Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier: fsGfytkCCcLGruUx2kKdaRsTmAKmFnjCmVmbtVz2NSU=
Subject key identifier: 1A:B8:6D:65:E7:C9:79:0F:1E:58:E2:C3:91:35:9B:F1:60:36:43:A2
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial: 019D39777B60F93CCEF11E32E3464062BEF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 12:00:24 +0000
Manifest this update: Sun 29 Mar 2026 12:00:24 +0000
Manifest next update: Mon 30 Mar 2026 12:00:24 +0000
Files and hashes: 1: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: 6WbQJdJ7Fw3dYeSR3XH9Cu3IpQ4n+i9j7Cr9zCAorvU=)
2: K1FdA87T8eFrwlS20DD-axC_KRg.roa (hash: UelE8kISfcUjG8bRU19xRhDTFmmSIXEMYIXQuI26se4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:7b:60:f9:3c:ce:f1:1e:32:e3:46:40:62:be:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Validity
Not Before: Mar 29 12:00:24 2026 GMT
Not After : Mar 30 12:00:24 2026 GMT
Subject: CN=1ab86d65e7c9790f1e58e2c391359bf1603643a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c3:fe:46:b6:c0:6f:df:f9:38:0e:5d:4a:76:
7f:42:f4:24:35:c6:3c:fc:09:ab:a4:03:4e:38:10:
24:59:9b:b2:be:af:e6:2d:8a:1d:43:04:6f:fe:d5:
aa:2a:16:a2:7c:d2:f6:80:d6:43:93:16:42:75:e3:
34:fa:d9:d6:2c:72:a4:98:15:90:e5:bb:67:01:b2:
66:ed:08:b3:89:71:bb:5c:f9:d6:a4:c8:3a:c0:25:
92:a0:c7:37:01:6a:7c:44:3a:99:1a:5f:81:0f:03:
34:df:6f:c5:f3:1c:15:e0:e7:c6:e4:04:6b:fd:e8:
49:1d:b0:2a:a6:18:ca:43:7e:c0:28:af:01:3e:de:
53:93:f6:ae:8a:6d:52:f9:3d:bf:e0:79:25:89:8f:
3d:bf:b9:d9:07:98:6c:72:ec:d6:ca:f3:68:20:dc:
3f:a0:b8:b4:42:26:f2:ff:58:39:ab:7d:43:15:54:
8c:e6:48:2d:80:c8:15:e3:35:2c:0a:3b:70:05:05:
3b:91:15:17:e3:26:24:2b:7f:eb:f4:a0:dd:2d:06:
de:6b:5d:f2:ae:2b:85:77:2d:ef:5b:e6:73:63:d5:
26:bb:3d:e3:2b:9a:34:11:4b:46:e5:45:4b:95:ff:
59:d2:dc:28:50:16:57:0b:19:77:87:58:ef:fa:4c:
7d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B8:6D:65:E7:C9:79:0F:1E:58:E2:C3:91:35:9B:F1:60:36:43:A2
X509v3 Authority Key Identifier:
keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:17:ab:66:b6:fe:4b:10:a6:c7:9e:f1:0f:7d:77:3d:38:d8:
74:54:4a:ae:25:f6:62:4d:79:b1:1c:c8:a7:e2:0a:9b:b7:23:
81:99:bc:7e:54:0f:fc:01:18:0f:a8:3d:28:0c:92:4c:ee:de:
64:fc:19:d4:1e:f0:a5:3a:3e:a1:51:e1:b2:00:bf:e3:04:97:
ad:76:0f:c4:a0:1d:1b:9c:7d:eb:81:13:2b:2f:77:6c:7d:f2:
8e:d3:9c:d1:6c:60:7a:f8:66:0c:88:93:cf:5f:58:d0:fc:97:
d2:56:39:fd:ae:e7:a3:fb:bc:f5:cb:13:89:7f:66:fd:e5:7a:
07:9a:80:53:64:49:95:60:00:14:a8:4b:e6:62:a1:ba:a1:29:
93:84:1e:99:69:ee:2a:a4:df:4f:59:5c:21:d6:82:03:38:3e:
0c:a6:e1:ea:a3:b1:00:a1:43:a9:3e:46:b3:f3:f4:8c:92:fa:
e1:19:96:e9:bf:d8:ed:04:8e:55:ba:f2:6b:24:56:95:40:7f:
2b:f0:69:9a:97:d3:7e:23:b4:75:c8:53:4b:bf:2b:89:b1:d1:
cc:ac:62:d0:60:8e:57:da:26:7b:2d:c1:f7:e1:7e:37:19:78:
08:30:5f:0c:f9:b5:af:c4:0e:62:4a:f2:9b:9f:f5:f9:72:61:
f0:df:75:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:44:44 2026 by rpki-client