Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
File: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json)
Hash identifier: EsW9mA04QVq7wSXEjpJj6vOewI7iq7AvQj9vTTYJkQU=
Subject key identifier: 1B:B8:CC:E9:D5:85:BC:61:52:B4:4F:BE:E1:8E:C8:7D:AB:E0:47:56
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial: 019D39412E3A6C60CB5CBEDA6837E611EEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 11:01:06 +0000
Manifest this update: Sun 29 Mar 2026 11:01:06 +0000
Manifest next update: Mon 30 Mar 2026 11:01:06 +0000
Files and hashes: 1: 1OhU1ba4r4lAxG-v3HBo5kpowjY.roa (hash: uhi47WtmC1HtS+uzfaoWnsMLVST1oI2GfXGXB1P0CWo=)
2: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: nzUqI2lafUiPGYBRrXtWzO33adRmmtboDbydRQ0kY2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:2e:3a:6c:60:cb:5c:be:da:68:37:e6:11:ee:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Validity
Not Before: Mar 29 11:01:06 2026 GMT
Not After : Mar 30 11:01:06 2026 GMT
Subject: CN=1bb8cce9d585bc6152b44fbee18ec87dabe04756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:22:95:52:e8:f8:40:dc:a6:4c:39:3e:15:11:
9b:36:32:83:32:62:a2:49:44:b5:c2:5d:32:c7:35:
f0:93:90:45:31:69:a1:2f:94:20:26:a7:f6:f7:67:
61:e2:34:85:43:01:17:a2:73:3a:b7:24:0b:44:7f:
97:3d:31:b0:7a:82:a2:9e:50:e2:57:22:60:2e:ba:
d2:cd:92:b2:c6:e9:d3:17:06:4a:66:de:37:53:c2:
c3:74:d2:cb:3e:10:dd:64:ae:a4:88:27:35:50:50:
3f:f5:d7:49:00:af:c2:fa:c0:b1:32:4b:36:95:6b:
0d:97:0f:ee:5a:b6:a0:51:c7:88:64:ad:05:49:ed:
de:c5:ac:5c:3b:b6:92:14:b1:90:b5:7f:6a:3f:48:
bc:d2:05:90:73:65:d5:1a:f1:bb:69:47:1a:12:7c:
cd:43:ca:f7:90:80:5d:84:7f:e0:44:ef:28:e7:55:
ff:e9:0f:c4:57:87:1f:16:88:42:17:6a:07:23:47:
e1:a9:2b:14:cd:16:51:04:55:9c:47:02:c6:b0:0e:
c5:96:c1:0f:92:76:81:22:b0:cc:9c:5f:0f:61:e7:
22:e1:25:11:1f:d9:3b:2d:b4:5f:5a:21:4d:a3:e9:
e6:27:72:08:65:8c:84:3d:ad:b5:a0:74:58:23:f2:
7a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B8:CC:E9:D5:85:BC:61:52:B4:4F:BE:E1:8E:C8:7D:AB:E0:47:56
X509v3 Authority Key Identifier:
keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a1:32:cb:30:17:82:28:c6:20:8a:72:9c:25:ff:78:09:f5:
a0:22:f0:e2:2c:8e:6f:77:20:61:1f:11:47:a0:b5:75:42:ff:
a8:50:44:4b:1b:f2:cd:a9:9c:97:7f:21:87:88:f5:fb:88:be:
ff:c4:c7:9f:c4:77:fe:63:c3:03:52:cc:96:9c:67:9f:a2:5a:
30:e1:ad:f0:5a:d5:9f:92:03:1f:fe:29:c0:75:04:29:be:42:
ae:f3:91:d9:b5:37:41:c5:f3:a9:48:4b:12:75:26:58:7e:f0:
05:14:3c:cb:53:c0:d9:9c:25:f2:94:ba:e5:fd:a7:20:79:4b:
9a:25:9c:ed:e5:fd:2c:60:2a:79:6e:90:aa:92:26:e5:be:30:
44:d4:11:b9:e6:4f:b8:e1:7a:19:9f:08:8b:e1:39:c7:69:76:
19:0a:e2:4f:0d:7b:5f:d0:17:13:c7:b4:2e:d4:68:59:20:ee:
2f:be:30:0f:16:f0:c8:8e:ae:e5:ff:06:7f:70:ec:63:86:c9:
2e:95:78:90:61:59:dd:85:ae:eb:87:91:33:8f:d4:ad:5d:a9:
86:ed:cd:89:78:24:57:9c:af:64:98:5a:65:75:88:8b:3e:98:
3e:45:6f:3e:8a:32:ec:3f:50:13:9c:1d:77:4e:6a:68:eb:27:
29:c4:c2:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:11:56 2026 by rpki-client