Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier: i8RnyuY7ub0GxCEaUuZHWgMZS3bC+ETaPgbWfXfzl6Y=
Subject key identifier: 64:B0:0C:48:18:A2:99:5E:E4:1B:48:AD:31:2E:E2:CF:21:FF:E5:B0
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 019D371BA4BD39C3685651607EF6FAD4894E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number: 0FA1
Signing time: Sun 29 Mar 2026 01:00:51 +0000
Manifest this update: Sun 29 Mar 2026 01:00:51 +0000
Manifest next update: Mon 30 Mar 2026 01:00:51 +0000
Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: TVWbrfOE1Pj3GNuJgV25zs5/nPWry0+k67r91bTrO3E=)
2: a9UUQvVUQnxe273U6aniMeuVSV8.roa (hash: 7vEXbXNqwlMSgJyfX4S5RjxAdbJ6vW8VHoOqOei233g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:a4:bd:39:c3:68:56:51:60:7e:f6:fa:d4:89:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Mar 29 01:00:51 2026 GMT
Not After : Mar 30 01:00:51 2026 GMT
Subject: CN=64b00c4818a2995ee41b48ad312ee2cf21ffe5b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:68:3b:9c:59:4a:ee:4e:0d:31:bb:be:3b:
5a:0b:a7:cd:86:bf:5d:da:eb:3e:ff:84:e2:b1:a4:
73:47:68:9a:13:59:25:61:e7:61:75:99:5e:67:69:
43:db:0c:a7:2b:52:a9:a0:9f:98:57:82:55:86:6d:
40:d4:65:ae:a0:f1:fc:4b:47:28:45:af:f6:63:6a:
dc:4a:a2:a0:78:e1:8e:7d:f9:2a:c0:0f:c4:57:85:
b7:7f:e5:2a:9b:2a:84:23:95:d3:5a:7c:a3:7e:3d:
a2:05:68:6b:b3:4b:18:67:a8:6a:05:2f:e5:ca:32:
7f:2a:52:e3:06:24:35:26:30:fc:65:0b:87:38:7e:
e0:7c:40:3a:35:2c:27:ad:d6:30:dd:05:e1:35:bb:
19:e8:65:db:2b:1e:e4:78:74:f0:3d:00:ab:fc:9a:
25:81:97:f4:69:25:c0:c1:1b:ef:2a:72:4b:50:a1:
3d:5b:c8:97:f2:48:88:52:b7:e8:f3:62:5e:48:7e:
a8:63:c7:12:dc:f4:90:dc:59:48:52:6e:0e:67:38:
1b:aa:41:2f:93:f2:8a:c1:44:24:46:5a:e7:01:23:
d6:71:df:51:9c:28:65:4f:b4:c0:f5:09:9c:fd:a2:
7b:e4:10:5c:bb:b8:bc:f0:7b:e7:0f:2f:9d:58:48:
21:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B0:0C:48:18:A2:99:5E:E4:1B:48:AD:31:2E:E2:CF:21:FF:E5:B0
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:e0:4b:6a:01:a9:28:7b:10:71:a2:09:f3:74:66:61:08:93:
71:e9:bb:4f:86:a5:80:5c:9e:c0:5b:3d:d8:58:9e:9e:13:3c:
1b:5c:b4:65:b8:a0:1f:a9:c8:83:44:72:c7:84:8d:24:66:ce:
a4:93:16:39:74:ed:ae:46:8e:c2:0b:26:d4:82:ba:69:68:cb:
df:57:e8:17:94:a2:11:4a:83:93:84:8f:dd:0c:fa:28:83:b3:
2c:8a:b7:ea:80:6b:31:8e:75:73:3c:c1:be:99:2c:01:f4:db:
40:b8:e3:fe:1f:63:eb:22:0b:63:b3:0b:32:ff:7b:4a:f3:28:
73:b7:14:9f:b8:22:0d:2c:d6:22:ab:95:cc:f8:ed:ed:23:08:
c1:35:ce:fc:60:52:ee:3b:3e:cc:28:5c:85:7c:6a:7b:37:e3:
60:27:42:3f:24:04:21:ab:bd:f0:2c:e4:c3:94:76:4a:b6:bb:
70:90:8b:f8:00:90:da:c9:c2:0a:e9:e5:c1:ac:5b:18:95:cd:
c8:a5:03:24:21:c1:49:1f:d3:da:b7:7a:5d:19:d5:41:31:7b:
9f:0a:59:7c:1b:9d:b8:98:a3:23:cd:33:51:1b:08:3e:cf:03:
a4:81:06:74:d3:6e:3f:8a:a8:45:0f:30:88:5f:66:62:24:0d:
89:e5:86:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:21 2026 by rpki-client