Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
File: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft (raw, json)
Hash identifier: BY/jf+OM8p/bDuGgCGd17W/+ZarzmhTB8XX3Yza0s4A=
Subject key identifier: FF:CD:1D:47:4C:29:64:5B:DD:9B:E1:58:2A:19:5B:06:E2:32:1D:79
Authority key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
Certificate issuer: /CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Certificate serial: 019D39E55A5C85E9544378CD3BE40C215A64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 14:00:25 +0000
Manifest this update: Sun 29 Mar 2026 14:00:25 +0000
Manifest next update: Mon 30 Mar 2026 14:00:25 +0000
Files and hashes: 1: 4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl (hash: yad/X3a+ALCUaug6zh5zBSuvAAtFjBCI6isfMnifWVw=)
2: R887zp6sFk_dmP9fKtjrY24hpnk.roa (hash: xMhP2OXxBMHOz2sXZctb+22OEYUQG/I6CAM/IUlPtic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:5a:5c:85:e9:54:43:78:cd:3b:e4:0c:21:5a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed
Validity
Not Before: Mar 29 14:00:25 2026 GMT
Not After : Mar 30 14:00:25 2026 GMT
Subject: CN=ffcd1d474c29645bdd9be1582a195b06e2321d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:55:19:6b:4f:9d:0e:85:22:e2:93:e9:60:d0:
58:f3:6f:0e:ab:bc:e0:49:53:a6:ea:16:ca:a0:20:
27:a7:17:3b:1a:5a:e3:8f:e2:14:91:ce:7e:15:18:
00:8d:f4:cc:09:b6:23:14:4f:6e:52:52:54:35:5a:
7d:1d:30:3a:ca:f8:73:5e:36:46:5b:52:e0:54:82:
4d:c7:b9:61:7b:ac:35:ab:af:2d:66:f6:69:11:6d:
3d:5d:34:15:5c:f3:2c:25:82:9e:88:5c:6a:0c:e5:
be:c2:94:88:fc:38:49:61:42:f9:a5:0b:8d:36:0d:
5b:ea:aa:8c:8c:d8:14:9e:1c:a1:a3:ff:ad:49:34:
1f:00:34:57:5d:c1:d6:1e:af:c3:fe:38:40:5f:e6:
1d:e6:13:d5:17:db:21:4c:3b:e4:de:20:df:67:f8:
b1:cc:f1:7c:89:7e:7d:e2:13:1b:ff:be:43:a6:72:
3f:a8:8f:fa:a4:a0:97:5d:f1:f0:c1:fb:9d:b4:26:
a4:d7:ff:02:27:d6:29:bb:76:5c:15:68:03:fb:a4:
c3:2e:10:54:39:bf:e1:87:ed:e9:b8:1a:c8:eb:f5:
3d:0f:9c:7a:22:a8:d7:e0:c3:63:04:72:f6:02:a6:
a3:3a:3e:31:fd:11:d1:4a:7a:7c:13:4e:e2:11:5b:
f7:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CD:1D:47:4C:29:64:5B:DD:9B:E1:58:2A:19:5B:06:E2:32:1D:79
X509v3 Authority Key Identifier:
keyid:E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:77:e5:28:76:f8:4f:6d:7b:57:90:13:1e:5f:d5:35:5a:c6:
d3:fe:39:1d:59:f4:de:ee:e8:31:fd:29:b7:5c:f7:c9:47:7c:
17:45:08:12:fd:39:9c:5c:c7:19:8f:c3:cf:ab:6b:d6:92:b4:
42:f2:8d:43:00:f3:f4:64:6d:60:32:22:3e:dd:8f:9c:b5:6c:
0c:76:d1:99:ae:57:1e:c2:19:16:52:63:1f:f0:47:e7:d2:22:
2c:ef:da:02:77:ff:c2:59:08:ac:41:4a:00:71:8f:1e:06:ee:
c1:e8:79:64:1c:89:55:ec:8e:51:57:30:f9:d6:45:3c:f5:8b:
23:2d:de:d6:9e:81:64:66:d5:8e:57:9f:a8:c1:b3:e8:ce:8b:
8d:82:b7:a8:e0:a1:91:f9:30:c5:b3:70:b6:3c:36:24:09:a1:
b0:d0:3a:af:e2:66:6e:0d:e4:5d:e6:a3:24:9e:96:07:f6:19:
7a:1c:47:1d:b7:e1:18:07:49:70:e8:64:62:e2:56:14:a6:7a:
89:33:73:70:d9:fd:87:ae:1d:6b:cd:60:c4:ff:3a:25:05:07:
f7:cb:b1:f4:e7:a0:1e:48:e8:7b:1d:06:b5:b7:ce:2b:11:4c:
77:1f:78:35:d8:95:b2:ee:5d:3e:bb:f9:33:ce:19:fe:f1:ad:
fc:30:10:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:04:43 2026 by rpki-client