:6d:96:00:40:
a7:68:4e:8e:98:22:c6:f8:02:2f:68:c6:0e:fa:0a:
97:4b:f2:97:9e:1b:4a:cc:bf:aa:58:60:6f:7c:2d:
85:24:7d:87:ff:c1:15:e9:f4:0d:a5:a1:5f:c0:9b:
4c:5a:f7:71:ab:4b:cb:0e:b1:df:33:5f:fd:3b:db:
9e:aa:f0:23:d0:58:ec:15:0b:2b:39:c1:1b:99:53:
f5:6d:7f:cf:e0:94:99:88:4f:32:e3:7b:24:d9:02:
47:7b:45:9c:44:d1:88:1b:14:28:ff:24:7a:d8:28:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3A:00:9A:DF:98:66:3B:80:05:C9:AE:A8:B4:D9:0E:00:0B:AF:6F
X509v3 Authority Key Identifier:
keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:09:43:4e:b6:0b:5e:2d:ed:4e:93:3e:fc:15:03:84:a8:b2:
0f:36:b7:0d:a4:3e:08:9b:f8:5a:21:2e:da:4f:7b:a2:06:de:
55:83:4f:0f:f9:f8:75:f2:18:0a:f3:80:03:e4:c7:44:96:d1:
82:5e:56:ea:a7:ec:0d:c1:5a:da:8e:b1:78:ad:be:9a:3c:fa:
31:e2:ae:53:ef:97:19:11:38:42:2a:b7:f9:59:f0:47:1c:04:
06:43:42:ab:cb:da:5b:68:97:bd:62:db:e7:e5:a4:b1:13:be:
e7:f9:7a:32:f5:c7:7e:bd:cd:10:48:cb:de:72:aa:7d:9a:05:
05:00:19:35:94:f9:46:53:f3:d5:e5:87:1d:07:0b:12:92:71:
e3:30:71:6a:de:31:dc:e1:1f:01:f5:db:69:13:9f:0c:22:0c:
04:93:ff:e5:bd:28:52:8b:d3:f6:b8:05:ee:f8:5d:ca:6d:0f:
05:e5:0c:e4:5a:ae:be:6a:d8:c1:0a:65:9f:46:8d:ab:c8:e7:
e6:a2:1f:7e:dd:ba:c5:df:ac:ad:ec:95:7f:00:cc:a5:89:ad:
5e:83:18:d6:21:c6:d6:54:ec:26:b5:65:16:4c:42:f5:8f:2f:
f8:4f:6f:a4:63:55:20:52:53:84:38:e4:2f:2f:5f:8b:c3:03:
c9:9d:94:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 23:12:53 2026 by rpki-client