Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File: 4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier: A4H8eJga0F6BTliPsEMNXxu9R88ks2H1TF5uJmtMsmQ=
Subject key identifier: 32:98:BF:34:D2:64:BD:27:25:47:CE:A0:C8:4D:54:54:39:D0:2E:1E
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial: 019D04AEBD20A4AB9FDB110993D2797EEB4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number: 07B4
Signing time: Thu 19 Mar 2026 06:00:53 +0000
Manifest this update: Thu 19 Mar 2026 06:00:53 +0000
Manifest next update: Fri 20 Mar 2026 06:00:53 +0000
Files and hashes: 1: 1-EjMX3YRkacpuKYO2FH7s4TaoIk.roa (hash: 5s0riiJVWdi9HHDl4S6viqfJpzTBR9zdtDH9C+DcLJc=)
2: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: nqDLkuTaXJD+yHEVmTiskDMDqvklKL8+QWbW6z862Ls=)
3: OBbXBCvcqIaXdkpP01srqqNumYQ.roa (hash: tOeKjUztrQmZUOK5tSU3z7kVcfpLnbmQDA6Js+6Ulgo=)
4: odjrkNL4Yq2CXUVTQsXxPdl9ENs.roa (hash: kP+uJe1dyrOkqr9O36VTGq109yqCnpr2QUsWWtiUKws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:ae:bd:20:a4:ab:9f:db:11:09:93:d2:79:7e:eb:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Validity
Not Before: Mar 19 06:00:53 2026 GMT
Not After : Mar 20 06:00:53 2026 GMT
Subject: CN=3298bf34d264bd272547cea0c84d545439d02e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:21:a0:48:79:4c:6e:37:20:6d:4d:89:31:8c:
12:07:7c:90:04:68:50:fe:85:5d:21:22:fb:52:40:
79:87:52:ee:ea:35:c8:a7:bb:5b:84:9d:aa:02:f7:
cd:59:28:a7:ce:fa:23:bb:39:c1:3f:80:7b:13:2d:
80:e7:96:02:3b:91:e3:2a:4b:04:d9:8a:a1:ec:d3:
c7:cd:8b:59:3b:14:b1:ab:58:ec:d0:06:3f:c6:90:
99:87:0c:00:cd:4f:05:62:c4:20:f2:bb:f1:9f:b7:
17:c2:42:a5:6e:cb:4b:b3:25:bc:e7:ae:38:73:1d:
2d:f0:31:b9:bd:73:37:00:2f:17:34:2f:48:cb:44:
16:d9:7b:cf:cf:e9:08:04:b6:82:bb:13:59:05:2b:
b9:c9:60:e1:b6:97:51:ef:26:9d:11:3a:e1:65:ec:
11:72:19:66:d3:97:8c:12:49:8f:e7:0a:42:51:67:
77:4a:12:4a:1a:7e:00:b4:f4:f3:15:db:c2:59:a4:
9d:c5:84:71:46:61:32:1d:61:2d:05:41:83:20:5c:
39:18:4a:db:8c:d8:c1:79:f2:78:d0:1f:82:53:36:
9e:f9:b4:75:ee:2b:d5:3b:fa:90:25:2d:b8:ef:e3:
99:87:e5:29:fb:5f:73:50:cd:b0:3d:fe:f6:c8:7b:
d3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:98:BF:34:D2:64:BD:27:25:47:CE:A0:C8:4D:54:54:39:D0:2E:1E
X509v3 Authority Key Identifier:
keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:e6:9e:48:be:89:11:08:e4:d3:64:d7:00:a0:fb:d1:cf:92:
f5:7c:3b:bb:bf:df:b8:8c:2e:3b:b9:e3:01:5e:88:36:41:d2:
93:43:5e:c2:64:d6:1b:c5:4e:35:b1:f6:dc:66:4b:60:a1:1f:
32:b3:6d:da:d2:0c:d3:18:b7:91:1e:a1:15:2e:b3:b7:29:55:
eb:a0:8f:03:db:77:fc:2c:72:68:c8:81:29:8a:3b:10:1a:1b:
d2:9a:ca:b7:51:da:92:f6:51:0c:20:46:b7:ad:a5:fb:d7:8a:
78:1f:ad:22:91:bf:75:43:ea:2a:c1:5f:b6:07:a4:8f:a3:99:
2a:23:42:2b:e7:d8:43:df:a5:2c:9b:93:dd:2c:e2:98:58:19:
a6:ce:67:36:ed:cb:21:32:9e:86:5e:ff:b2:a3:ab:7b:8d:a5:
0f:27:2a:14:dd:22:d5:54:c2:42:83:c7:ce:ef:ad:0d:4a:15:
34:98:a6:5d:26:94:7a:39:90:bb:44:9e:d6:2d:7a:6c:d6:23:
c5:9e:dd:aa:79:20:b4:ac:59:4b:6c:5f:10:af:19:aa:05:ed:
c2:47:9c:4f:49:3a:83:f8:c6:89:34:b4:4d:f8:27:be:e4:de:
de:05:32:e3:d8:5b:fa:78:57:ba:51:56:f4:ef:b9:c8:f7:4e:
01:2c:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:05:23 2026 by rpki-client