Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: acgZiUGb81iLomiXVtImS8ruzsbNlPEKuVTxGdvACC8=
Subject key identifier: EC:86:A6:7B:BB:1F:06:44:77:85:C6:41:BC:B6:4A:5A:70:6D:E1:6C
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 019D3A1CCA4F543C0A374F986E22321697E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 138F
Signing time: Sun 29 Mar 2026 15:00:58 +0000
Manifest this update: Sun 29 Mar 2026 15:00:58 +0000
Manifest next update: Mon 30 Mar 2026 15:00:58 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: WnMJRpgvicFsboZQliaFNLwHUjgOGxXncidxORGbJqc=)
2: 5BcZMkFK4H4HzeU32Pg9Et5_SQ8.roa (hash: yDr7OimE93R5A5WQDfIWvLQYnSnCYBj7r4S1yWKb1hg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ca:4f:54:3c:0a:37:4f:98:6e:22:32:16:97:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Mar 29 15:00:58 2026 GMT
Not After : Mar 30 15:00:58 2026 GMT
Subject: CN=ec86a67bbb1f06447785c641bcb64a5a706de16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:e8:ec:33:11:28:09:78:ec:59:0f:d4:92:
c0:d3:83:91:6f:05:83:ab:a5:5b:63:93:f1:c8:44:
0d:7c:98:8d:89:46:d0:71:e0:cf:d8:dd:f0:f5:1f:
de:27:43:4d:34:ae:5a:71:94:31:d9:97:69:93:01:
4c:ea:ea:71:7f:9c:77:b3:90:e1:d8:a5:24:fc:c9:
b0:da:c3:e6:0d:ad:9d:b9:20:86:c5:c7:9b:26:0e:
66:f9:29:4a:f2:d0:d6:c5:72:87:06:7b:18:48:29:
d7:88:55:07:10:e5:e0:2b:9d:bf:5a:d3:5c:48:a1:
10:bf:bf:69:9a:ea:1c:c3:cf:45:07:e6:bf:a4:b4:
78:d8:43:df:46:c6:b7:ce:fb:17:71:12:10:34:78:
4f:c8:6f:23:24:30:aa:7d:fa:14:81:42:cf:ca:d5:
d6:09:b1:8f:15:99:49:61:f0:ee:76:4f:55:09:ff:
56:60:09:34:67:80:d9:ab:ad:a1:2e:5e:b3:c1:be:
ed:c2:3a:ae:e7:c8:60:78:02:6b:a9:ce:36:68:a7:
cc:23:87:ad:9a:88:ff:0f:f0:38:3d:90:03:c6:c9:
23:b7:d5:2e:a3:04:10:5e:9a:79:9e:be:73:ac:fb:
b2:2e:3f:33:6c:cd:77:c1:49:6f:95:75:74:ce:a4:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:86:A6:7B:BB:1F:06:44:77:85:C6:41:BC:B6:4A:5A:70:6D:E1:6C
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:89:28:7c:13:4a:e3:dc:04:af:91:80:48:02:5b:ba:fa:e1:
f7:fa:dd:4a:6b:4f:84:f6:1c:e5:b0:7f:87:1c:94:27:62:2a:
e3:71:e7:21:5c:32:d5:29:37:5a:f7:a5:93:c3:5f:b8:70:79:
57:51:b0:23:97:ce:90:f1:1e:72:52:07:44:b5:be:3e:ce:0d:
4f:6a:68:c4:a1:6a:4e:5b:7d:42:a4:89:13:a8:a7:e5:b3:21:
7c:23:d9:27:43:27:50:fa:b3:90:0e:70:c0:04:3a:59:dd:fc:
c6:fd:e9:16:a6:93:ef:9a:b9:6a:8e:f4:44:cd:ac:63:0d:47:
78:93:30:e3:12:ce:0c:1b:7e:73:db:66:91:ac:34:0d:14:fc:
28:6c:01:3e:e5:1d:34:e6:83:d8:fe:9a:2e:09:d3:40:93:a0:
93:5d:0c:4f:83:08:ba:49:82:d7:ae:19:ac:f9:ea:be:11:4b:
d6:da:d8:17:c5:f4:20:9d:21:7e:57:18:c1:ff:90:42:45:ea:
1a:db:4c:77:29:da:c4:64:6d:83:d4:89:e7:d0:58:b7:dc:01:
6b:95:82:48:ce:7d:d3:db:ee:97:0a:12:63:4c:e1:76:d7:99:
35:06:3e:68:e1:d3:2a:bc:1f:9f:f1:d5:8f:20:e8:6a:01:96:
30:35:4c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:01:47 2026 by rpki-client