Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
File: 4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json)
Hash identifier: FjLFaihr2PNsU8VXHP9M+NzLWMBYkGNQfx0W5MsC+qw=
Subject key identifier: 15:93:FC:7A:ED:09:0D:96:51:42:CF:A4:C4:31:B9:FC:B8:45:20:0A
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Certificate issuer: /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial: 019D37F6F0B14F79035BE8A5933750EDD619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
Manifest number: 1898
Signing time: Sun 29 Mar 2026 05:00:23 +0000
Manifest this update: Sun 29 Mar 2026 05:00:23 +0000
Manifest next update: Mon 30 Mar 2026 05:00:23 +0000
Files and hashes: 1: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: UtqLw53w8Ylw+RvaaV2Yu7D+0k7dWBrhPfdD+NO+Vmw=)
2: HMpkFnFRNLrRrrjLr9m-Ha2OMAk.roa (hash: MvD+kW64gasfrmfOU4x0HNuN58jbkr9LphVnvyCI/70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:f0:b1:4f:79:03:5b:e8:a5:93:37:50:ed:d6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
Validity
Not Before: Mar 29 05:00:23 2026 GMT
Not After : Mar 30 05:00:23 2026 GMT
Subject: CN=1593fc7aed090d965142cfa4c431b9fcb845200a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bc:4e:04:fc:cc:7f:8b:62:89:1e:8f:05:4c:
88:b6:ba:ea:6f:23:4d:19:3d:80:46:34:fe:0c:92:
27:ed:46:27:47:7e:82:e2:6b:09:cc:21:93:0d:35:
86:4b:02:74:fe:32:8b:25:8c:6c:65:41:df:86:58:
fe:4d:c0:a1:d3:8e:a8:57:6b:87:0d:0a:31:77:69:
81:e4:37:63:28:f1:d4:7e:0c:90:79:30:30:ff:d4:
08:64:c4:45:a0:1f:65:99:7c:84:c7:74:34:69:ac:
c2:06:a1:64:74:bf:66:7d:d2:0e:8b:a6:ca:27:e6:
72:4c:63:ad:c0:c8:0b:b0:0a:ad:43:4a:eb:3c:db:
44:1a:b4:83:21:2b:20:a4:09:82:80:e5:23:07:a5:
1c:df:2a:9d:41:6e:90:71:84:45:ad:0e:1c:38:6e:
14:5f:6b:b1:9d:d9:1e:1c:55:c9:8d:c9:86:9b:cc:
c4:9d:22:20:4c:62:b5:a9:1f:2a:f9:2e:9d:98:eb:
71:84:c0:5c:82:2d:0c:fb:4e:82:bc:1b:9a:65:c6:
71:d2:40:53:34:b9:20:47:f3:cd:ec:40:98:b6:59:
2f:5d:f4:31:e5:0b:e8:9f:83:75:81:06:c3:c0:b8:
fe:1e:68:c6:34:c0:a8:aa:c1:d3:df:4c:eb:33:d6:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:93:FC:7A:ED:09:0D:96:51:42:CF:A4:C4:31:B9:FC:B8:45:20:0A
X509v3 Authority Key Identifier:
keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:38:d8:41:cb:de:a6:34:99:5e:43:17:df:0d:65:3c:bb:0b:
04:14:94:61:fc:05:a5:43:01:de:bb:80:2c:89:c4:4a:62:ad:
83:e9:ed:35:df:d8:64:c6:b9:18:e3:9c:6a:ed:0b:4e:ec:82:
a7:3d:65:4e:9f:17:da:ca:5c:01:92:24:14:40:fe:11:e0:2b:
a4:e8:0d:b2:2c:c1:fb:d7:67:08:7b:cf:8f:99:25:33:35:29:
33:00:59:6a:b2:40:82:1d:26:93:75:dc:97:ab:41:16:22:c7:
20:5f:57:e9:00:90:6d:85:e0:c8:8f:e1:be:ba:df:01:73:6a:
65:68:92:2a:7b:0e:aa:91:f5:10:02:e9:b7:df:b0:bd:48:41:
4d:34:35:bf:aa:1b:d8:6d:39:0d:8c:b6:0d:c8:30:a5:7f:b1:
79:f0:ef:d3:07:ba:41:bf:6e:98:b2:26:68:9e:e6:ea:e8:43:
15:21:ec:22:1e:68:69:5f:46:eb:ca:d6:bd:38:60:61:8f:b9:
7b:a8:cd:ae:b8:ba:33:da:a0:42:69:61:c8:b2:8d:ca:5e:47:
fd:44:ae:d7:76:7a:67:15:db:d4:4f:2c:2e:ae:a5:85:e6:cc:
d3:1b:f3:e0:f8:05:d1:30:ad:28:54:20:44:53:55:93:32:88:
ca:78:2b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:44 2026 by rpki-client