Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: CJclpaIZOvmduHB1x5wZFyFUsUGDmj8RHsSmd20jBkA=
Subject key identifier: F3:E1:D7:9A:64:05:3D:92:D5:B5:74:56:B0:B1:16:33:1D:0B:C6:6F
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 019CEA4AF6A2D6B77A40707BF7A8BEC9ABDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0F75
Signing time: Sat 14 Mar 2026 03:01:47 +0000
Manifest this update: Sat 14 Mar 2026 03:01:47 +0000
Manifest next update: Sun 15 Mar 2026 03:01:47 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: Jpqj4jgCBkQ0JyGm9SF3TCXTRZpqA8LO0SpA+Sk5uBQ=)
2: C2p4m5oAHBR4b9U98n94_vKEpDw.roa (hash: k7x5kSsiwndiFj3n5RLjj9QM21o5JvrjtmVJtRBC0sk=)
3: _Swl5gHDR66TZCO_pkS1vQ9SqpA.roa (hash: 3hG7Kqg7tej55cxB4vcGvkTLY6M+LbT5b2wG9YFhS4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Mar 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ea:4a:f6:a2:d6:b7:7a:40:70:7b:f7:a8:be:c9:ab:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Mar 14 03:01:47 2026 GMT
Not After : Mar 15 03:01:47 2026 GMT
Subject: CN=f3e1d79a64053d92d5b57456b0b116331d0bc66f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:bf:d7:31:34:d4:68:5c:d2:a4:03:df:6f:
04:4d:f2:b7:78:c3:24:0c:b0:7e:35:a9:02:3c:1c:
7c:5e:4e:c7:ee:34:f9:66:3b:d7:05:54:b0:3a:09:
ce:32:ce:46:04:99:fa:a8:db:38:10:70:2c:34:ce:
48:e6:09:53:f6:02:80:85:30:22:eb:66:f5:30:fb:
c3:fc:7d:3f:ef:96:50:0f:db:66:be:09:67:dc:ab:
17:af:a7:47:46:41:6a:e3:85:ac:93:05:17:48:ea:
b4:b0:23:f0:78:eb:f7:48:d1:89:b0:b4:16:e4:1f:
f1:16:31:98:6a:5c:4e:6c:71:06:74:0f:3c:9e:af:
07:12:43:ce:f1:00:01:c3:64:a4:88:f3:f0:c6:26:
fb:2e:3a:da:2d:f1:20:d0:c4:19:d7:2d:8a:33:54:
06:4f:ff:12:c5:8a:31:0c:85:d7:74:63:ba:d5:42:
fd:9a:95:01:da:22:69:dd:9d:8b:29:78:0c:8e:c5:
f9:57:bf:6f:80:1d:90:21:00:20:a1:18:b6:a8:1f:
80:6b:e4:7c:94:40:9a:96:fb:22:c9:bb:07:f8:1c:
45:cb:20:8c:4d:df:ad:7d:45:09:af:33:7c:36:21:
aa:95:c2:06:e6:58:c0:d3:c5:79:0a:8c:ac:fd:78:
31:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E1:D7:9A:64:05:3D:92:D5:B5:74:56:B0:B1:16:33:1D:0B:C6:6F
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fa:48:83:4c:36:ff:e4:a4:13:7c:92:ce:08:64:f4:31:c5:
ae:ac:2d:44:64:8a:20:47:94:28:db:91:f4:9e:5d:1a:2d:05:
79:04:79:ce:1e:66:3a:47:6a:ea:99:84:e4:48:c1:f6:1a:ad:
84:19:dd:2c:03:d0:48:1c:73:67:f9:2a:33:a8:c4:41:f4:5a:
b0:99:44:11:50:4b:27:cb:09:c4:ca:f1:bc:f0:13:37:aa:a4:
14:7c:14:dc:92:ca:90:cc:36:cc:f2:18:a9:80:2e:d5:5d:65:
5c:b2:7f:3d:38:e8:91:c5:80:d3:9f:68:50:e9:39:71:68:8a:
d3:cc:a5:e7:d0:0b:6a:c4:56:23:58:14:14:41:ee:79:ab:8f:
d8:57:ef:8b:fd:28:3c:2a:1b:42:78:f3:61:5e:91:ae:f6:ac:
fb:44:c9:94:33:fa:6b:43:33:d1:9c:ba:fd:76:8b:47:1a:75:
6e:24:f0:a0:26:dc:01:2f:a7:82:ab:52:2a:84:e0:b6:22:0e:
31:77:a8:37:aa:1f:d4:b6:c8:ab:1b:bb:1b:39:ec:9d:ce:74:
1a:80:9e:74:b3:cc:91:04:ea:8f:2a:23:df:4b:a5:d3:f9:7e:
67:4b:69:7a:c7:d8:33:64:d1:24:d7:f0:36:f4:bd:25:79:16:
ec:22:8f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 10:28:22 2026 by rpki-client