Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: tY8YMZ6HuiXrtnjMk78IQGh4kXYJsrN+J5vnvWFyoOE=
Subject key identifier: CC:2B:1E:30:B7:97:1F:CC:B0:7E:BF:0E:22:6F:40:94:16:49:01:FF
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 019D37F772FA6EE14B06783B3D053CC392FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:56 +0000
Manifest this update: Sun 29 Mar 2026 05:00:56 +0000
Manifest next update: Mon 30 Mar 2026 05:00:56 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: LaZGmyzwetAayWq+4Xghm4Iz6GTacoeNGz1cB44BZs4=)
2: ACoRCKM1CjGNoLSMyaGlPpBc-kk.roa (hash: k43BMZFCEHCe5ac3+lgii08XLhekVbwoHtiG/FwXDec=)
3: cSy_DoVPuYaA2WCzJ_gfwMeKrcg.roa (hash: rYHJYIx7h+jpfMPSSONXY/ad+DKlzYjKVh77kFCnfVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:72:fa:6e:e1:4b:06:78:3b:3d:05:3c:c3:92:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Mar 29 05:00:56 2026 GMT
Not After : Mar 30 05:00:56 2026 GMT
Subject: CN=cc2b1e30b7971fccb07ebf0e226f4094164901ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:ee:f7:44:bc:bd:bb:62:22:a6:7c:22:0b:f5:
09:93:16:16:5f:fa:d9:71:f0:ec:94:36:5b:e1:80:
96:b2:23:ae:02:25:35:85:67:71:56:9f:d1:db:ef:
c5:ee:a1:2c:13:50:95:57:d1:bd:49:c9:f7:32:4c:
4a:0e:4e:89:69:c3:12:81:0e:43:1b:92:f8:ba:95:
0e:a3:0a:02:9f:0d:59:a6:e4:13:ce:29:8e:e5:44:
39:f2:17:de:3e:60:52:33:c0:ec:0f:f5:7c:ac:0b:
e1:b2:b6:7f:1e:ed:38:b5:70:b8:08:6e:3e:a6:31:
50:ab:59:ce:b5:e2:07:9e:31:6f:9b:d5:3b:fd:2b:
9c:31:54:32:a4:f9:cb:2e:b7:5c:94:e5:8c:07:dd:
8f:f5:51:bf:1d:ad:ae:8f:e5:83:e0:0c:d1:18:9a:
71:97:b1:ad:49:2c:31:bc:98:6f:9d:e5:1e:a9:4e:
ba:c1:df:48:40:29:22:b8:d7:79:3c:ae:b3:c6:ca:
1e:19:ca:21:65:57:a9:18:13:89:8d:4c:04:90:68:
25:8c:a4:3d:68:51:0f:cc:23:65:82:f9:db:91:c5:
15:93:bc:95:b7:5e:76:09:40:48:97:d0:33:48:65:
cb:7a:d0:f1:75:4b:41:4f:c6:d4:c5:eb:fa:09:49:
05:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2B:1E:30:B7:97:1F:CC:B0:7E:BF:0E:22:6F:40:94:16:49:01:FF
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:71:ef:45:7a:b2:58:95:e6:2b:31:79:1e:4d:90:bc:33:18:
63:e3:8c:7e:d5:c9:df:3e:a3:03:bc:06:d7:82:aa:47:80:ee:
3f:d2:6a:6a:17:be:5a:7c:41:d6:f5:b6:9e:fb:f1:a7:85:8d:
f0:b7:8e:9e:16:a0:98:ea:29:7a:f5:64:c4:76:c7:76:36:d4:
06:b2:e0:6a:d0:9e:ac:96:e5:3c:56:55:f1:52:2e:19:56:f8:
69:5c:55:47:22:96:81:0b:ef:ae:4f:01:69:cb:e4:77:f7:a5:
2a:98:3a:b5:b7:ad:f7:63:41:95:1e:3d:72:ac:42:07:31:58:
7e:6b:1d:cf:f3:01:84:88:99:6f:65:ca:02:fd:76:fc:4e:87:
ad:f8:b5:d0:b4:1c:8c:ba:01:75:63:d4:41:77:c7:42:7c:ee:
74:b5:cf:61:d5:fc:71:54:68:3f:80:63:17:57:81:2d:04:83:
d7:dd:31:c0:69:29:fa:de:ec:c3:81:dd:62:88:0c:dd:77:7b:
af:02:46:8e:a6:9b:e5:b3:85:19:10:71:01:7a:1a:90:e0:6e:
45:95:9e:ca:3e:e5:b2:f5:29:ea:6d:53:7b:0b:db:74:16:e6:
98:74:d4:67:cc:d5:ec:1a:f9:8e:f5:38:56:a1:cb:9b:bd:0e:
77:5a:e0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:35:08 2026 by rpki-client