Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
File: 4p9JZACcdLuBrtnGcHgBPcho7xc.mft (raw, json)
Hash identifier: c4AeROaDLBavv8AxyEs7tP63Zsr/0mrzx7uBOGfumc8=
Subject key identifier: 68:42:D2:35:73:E4:DF:A3:BF:2F:6E:B8:A5:6D:DB:16:8F:EC:01:7E
Authority key identifier: E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
Certificate issuer: /CN=e29f4964009c74bb81aed9c67078013dc868ef17
Certificate serial: 019D37F6FC9B797B299CB23159A77E1F61BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 05:00:26 +0000
Manifest this update: Sun 29 Mar 2026 05:00:26 +0000
Manifest next update: Mon 30 Mar 2026 05:00:26 +0000
Files and hashes: 1: 4p9JZACcdLuBrtnGcHgBPcho7xc.crl (hash: jHFndXEkL0tELYJEhsk0o5CLF6B0tjFt2tx5ekZxgLo=)
2: jbafLlCB65wc3lu8qCmYl11AIFk.roa (hash: K+M36ULpoKKc2R4rksKlSojLYrf7EhhEe4ldkXRNVqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fc:9b:79:7b:29:9c:b2:31:59:a7:7e:1f:61:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29f4964009c74bb81aed9c67078013dc868ef17
Validity
Not Before: Mar 29 05:00:26 2026 GMT
Not After : Mar 30 05:00:26 2026 GMT
Subject: CN=6842d23573e4dfa3bf2f6eb8a56ddb168fec017e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:13:cb:ec:c5:17:98:e9:f0:6b:37:5f:57:4f:
b9:27:7e:17:61:c7:4f:df:48:49:26:e3:dc:f5:70:
1f:b6:42:98:fa:36:23:6b:43:23:13:76:6b:80:50:
7e:92:d2:ff:61:dc:48:2c:20:d8:a5:43:98:a3:5d:
a7:b1:7e:c2:93:50:4d:a4:79:76:3c:e1:8f:be:03:
7e:13:c7:54:cc:7c:0b:fb:00:d5:62:37:b4:15:d6:
65:a1:db:e2:f9:7f:c9:ad:67:55:3c:15:3b:77:8f:
d1:a4:39:23:9e:cb:e9:9e:c4:f9:19:ab:d8:fc:3d:
47:62:65:7b:39:1e:f0:5c:21:2c:9f:67:31:9d:f5:
87:59:83:c4:47:b0:bb:0d:ea:2d:3e:b1:a9:6e:9f:
52:74:22:55:6b:ca:75:59:53:94:ba:64:ad:e4:85:
f3:96:90:cc:d4:86:ec:1c:65:82:1e:99:d6:95:ca:
bd:1a:fc:f7:3c:7e:51:8b:10:c6:59:eb:1c:8f:74:
ea:4b:93:62:56:fc:b8:d9:79:05:0a:78:47:04:82:
0e:49:65:2a:1f:1e:02:75:14:b1:49:ab:a9:84:9c:
07:1d:3a:fd:61:09:74:91:3f:74:7a:3d:4b:62:01:
5c:c5:1d:be:29:f3:a5:3b:a1:85:ff:9f:01:78:04:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:42:D2:35:73:E4:DF:A3:BF:2F:6E:B8:A5:6D:DB:16:8F:EC:01:7E
X509v3 Authority Key Identifier:
keyid:E2:9F:49:64:00:9C:74:BB:81:AE:D9:C6:70:78:01:3D:C8:68:EF:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4p9JZACcdLuBrtnGcHgBPcho7xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/655a1c-baf5-475f-a308-932ab341a367/1/4p9JZACcdLuBrtnGcHgBPcho7xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:40:4a:01:5a:5f:76:38:ec:a2:84:06:c9:c9:73:a6:1a:f2:
1c:7a:f0:00:cb:14:8f:73:31:e7:58:f9:e4:1b:07:6f:8c:08:
08:91:a2:08:88:d2:dd:09:5a:ec:d3:19:35:98:7c:45:49:93:
f2:f5:af:24:e0:f4:3d:e3:5f:26:20:b3:02:f5:7c:bf:fb:42:
7b:3c:b7:41:b6:08:a9:aa:68:07:3b:93:ca:c1:59:d4:30:a9:
b5:3f:17:6a:34:f1:d1:ff:fe:34:ff:17:c5:d6:9a:a6:c7:76:
b6:c2:f8:f8:c6:1c:38:31:a3:67:39:a5:5e:3e:c4:e5:a2:af:
24:d2:ad:e6:01:b2:97:cf:ee:cc:56:8c:0f:1b:c4:d9:6d:ce:
63:ea:f0:a8:b9:8e:4d:a7:2c:ff:18:ed:bd:1b:4f:1d:ce:20:
ba:93:7b:1d:fa:72:08:6c:7a:bd:37:4b:f5:74:5a:d0:2f:a1:
29:a1:f1:df:ef:80:5c:20:26:3c:3e:16:a9:29:71:ba:aa:78:
95:ff:bc:e5:b5:3d:31:67:3d:76:45:31:6b:c2:67:72:c9:58:
e4:c9:38:72:b1:b7:c6:23:f0:cb:78:0c:9a:89:e1:0d:f9:73:
9a:c2:11:cb:c1:36:d7:e6:82:a7:b8:c0:45:df:58:e7:9c:4b:
04:38:7b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:56 2026 by rpki-client