Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json)
Hash identifier: GiQLDBEHN/QOMsxeZ5iA4sadquRMDjGBKtYqEC6YOZo=
Subject key identifier: 2A:70:95:84:B9:69:AA:83:73:63:D7:70:C3:47:CE:0B:C0:1A:92:50
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 019D382E15EF4EB1EAB4567D012A5402FBDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 06:00:37 +0000
Manifest this update: Sun 29 Mar 2026 06:00:37 +0000
Manifest next update: Mon 30 Mar 2026 06:00:37 +0000
Files and hashes: 1: 3VLJL7-f2gIaDHt9s5O08zvl02o.roa (hash: nvn//iDJID27yb0p4DmlRMNLDXzJBDmTCGYaGUQJ1lA=)
2: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: 2H9tfnC13LE0oqH9Th7vFnyjjo3l5TpCYeTzjWPgJJ4=)
3: AK-YlCPEVbLAZegzYkNrI96Oefg.roa (hash: TQp9SWZ90VsXFNcjm672V8NJs6N2oP9XQNZuCEin7So=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:15:ef:4e:b1:ea:b4:56:7d:01:2a:54:02:fb:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: Mar 29 06:00:37 2026 GMT
Not After : Mar 30 06:00:37 2026 GMT
Subject: CN=2a709584b969aa837363d770c347ce0bc01a9250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:12:e3:5a:54:21:8e:5e:03:af:ad:38:29:4c:
97:8a:5a:d6:8e:b6:dc:57:03:ae:16:bc:03:d7:aa:
80:4c:67:93:fc:f0:48:ad:da:6d:5e:d2:b5:cd:e4:
a7:3c:18:d0:6f:73:78:bd:f2:17:81:e0:13:9f:b0:
78:cb:f5:77:3f:9a:0f:63:36:c0:1a:95:1a:9e:25:
83:b6:c1:48:36:3f:24:df:58:2c:b4:73:f7:9f:a9:
d5:34:8e:77:38:b8:29:cd:91:a7:a0:50:60:4a:92:
03:63:9c:ce:81:77:9d:50:8a:ce:5d:a6:1a:0d:e5:
8c:44:2b:72:59:9b:57:78:54:98:60:cd:2a:ef:84:
22:1a:68:dd:07:f1:45:c3:13:34:78:88:d4:99:9a:
a8:16:7e:93:1d:c5:51:b4:92:ca:47:fd:bb:69:48:
9c:97:9e:42:42:ff:ef:19:ba:52:61:2f:5a:09:79:
a2:ae:42:00:eb:79:90:7b:69:08:f2:de:49:91:23:
15:11:97:73:80:2d:59:e4:76:ce:0f:d5:e3:d9:ca:
33:2f:2d:a3:ea:0a:18:e4:f8:63:31:a8:7d:85:aa:
dc:36:e8:6b:76:32:98:2f:be:c5:b5:1b:36:fb:f4:
3e:38:5b:e8:2d:c3:50:f3:5b:5b:64:e2:40:39:20:
25:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:70:95:84:B9:69:AA:83:73:63:D7:70:C3:47:CE:0B:C0:1A:92:50
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:be:fb:01:c9:e2:a5:d2:10:a0:27:9b:5c:77:b3:e2:50:67:
8f:82:3c:47:39:a2:6e:d1:22:c6:96:6e:76:47:76:57:b6:a0:
9c:3f:4e:19:df:70:7e:2f:80:68:45:f2:24:66:9c:bb:e0:d8:
f5:17:40:46:32:10:6f:56:e0:82:c3:4c:a3:f7:93:b9:a4:e0:
b8:2b:dd:d6:4a:d3:5a:11:c9:57:ee:5e:bb:1c:1f:e9:cd:7e:
8f:15:cb:50:8c:4f:ba:04:36:25:bc:db:97:1a:a3:5d:98:97:
4e:1f:a4:5a:25:3a:ad:c1:27:59:9e:c5:73:94:30:b7:02:c8:
ae:b6:10:e2:a7:23:db:f2:62:61:96:52:a5:b6:62:e4:88:37:
25:9f:94:74:e4:fd:f6:e0:21:f0:ef:51:bf:1d:bc:46:ca:89:
8c:72:a0:de:9f:9b:03:9a:ea:0b:9c:f8:aa:08:49:82:16:6c:
7e:d3:ee:86:78:1f:bf:e9:cb:00:bd:df:66:85:ef:ef:ca:ca:
21:96:ae:7f:74:c9:75:c8:b2:61:34:12:a8:e9:3c:27:22:2f:
98:ed:77:92:2c:95:7a:f0:30:62:92:17:28:4c:10:eb:61:3a:
60:69:e2:ad:ae:5d:32:16:cf:02:bd:b4:29:4c:65:0c:c0:57:
8a:29:fe:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:01:11 2026 by rpki-client