Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
File: 4PL1Rd2yNOOD02uKjWtWo43XL4k.mft (raw, json)
Hash identifier: 3R5Erdj80vaZLAN04qe7dLvr7V08yHvcT/hIhZxARfc=
Subject key identifier: 2B:A2:10:34:64:BB:FA:6D:6A:76:05:8A:79:71:28:F5:8F:02:4B:F6
Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
Certificate issuer: /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Certificate serial: 019D3909C497533729BCAFD2B68BB93B22F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
Manifest number: 0AA3
Signing time: Sun 29 Mar 2026 10:00:34 +0000
Manifest this update: Sun 29 Mar 2026 10:00:34 +0000
Manifest next update: Mon 30 Mar 2026 10:00:34 +0000
Files and hashes: 1: 4PL1Rd2yNOOD02uKjWtWo43XL4k.crl (hash: aAM7YjyCmcoDik4ZWM3sxIvwg5QEbVD0YEjd8763Shs=)
2: AyCa3M8xYrOj2yQfMci0ZY7Yf1Y.asa (hash: 4cT0D7+3fI+x0G0JXb/zfB6aX1I04T5jruNKcFtFaD0=)
3: ODt7PHiuGg1x7ZK4rw_s4kN0mRA.roa (hash: XptWkOCtZXQLc7ip95cgT3GyOmfhUjdofdkZeE4pykc=)
4: kMiPdUnfBlmQ_-UZ0PPwAdBy2Ws.roa (hash: MMTL72eHvD66StkaydrVIWqM0Kvh189EtZcOy9LJ7fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:c4:97:53:37:29:bc:af:d2:b6:8b:b9:3b:22:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Validity
Not Before: Mar 29 10:00:34 2026 GMT
Not After : Mar 30 10:00:34 2026 GMT
Subject: CN=2ba2103464bbfa6d6a76058a797128f58f024bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:80:6f:1a:e5:a4:6c:47:2a:b7:6d:da:fc:a7:
f4:ff:80:31:51:1a:83:ae:11:d6:83:c9:3b:91:8a:
47:ea:93:4f:e4:4b:0b:d1:01:25:4a:a2:e9:d8:a0:
e4:f6:af:3c:a6:d1:6a:62:cb:89:40:c7:f5:ea:2f:
de:6f:6f:d2:65:5e:53:d6:51:01:7e:5a:ff:05:05:
39:34:ee:86:ab:e2:02:f2:bb:fe:a2:ad:cf:3d:b7:
f1:57:24:ff:40:4c:33:70:84:fb:84:b1:f9:e1:8f:
23:51:56:cf:37:77:e0:40:2b:05:4d:6f:87:f0:4d:
9f:c2:f1:e5:f9:23:f6:3b:7a:c8:62:27:ba:25:33:
c1:c8:c8:b2:bd:28:1b:ea:b0:19:27:76:65:c9:75:
c3:fd:7a:7b:3b:85:1d:c1:0f:1b:e3:d6:97:bc:eb:
6f:c2:4b:60:24:33:fb:46:e2:09:fa:36:44:a9:dc:
a3:ca:0b:12:1c:6b:ac:ba:25:99:4c:b3:f2:50:62:
87:8c:b1:46:c5:62:08:a7:20:ec:c1:ad:7d:01:78:
99:b5:b7:e1:25:a6:8b:7b:52:3b:68:f9:82:5f:17:
df:65:74:1f:ba:cf:07:c9:27:55:08:85:41:d2:0f:
e0:eb:8f:dc:88:62:fb:c8:ba:22:b1:57:fa:c5:a8:
a9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A2:10:34:64:BB:FA:6D:6A:76:05:8A:79:71:28:F5:8F:02:4B:F6
X509v3 Authority Key Identifier:
keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e6:64:e4:01:30:48:25:a3:56:02:76:13:f5:8a:ae:f4:61:
05:32:3d:5f:c6:6d:8c:96:bf:3e:67:f8:64:82:64:96:66:d3:
8c:df:14:d0:8f:fb:66:1a:33:f3:ab:03:75:15:dc:b0:68:bb:
c0:e1:11:1d:4f:ad:76:0f:06:c6:51:6e:97:6a:e7:04:05:6e:
65:2a:03:7c:91:4c:e4:fb:31:5d:0d:4a:64:db:85:c6:7c:61:
d0:3f:0a:1c:ab:d4:48:ed:7b:41:29:73:04:21:9f:e3:78:a9:
e6:a7:b2:bb:04:db:8d:f7:b3:e8:f1:ed:c2:59:e4:eb:17:bc:
f9:8d:6d:c8:f6:bf:a4:c4:8b:37:31:8b:a8:8a:06:21:1c:20:
33:dc:0a:a4:3b:89:b9:96:23:1d:5e:ca:95:09:4b:2b:3f:61:
36:91:f8:10:e2:7c:93:2c:4e:98:a2:7e:19:6a:fe:a3:01:cf:
8e:be:df:66:78:b6:00:1e:f9:55:ca:1b:80:02:f7:ac:ad:1e:
5e:68:ff:c8:f8:82:ec:98:7e:c1:28:6d:a6:a7:2e:5c:05:b9:
3a:58:36:7f:7f:c0:ff:75:eb:ac:b0:4a:7e:a0:df:64:2f:20:
06:49:81:ee:81:dd:9d:c6:1b:55:b9:10:6a:c5:b9:70:de:d8:
20:9d:39:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:13 2026 by rpki-client