Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: OXh19pmHK5QCrHI7Nj8w/yabFPKv6BdVaF8Vi0KeRm8=
Subject key identifier: 0B:AA:C4:EB:FF:CB:34:6E:1C:F0:40:BC:46:90:25:01:12:EB:B1:60
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 019D382E1FC6293864209EE71EB162DF8C5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 06:00:39 +0000
Manifest this update: Sun 29 Mar 2026 06:00:39 +0000
Manifest next update: Mon 30 Mar 2026 06:00:39 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: T+Fe4OZTzDGSbgYK3YiXI2bV+yyYZhwLtncmQMISNng=)
2: aD4aJMmaQg_1w8VUSr55ba35-_4.roa (hash: 3Ez4Ad6m2JnI3XnTs61pJ+5b17Kb2kmyt6ZM1f7rwSI=)
3: g2k94sbrfkriJ_TYzjO-TqZlMBM.roa (hash: 1ZkSwSDFlimbj/n4XoixvGsfM3nfxp389BDAwVqw2BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:1f:c6:29:38:64:20:9e:e7:1e:b1:62:df:8c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Mar 29 06:00:39 2026 GMT
Not After : Mar 30 06:00:39 2026 GMT
Subject: CN=0baac4ebffcb346e1cf040bc4690250112ebb160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8f:2c:5a:09:fd:2b:12:ae:46:4e:d0:c9:3a:
da:46:90:53:2b:9a:e5:1d:d2:b4:83:3a:4d:b2:b9:
85:18:dc:29:52:30:a4:1a:2a:64:92:25:63:e4:5b:
d6:39:56:e6:e3:84:c7:06:0a:49:4f:a7:41:e1:41:
3e:02:46:e6:21:5b:fc:54:54:e0:50:08:e1:90:75:
9b:8c:fa:36:6f:b6:ce:5c:ca:39:d8:99:da:7a:92:
0b:aa:2f:1a:19:eb:51:ac:55:6a:6e:16:a4:50:9e:
11:c5:59:dd:c7:54:d5:3d:70:e3:3b:55:e5:15:06:
5c:f6:1e:7d:26:36:cc:f0:6b:d9:e4:50:22:a1:ee:
6d:93:2a:e3:97:7a:73:1c:11:9e:54:d0:bc:ec:1d:
12:6c:51:1a:f9:22:a5:41:fd:4b:59:6a:f5:ab:2c:
07:6a:c0:f3:89:f1:83:7f:b8:e0:17:21:f7:04:de:
90:46:04:4b:94:78:1c:93:62:d2:dc:ce:3a:a9:2c:
ea:68:b9:df:d6:7a:8b:92:27:14:4d:b0:7f:fb:6f:
91:cd:0b:13:3d:54:34:af:7a:03:6e:59:57:1a:de:
dc:0c:95:12:65:78:3f:3f:a9:73:fc:30:b6:a0:69:
a1:44:e1:49:3b:89:83:df:09:05:bb:0e:ec:08:67:
9d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AA:C4:EB:FF:CB:34:6E:1C:F0:40:BC:46:90:25:01:12:EB:B1:60
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:16:25:9d:ce:10:c1:ea:31:b5:25:bb:9f:da:d2:bc:0d:d7:
39:b7:ea:db:22:f3:bb:a2:3b:2e:b6:d7:a8:54:48:bc:0c:03:
ae:87:f5:67:22:62:3d:da:d6:cf:53:bb:b7:f7:88:24:f0:f3:
d8:d3:52:8c:1b:e1:fb:f7:66:c3:e4:8e:a6:82:99:51:e0:37:
20:8a:39:47:6d:0f:d1:19:b3:a3:3a:37:16:eb:79:a6:89:ac:
c9:9f:29:d9:55:a4:e0:28:cd:07:75:6a:5e:32:8d:dd:2d:1b:
54:8c:d0:82:d8:ca:b1:bd:d3:44:99:a9:ae:54:3b:97:d6:50:
66:99:69:2b:3c:ca:13:13:b4:54:29:c2:3b:ac:06:51:b4:5a:
9c:70:d6:43:79:d7:96:d9:db:f1:31:ee:c8:4e:50:24:36:4a:
da:77:92:21:83:f4:7e:a2:54:fa:52:a3:d6:25:d8:87:d5:91:
0c:9a:15:0b:1d:3c:8c:b6:9b:0e:e0:2a:85:46:50:65:77:d7:
88:1a:9d:95:fe:fd:93:96:f1:ac:de:82:bf:fd:90:4a:f1:11:
07:ff:48:01:f3:6e:87:a2:cb:a7:34:f3:7e:6a:8a:f6:e8:bc:
4c:55:a1:e3:e3:b0:9f:5d:d6:b6:2a:0a:0d:6e:21:7f:0b:05:
2e:6b:8e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:35 2026 by rpki-client