Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
File: 4jRLpjQJYdpe60riOemgYmd5Pi4.mft (raw, json)
Hash identifier: b7o/PqCKCHLIgcO8C93sBTZrR9rW5HD6EH3h3rbiGHI=
Subject key identifier: AF:6D:FC:8A:38:74:BB:14:EF:5C:13:25:2C:53:EA:22:FF:53:F5:0A
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial: 019CE6A42590A297AFD65A9983583C768086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
Manifest number: 0EB8
Signing time: Fri 13 Mar 2026 10:00:43 +0000
Manifest this update: Fri 13 Mar 2026 10:00:43 +0000
Manifest next update: Sat 14 Mar 2026 10:00:43 +0000
Files and hashes: 1: 0okF-0SC05COeO8yZcXV41DKYTQ.roa (hash: 84QdZnJ3IbXKy/3dxIJgvDtuCv1JRPJqt/K+MUPi0mI=)
2: 4jRLpjQJYdpe60riOemgYmd5Pi4.crl (hash: 9OgFxsxBBU82z599ze+Q4ncg9opHbCjNr58Cq7AmFqM=)
3: FR-mBIRRF77kp9f_A_tdLCi7jhI.roa (hash: ls0AadaeNbnlTalpbJupO/oWIdL0LohHfGz3dRZulFc=)
4: kJytGYOElfqrC3DHKmoh96BhevM.roa (hash: /mTOzryyb1u7CjMFfOIX5gO5vlkkJlQ566zrAJlL2zU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:a4:25:90:a2:97:af:d6:5a:99:83:58:3c:76:80:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Validity
Not Before: Mar 13 10:00:43 2026 GMT
Not After : Mar 14 10:00:43 2026 GMT
Subject: CN=af6dfc8a3874bb14ef5c13252c53ea22ff53f50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:a7:b1:1a:fb:a5:c5:4c:c7:09:ab:34:a5:
b0:87:c2:d3:9b:61:0a:52:71:fb:64:07:58:af:35:
38:da:55:8a:00:c6:90:19:6d:1c:d3:51:72:6c:cc:
ea:ea:db:d3:fb:0c:ff:23:23:2a:5a:b1:36:db:56:
01:ff:76:43:76:d3:34:58:ab:8a:e1:85:3d:97:3d:
24:bb:38:00:42:b5:3b:de:e6:54:14:95:10:aa:bf:
d0:2e:54:50:73:fd:b3:7b:e4:2a:73:f6:5c:5d:46:
7d:9f:86:22:5a:ab:fc:ea:57:a0:9a:24:bb:74:59:
38:7e:e6:fd:f1:a4:96:de:08:95:fb:3d:83:5c:02:
b1:c6:73:0c:a2:5d:85:5b:e2:96:1e:bb:81:17:bf:
d4:d8:fa:a2:74:ef:45:63:41:89:29:7b:4d:fa:c8:
55:ca:ac:13:65:f2:dd:36:45:58:a0:7c:ec:36:d6:
93:c9:70:b3:d0:73:df:c7:f2:38:d2:8a:00:5c:9e:
7d:ca:83:8e:77:8a:c3:40:e9:ed:f5:c7:22:5e:6a:
de:0c:f7:22:97:0c:02:ba:22:36:e7:53:6b:16:b5:
5c:f5:37:22:f1:63:5e:56:d4:82:5b:c3:23:55:f9:
8b:0d:73:49:e4:c1:cf:77:f6:3c:90:61:51:87:71:
a7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6D:FC:8A:38:74:BB:14:EF:5C:13:25:2C:53:EA:22:FF:53:F5:0A
X509v3 Authority Key Identifier:
keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:db:fc:4b:fa:fe:c0:b7:cd:b2:72:19:f5:b2:64:6c:8e:0e:
6b:9b:77:d9:2b:8c:cf:a8:4c:b9:61:46:f4:47:17:07:81:74:
f2:43:70:83:12:32:78:40:d9:06:e9:d4:d9:1b:5b:38:96:24:
9f:22:3b:91:5b:3b:a9:d7:03:5a:b5:fa:99:ad:df:cf:18:97:
c7:d5:39:94:f4:d4:de:c4:41:2c:84:00:bd:c5:9a:f7:1f:3f:
73:a6:81:43:7b:d1:18:40:52:0f:9f:dc:fb:02:98:f8:db:bd:
e0:4a:ea:11:c9:90:e2:fe:52:d1:b7:dc:80:4a:bb:29:32:58:
e8:79:df:1e:b9:a3:d1:fe:d1:8a:97:13:78:95:83:75:8d:d9:
aa:e9:42:f3:41:bc:6d:65:7f:f6:dd:ba:86:67:33:ea:7a:ec:
1a:d2:dc:b1:78:64:a9:30:84:53:ff:45:2e:52:37:a0:58:41:
df:9d:7a:83:61:5f:0a:59:11:b0:9c:6f:e3:fc:4c:42:cc:45:
96:cb:14:cd:76:1e:d1:3e:01:06:9a:72:a7:02:c2:9d:5a:1a:
2f:4e:75:4b:a5:96:0d:0a:6c:ff:46:f4:ff:ef:45:26:27:33:
11:1d:1a:f1:6d:14:43:e4:6a:35:d0:49:eb:8b:fe:1b:af:44:
5b:66:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:46:30 2026 by rpki-client