Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
File: 4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json)
Hash identifier: vtwI7FeX6jMg413p7lnAft8ISTmHzDaaeIU0rmjyyB0=
Subject key identifier: 0E:DA:67:3E:81:A2:79:2A:D2:EC:2E:AA:FF:43:E7:1F:A7:CD:FF:7D
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial: 019D37525CBFBDB5979DA18D69DB5C9C26E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
Manifest number: 1476
Signing time: Sun 29 Mar 2026 02:00:37 +0000
Manifest this update: Sun 29 Mar 2026 02:00:37 +0000
Manifest next update: Mon 30 Mar 2026 02:00:37 +0000
Files and hashes: 1: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: vizgPnP/IeE/fekQ2QngTTvWBcSZiWRE59rKRJjgPfM=)
2: _kQ6sm_mo_p1SKdQoRItAP8rezY.roa (hash: FamL8pGq13zRSsk9bbJZ26sKBwj3qZkJI9rn7zZOeO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:5c:bf:bd:b5:97:9d:a1:8d:69:db:5c:9c:26:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
Validity
Not Before: Mar 29 02:00:37 2026 GMT
Not After : Mar 30 02:00:37 2026 GMT
Subject: CN=0eda673e81a2792ad2ec2eaaff43e71fa7cdff7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:b7:03:6e:24:17:01:88:6b:1e:8f:63:03:
75:42:28:f2:8f:75:bf:9f:62:c9:2e:c0:96:7f:9a:
5b:a3:36:e7:10:d7:ef:65:4b:46:46:32:da:fd:80:
dd:04:54:da:45:2b:a6:cb:6f:87:69:65:34:4a:a2:
3e:2a:99:c5:2a:1e:57:c7:bb:85:24:91:e0:e6:b9:
d9:98:69:70:6e:5c:c7:d1:dc:16:86:73:62:36:85:
65:bd:3a:f2:d3:44:4e:e4:a4:74:91:c2:8a:b1:17:
0f:e7:2f:dc:96:29:60:4b:db:99:cb:51:54:1f:27:
83:dd:3e:d9:ec:1a:fb:df:b0:be:95:f3:5b:17:50:
8d:fa:e3:a3:62:25:80:13:ea:b9:36:06:1e:4d:6f:
36:f8:f9:ad:c8:3b:af:f3:17:7c:8b:9d:25:28:ac:
c5:20:fe:57:f1:88:df:ea:09:2f:a5:1d:a4:9d:8d:
1c:3b:2b:21:7e:7b:13:b9:7a:7a:2b:b9:f0:cb:5b:
07:d5:f0:d9:6d:77:42:53:13:4b:11:4b:07:16:88:
2f:8d:a2:d4:ed:16:9e:55:36:7f:e1:2d:5b:b1:c9:
e2:ae:6a:02:60:1f:40:ad:7f:c9:40:af:dc:fc:89:
ba:9a:d6:85:3d:c2:be:a9:2b:92:94:10:d4:da:78:
42:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DA:67:3E:81:A2:79:2A:D2:EC:2E:AA:FF:43:E7:1F:A7:CD:FF:7D
X509v3 Authority Key Identifier:
keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:1b:29:6f:cd:ca:36:62:bb:49:16:df:28:47:4c:3e:3a:b5:
0b:2f:fc:5d:52:b8:66:bb:a2:49:5a:29:99:9a:e7:aa:cf:80:
69:12:d6:91:04:7b:f4:3b:6f:ef:49:62:e7:2f:a0:72:5a:a6:
4f:4a:cc:81:a4:2d:4d:d7:9a:b7:22:ea:37:38:1c:ae:30:b6:
65:a7:2e:16:f5:ce:cc:92:bd:79:e1:b5:f9:b8:47:db:c7:ad:
20:e5:f3:bd:44:6f:c1:99:c9:ad:c7:92:47:0a:da:14:8c:64:
f4:3a:35:6c:42:bb:9f:71:b4:ee:d4:22:82:e5:d0:aa:74:1b:
f8:a6:7b:73:6f:05:8a:bd:bb:ef:e3:01:76:ee:a5:74:9c:2d:
b1:01:8b:a0:03:b2:94:84:82:7b:63:e5:9d:e7:f5:d7:f2:6e:
70:98:61:3d:7f:da:e9:09:55:6d:22:26:1f:22:00:4d:0e:44:
3b:e2:69:cc:6b:cb:8a:43:f3:51:2b:35:d7:a9:65:64:8e:ce:
27:0e:98:33:0e:fb:3a:56:52:c0:0e:f6:d4:d7:ed:72:48:c7:
a1:28:83:48:4c:4e:25:31:5f:16:20:6d:fc:c7:a9:ec:f4:d3:
fd:72:e9:23:e5:07:bf:03:5b:0c:fd:21:68:eb:1f:20:d6:1b:
bb:d6:f4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:37 2026 by rpki-client