Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: XrNMJRmA9UtJJ2R5rLKsMDZiyJv+B+PHBPkOBbQjuDc=
Subject key identifier: 42:94:F5:A1:04:34:94:BC:81:0D:55:B9:AB:09:E7:01:4E:D6:05:69
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 019CE6DB2DCE90927FCA7D506A3ED3017162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 13FC
Signing time: Fri 13 Mar 2026 11:00:49 +0000
Manifest this update: Fri 13 Mar 2026 11:00:49 +0000
Manifest next update: Sat 14 Mar 2026 11:00:49 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: UrVPZM0bCYM9tZFHNdjyx+gCHLodZUySu1nvx5VPX5s=)
2: Tuyu4PDijXamcoBmvHaUR3Zhx1I.roa (hash: QNb3CvjoOXufsYPkEn/ZOrzMSuEn5o0O6f8GFs+m4Pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:db:2d:ce:90:92:7f:ca:7d:50:6a:3e:d3:01:71:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Mar 13 11:00:49 2026 GMT
Not After : Mar 14 11:00:49 2026 GMT
Subject: CN=4294f5a1043494bc810d55b9ab09e7014ed60569
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:78:36:fd:8c:f6:20:5a:5a:95:00:0c:3f:6b:
d4:76:fc:3d:1c:a4:1f:a6:58:37:59:ed:e7:2d:70:
93:fb:bc:da:c9:5e:ae:3b:c4:58:41:54:88:90:bc:
56:b7:73:4e:dd:1d:71:37:9f:b0:5e:0e:40:02:f8:
c7:7a:7d:7e:a3:be:3e:57:76:e5:bd:85:61:7c:98:
0a:f6:b5:10:64:4b:22:64:d9:7e:e7:e4:2e:0e:33:
b1:b7:c7:58:c7:74:a7:15:a1:51:6d:95:20:0d:1a:
47:13:cf:30:f6:48:4f:ca:82:99:51:69:02:b1:d9:
f2:43:ec:87:2e:d1:99:74:5d:f1:a7:b8:1c:e9:be:
f7:d9:13:d5:3a:ee:c2:16:9b:a6:72:81:3b:fc:d8:
7c:0c:96:37:a8:53:9d:d8:8d:f9:3e:48:09:a1:25:
05:ee:3a:97:57:73:57:36:74:80:5c:51:c4:26:8b:
c7:5d:dc:62:86:5d:7f:27:36:e9:6f:11:9c:4a:b3:
a0:44:46:49:5a:70:ee:14:ec:b8:a6:b2:a3:2a:dc:
00:0a:54:69:83:a3:13:68:2d:e1:eb:e0:da:aa:d6:
19:d8:c0:42:0a:51:5a:34:ff:b3:3b:68:f5:1e:a7:
da:e2:0a:e2:6a:d1:fc:3b:24:31:a7:69:6d:b3:f9:
af:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:94:F5:A1:04:34:94:BC:81:0D:55:B9:AB:09:E7:01:4E:D6:05:69
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:57:e3:7b:6b:60:e2:89:da:aa:e8:86:ec:cf:90:06:6c:69:
13:47:b5:e0:4d:98:72:aa:56:31:ef:18:c8:be:93:03:67:10:
f7:68:e0:af:01:fa:a5:3e:c1:d2:45:66:ff:63:1a:9c:bc:71:
28:e9:b0:b7:c2:cb:da:a7:f7:c4:e6:4d:47:13:0a:12:83:3a:
1d:66:c4:dc:96:3f:10:9e:d9:66:f8:e9:a2:40:03:a6:1c:14:
4d:4a:77:96:81:e4:91:dc:71:8b:9c:a5:4a:45:50:85:af:53:
ce:2a:dc:63:b7:1c:b7:83:b2:49:71:ac:a7:86:c8:5d:b7:a3:
9a:84:65:97:65:fc:db:99:da:62:3b:5f:56:5d:bd:c8:b2:18:
c2:a7:17:10:23:b8:77:45:41:4c:95:54:ee:39:66:15:76:60:
e6:39:33:93:d4:dd:5a:46:88:d9:b8:71:1f:32:70:31:67:2a:
3f:bb:59:58:61:9d:ce:77:11:e3:3d:69:1a:71:49:62:64:80:
35:56:ac:f0:aa:68:52:3f:39:6c:18:73:22:8c:7a:c8:cd:fb:
6b:d8:43:aa:10:2f:98:ef:74:64:85:bc:01:e8:71:89:41:9a:
c3:eb:4c:4e:0c:dd:4a:54:7d:56:66:75:df:28:c1:0e:e4:27:
33:e5:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:46:56 2026 by rpki-client