Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: VQEzt1rYi+WiASLNc2ZX1nrhz0lgnj9Qev8Z1ccpoSE=
Subject key identifier: 21:11:36:2E:4D:0F:E0:36:78:BC:F6:B9:4A:9D:79:97:FB:02:2A:5D
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 019D389C2321ACD83D31190A78CD45075D8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 119E
Signing time: Sun 29 Mar 2026 08:00:49 +0000
Manifest this update: Sun 29 Mar 2026 08:00:49 +0000
Manifest next update: Mon 30 Mar 2026 08:00:49 +0000
Files and hashes: 1: Br3g91W4evf2A8FX4-nPHSqH7Oc.roa (hash: gTgHpNU+s78J1A+sPr7pjfV/Fs0kKMeRldiNIgByjo4=)
2: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: JKCPWF9qP/XlQeqDDqTDqr7InkB/1XCSiI1uuhZvd+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:23:21:ac:d8:3d:31:19:0a:78:cd:45:07:5d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Mar 29 08:00:49 2026 GMT
Not After : Mar 30 08:00:49 2026 GMT
Subject: CN=2111362e4d0fe03678bcf6b94a9d7997fb022a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:84:a4:9e:69:dd:ec:16:50:45:1e:20:cc:23:
d2:d0:0a:4d:f4:65:2c:68:6b:4d:22:b1:a8:1c:e2:
af:d5:6a:97:d4:34:df:3e:77:5d:7e:07:89:c5:5e:
3c:31:5c:85:13:2d:cc:ed:dd:a9:a4:24:74:a1:1f:
ba:59:45:7a:60:5e:4d:45:65:20:79:74:ab:58:0c:
c4:86:ba:47:af:22:ea:82:04:24:73:27:c0:6d:a3:
5c:20:0c:6b:75:44:3b:dd:dc:09:7e:dc:4c:97:c5:
4e:1c:08:f8:6e:d2:ba:29:ae:8f:80:8a:2b:30:86:
40:63:79:08:1d:02:bf:a5:de:57:57:3a:f3:87:41:
1f:96:4b:ca:79:58:20:e3:bb:d2:c3:c2:e7:65:c7:
27:4c:3f:eb:05:e4:fe:60:4b:f1:f2:b1:ae:60:f7:
43:b4:33:a6:ce:77:da:33:54:65:26:ab:8f:04:67:
82:86:5b:48:5b:62:50:7f:20:37:b0:4d:39:f4:d6:
69:d8:82:8e:37:46:fe:c4:0f:51:66:ce:48:2e:56:
79:dd:e7:4b:48:ef:45:97:d6:37:27:2e:50:1f:b8:
d6:fc:bd:ca:e5:a6:75:5c:78:16:40:54:3e:aa:5e:
eb:75:f9:6e:ee:6f:26:00:bd:08:de:f0:45:9c:4a:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:11:36:2E:4D:0F:E0:36:78:BC:F6:B9:4A:9D:79:97:FB:02:2A:5D
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:f4:3a:7c:60:27:50:e2:8e:fd:38:88:5c:54:70:63:07:39:
7c:a7:4a:1d:98:b8:55:ce:39:9a:35:22:b8:b3:36:ec:fd:08:
d9:db:30:4b:fa:0e:28:9f:4a:b4:ec:c3:a5:7e:5c:b0:b9:16:
af:88:10:d2:f6:d9:cb:60:06:35:97:ec:99:ab:7f:6a:5d:20:
2d:f7:6b:f2:0d:0f:51:4b:52:97:f3:0f:0d:5e:aa:f5:ff:65:
86:e8:fc:86:7b:92:16:91:f1:c5:1e:1d:be:a7:3a:9d:8d:58:
7d:24:51:e7:8b:71:88:fe:d9:78:8f:44:f0:d7:11:04:91:39:
32:b3:e9:14:b4:91:19:bf:10:98:d4:ea:78:ce:35:26:13:f8:
a0:1e:c3:4b:a2:b0:79:88:bf:8b:91:37:51:b8:ee:51:32:0d:
12:19:4e:ea:39:91:29:2b:4e:29:68:7f:c1:0e:de:87:21:df:
af:7e:ff:bb:d2:ce:68:d4:27:9c:bf:24:01:d1:3d:21:93:22:
ae:85:8d:99:84:28:90:47:55:29:c0:0b:aa:ff:39:4a:31:bf:
0a:94:f2:22:bf:aa:d8:8b:00:81:eb:da:45:af:26:44:fe:fe:
5f:f7:2d:bf:b3:15:6d:2b:84:52:89:cf:87:0c:1c:5c:df:93:
fa:d4:66:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:54:32 2026 by rpki-client