Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
File: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft (raw, json)
Hash identifier: wAA+ay4AClde4f/vcJxyX/PytFXGyAFtqC5l1oACJ1I=
Subject key identifier: 73:57:B2:6B:33:C0:3A:DD:EE:22:A3:02:DA:74:4D:F2:81:87:28:20
Authority key identifier: E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
Certificate issuer: /CN=e07e008d6ed2388ad31b7422423152a92a54de71
Certificate serial: 019D375263693ABFD5432241334CC6042BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 02:00:39 +0000
Manifest this update: Sun 29 Mar 2026 02:00:39 +0000
Manifest next update: Mon 30 Mar 2026 02:00:39 +0000
Files and hashes: 1: 4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl (hash: oHBtbQN5NrrPzcfwAc+9hSVmcYUDFVK33Fe2E5RfLls=)
2: qBE40uvjM3KhFoCteBLo6azxKqs.roa (hash: C60d4ehA+DJZSNtWiIvd1yDVO2n8d2kan5kGi6wEoXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:63:69:3a:bf:d5:43:22:41:33:4c:c6:04:2b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07e008d6ed2388ad31b7422423152a92a54de71
Validity
Not Before: Mar 29 02:00:39 2026 GMT
Not After : Mar 30 02:00:39 2026 GMT
Subject: CN=7357b26b33c03addee22a302da744df281872820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:52:42:dd:b9:6f:8d:98:a4:1d:96:59:05:3b:
b7:63:48:8b:8a:0e:7a:bb:70:5d:fa:fb:78:c6:9f:
c7:b6:c5:0f:c1:46:8b:45:89:eb:9e:30:26:ed:36:
10:36:b8:5a:bc:1c:4a:d9:78:4e:bc:1a:6b:fa:14:
c4:eb:f4:67:b3:3d:22:b6:5b:2b:91:cc:f0:d9:0a:
41:87:f3:bc:ae:66:00:54:65:7e:59:dd:38:ba:72:
1c:06:59:47:45:97:7b:1a:69:5d:0c:a7:b2:bf:8c:
3a:96:99:e6:a6:20:c8:44:56:9c:9e:75:a9:d7:84:
48:4e:25:ed:3b:7a:95:49:ce:99:92:16:cb:21:d1:
0c:c5:24:92:10:71:7d:74:25:74:cd:35:5a:6d:ee:
d3:43:6a:5e:68:f0:61:1e:2b:a4:ce:05:07:5e:2f:
24:1d:07:de:92:94:46:0d:8b:b6:e4:93:23:5e:ad:
4a:d6:95:0b:c9:16:1c:23:d6:42:8b:8f:da:85:d9:
5f:d5:cd:d5:09:3e:94:79:22:84:a7:59:f2:9a:12:
19:5d:05:d7:a2:a0:6f:3f:b5:31:28:13:f3:82:54:
09:17:4a:3e:94:aa:39:f7:1e:83:be:73:a7:c7:6b:
2d:c0:c2:5b:9c:6c:0d:dc:97:d1:63:7a:0f:a0:62:
0d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:57:B2:6B:33:C0:3A:DD:EE:22:A3:02:DA:74:4D:F2:81:87:28:20
X509v3 Authority Key Identifier:
keyid:E0:7E:00:8D:6E:D2:38:8A:D3:1B:74:22:42:31:52:A9:2A:54:DE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H4AjW7SOIrTG3QiQjFSqSpU3nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d479cc-a712-4bc3-832d-2727247af210/1/4H4AjW7SOIrTG3QiQjFSqSpU3nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7d:c4:d3:37:73:29:b7:7d:de:90:d3:e6:6b:02:7c:28:ab:
9f:22:cf:88:e4:5e:fd:5c:d5:a3:77:97:c1:58:c9:a8:98:69:
68:7e:c7:38:8b:d1:72:3d:7f:d6:40:f9:4f:d6:11:0f:37:24:
1d:5d:77:b8:5a:2e:ec:37:59:fb:c0:57:b9:c7:d1:d9:17:b6:
29:90:0d:a8:26:2c:fb:f7:3a:84:f3:58:88:25:05:f0:e2:f3:
82:a5:75:ca:87:69:b9:07:17:40:5c:f2:fb:5a:de:0e:74:2e:
bd:b5:9a:cf:e7:37:0d:51:c2:75:4a:be:4a:1a:10:8e:15:ae:
fb:6a:f9:d1:5b:7a:a5:af:76:cf:6b:84:66:b7:51:f2:c4:0d:
59:ea:92:b1:d2:c8:e3:55:a2:0c:18:9d:42:3b:ed:80:ce:4e:
a4:0b:b9:56:be:9b:9f:5e:1f:5c:fa:d5:5b:43:98:a7:66:df:
15:c0:38:4f:b4:a3:86:f4:17:25:4e:b5:22:50:5c:90:bc:41:
4b:38:a2:80:d9:67:c1:3a:8f:00:d0:96:4e:75:1b:34:0f:36:
bf:43:44:f7:c2:10:ae:7e:b5:74:24:12:98:de:11:9c:75:8e:
c1:3b:e0:a7:c7:c9:83:d2:8c:8d:1c:38:12:f1:5f:b3:d0:87:
23:3e:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:14:23 2026 by rpki-client