Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: wgx8bDzM+i/PECcN0lPMnTG8E0wnWBSUkEQtUqpxdJM=
Subject key identifier: 9A:B7:69:7E:D2:1B:59:41:E8:8E:DD:97:47:99:6D:65:A2:4F:E4:E0
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 019D382E5FBBE615A09CE4B5B9611478EC07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:00:56 +0000
Manifest this update: Sun 29 Mar 2026 06:00:56 +0000
Manifest next update: Mon 30 Mar 2026 06:00:56 +0000
Files and hashes: 1: E3F3P-s1sahQLgCjYjpqg5ezDcQ.roa (hash: iGIvi874jRBhxZZbEUcwG0C99qEqnZSND8WgM3AT+F4=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: ukeL87d6H7/Gu70qFVIeCrHWdfPziQIVpO3JbDZ1/Lk=)
3: yUKdjmZYtQWjFFXFgM-27cUdhs0.roa (hash: ob1AlTKcmBmfwJd93MbWCK4KiRPHg8c27xb+FIsvFL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:5f:bb:e6:15:a0:9c:e4:b5:b9:61:14:78:ec:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Mar 29 06:00:56 2026 GMT
Not After : Mar 30 06:00:56 2026 GMT
Subject: CN=9ab7697ed21b5941e88edd9747996d65a24fe4e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e2:0e:34:ea:41:08:f2:9b:7b:ff:eb:6f:17:
46:20:4b:08:25:23:85:e2:fa:4f:91:09:52:04:0b:
f0:4c:27:0d:36:9e:de:5a:34:39:ea:80:75:00:5b:
21:1d:75:c0:79:f4:f3:29:08:01:52:47:a8:5b:b7:
d0:61:e7:cb:66:21:90:4b:fc:7c:35:14:d2:87:36:
e8:55:5f:2d:11:5c:5e:fe:9e:e9:59:03:ad:b3:8b:
40:6f:3c:52:24:04:b7:ea:4f:1e:62:2a:bd:4c:3b:
c7:46:2f:8e:36:c7:ea:2f:18:54:d5:cc:ed:66:02:
65:dd:fa:42:12:4d:4c:9b:5d:6e:cc:75:16:0c:e6:
f0:0e:89:42:f0:78:d6:60:92:03:88:00:93:ff:a6:
a6:3c:b2:a3:9c:84:93:ee:9b:db:9d:bd:1f:eb:2f:
ee:1b:3f:ff:cb:c8:40:c4:67:24:88:f5:78:8f:98:
93:9f:4d:65:b4:2d:f7:76:01:41:6f:ec:67:2d:48:
fb:ea:76:d6:c1:49:48:54:82:ac:0f:74:bf:a6:41:
dc:94:24:5a:46:4d:64:2b:f4:c9:40:c6:a6:62:fe:
9c:1a:c7:e7:fc:75:de:b7:a4:ad:ec:b7:31:9c:57:
99:29:bd:6a:cd:da:4e:06:88:3a:39:98:1a:6e:21:
73:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B7:69:7E:D2:1B:59:41:E8:8E:DD:97:47:99:6D:65:A2:4F:E4:E0
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e5:60:3a:88:1e:fa:0d:7f:d2:0c:b1:3d:68:f9:03:c1:d6:
a9:0d:ea:3c:19:d5:b2:63:3b:8b:c1:03:73:c3:7b:96:d3:75:
18:bd:ac:09:19:cd:94:3f:b7:59:13:b4:77:98:24:48:b4:2b:
71:0e:1c:bd:51:5c:85:61:08:12:dc:6d:60:d1:3b:3e:8d:57:
d2:19:55:88:c3:16:9c:18:9c:ad:46:2a:67:35:c7:07:c4:d4:
e8:3f:da:9d:21:44:f9:f3:38:27:2d:ff:83:f8:da:6b:d5:e3:
2b:60:46:96:76:6a:50:08:d7:4f:c1:10:71:66:3d:1a:42:b4:
7b:2c:1e:df:e8:ef:e5:f2:73:44:b6:89:ef:47:85:46:76:99:
ee:60:e7:3c:db:4c:e7:56:db:4e:2b:2f:62:5c:3b:c4:b6:89:
da:06:7c:74:d4:61:2e:14:c2:cc:96:bf:fa:98:31:98:bd:bd:
ed:ec:e1:c9:52:24:6c:24:4c:c5:d3:3d:27:a0:12:a5:95:ae:
1a:9d:2b:59:90:f0:34:94:50:31:17:43:75:5c:b8:56:11:d0:
68:de:9f:f7:e7:07:15:b0:98:00:de:a2:f7:7e:1c:28:87:6f:
bb:2b:8a:c5:73:da:a5:99:d3:c4:36:22:5c:00:de:c9:13:1d:
d5:49:f1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:51 2026 by rpki-client