Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
File: 4IFCtC45SABI0fzqWHo2k9pMC4o.mft (raw, json)
Hash identifier: rBmLxf1B6qhG3/WXqxwmmlYBhJIaDgEjSZzw7dFt17k=
Subject key identifier: BB:60:BC:01:1F:1C:EB:2E:75:FE:16:91:06:A1:00:9D:3D:83:B0:30
Authority key identifier: E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
Certificate issuer: /CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Certificate serial: 019D37F76EE46E1ABD700D427FBD60764ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
Manifest number: 067A
Signing time: Sun 29 Mar 2026 05:00:55 +0000
Manifest this update: Sun 29 Mar 2026 05:00:55 +0000
Manifest next update: Mon 30 Mar 2026 05:00:55 +0000
Files and hashes: 1: 4IFCtC45SABI0fzqWHo2k9pMC4o.crl (hash: s+bmo/KjUWcWMKK9SDBGzUZkXT0f4j7IIzRrFSHvoag=)
2: jm7CLkDkWjLyx0drk5u0jmFrhNY.roa (hash: ammB/HZj8/N3/UAaLNlwGxNZkAQiwMa1PgzKQkDpB6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6e:e4:6e:1a:bd:70:0d:42:7f:bd:60:76:4a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08142b42e39480048d1fcea587a3693da4c0b8a
Validity
Not Before: Mar 29 05:00:55 2026 GMT
Not After : Mar 30 05:00:55 2026 GMT
Subject: CN=bb60bc011f1ceb2e75fe169106a1009d3d83b030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:a7:11:18:6a:04:62:cb:7b:8e:c3:94:6a:
65:b5:c1:6c:42:e3:4f:97:37:31:c1:23:47:9d:d4:
62:54:f5:da:5b:74:2f:8a:83:71:dd:fc:31:3a:12:
b3:df:73:01:1e:f2:5b:a0:85:43:00:bb:21:85:4f:
92:a5:70:dd:b7:dc:3e:57:f5:74:17:b7:63:b2:99:
23:6d:d1:20:ca:d4:d6:c6:60:42:36:14:17:dc:f4:
e7:d2:cb:30:a6:bc:5a:ce:c1:83:42:46:ec:a2:cf:
ec:6b:0c:40:0d:70:b0:00:af:4d:16:5d:bf:fa:b3:
da:46:0a:67:c9:2e:48:c4:48:c9:2f:cc:b1:10:6e:
d9:b8:85:d0:01:ac:5a:bc:46:c0:42:a0:3e:ec:f1:
9f:d3:c7:ca:ed:9b:89:ed:b5:1c:26:0d:9b:6f:be:
ff:65:70:25:91:53:63:31:10:af:5f:64:21:d9:79:
ec:11:96:56:4f:3f:46:90:17:96:89:2a:3b:79:dd:
21:f5:b5:90:8d:4f:54:0d:c0:3c:46:5b:cd:fa:76:
f5:80:35:6b:ae:15:60:09:bb:20:26:7c:73:cc:4c:
71:09:82:3c:5e:0a:6a:ab:27:3a:da:fd:bf:ed:95:
94:c1:7d:df:fb:c5:2e:b5:8f:7e:a1:76:bf:4d:83:
1b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:60:BC:01:1F:1C:EB:2E:75:FE:16:91:06:A1:00:9D:3D:83:B0:30
X509v3 Authority Key Identifier:
keyid:E0:81:42:B4:2E:39:48:00:48:D1:FC:EA:58:7A:36:93:DA:4C:0B:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IFCtC45SABI0fzqWHo2k9pMC4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/282ac6-72c6-4b2c-9df9-8f1f2c914f04/1/4IFCtC45SABI0fzqWHo2k9pMC4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ae:ed:f8:7e:1e:26:3c:89:3c:b6:02:11:30:a1:77:f8:88:
55:2a:79:d1:57:7b:64:82:43:c5:63:90:47:2d:a5:dd:a5:1b:
8a:b9:82:e6:9a:9f:1a:10:38:e5:a6:c0:91:46:a6:df:ed:70:
75:21:8c:60:e4:ac:c0:73:19:4b:a7:e5:d7:a4:88:12:b0:50:
92:fd:69:d5:fc:b3:67:55:dd:e2:70:28:87:09:f5:44:ab:a8:
92:6f:92:d3:9b:3b:dd:0f:e4:5d:03:94:09:bd:22:a1:57:36:
38:3e:dd:8e:07:15:74:f6:98:69:62:f0:10:18:06:94:0d:fb:
c1:ff:48:60:3a:b6:16:a0:dd:ac:ff:84:a3:77:64:59:fe:45:
d9:67:57:af:b0:38:ea:ed:4d:24:3a:2f:5c:da:99:58:a7:ce:
bd:64:b6:33:b0:3f:8a:e0:bd:af:3d:48:be:87:e7:81:5a:9b:
ca:25:4b:a8:05:d5:c4:b4:87:dd:b5:5e:eb:f8:6b:83:33:d4:
97:55:75:99:c7:a5:95:1d:45:a7:06:49:14:bf:9a:b1:f7:8c:
83:ac:ab:14:fd:32:9f:9d:8f:7a:0b:b5:b8:97:15:35:88:ee:
86:22:23:a7:5c:b8:4c:55:a2:5c:81:d6:8d:5f:09:12:99:0e:
db:7b:12:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:03 2026 by rpki-client