Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
File: 4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json)
Hash identifier: OOvbMkHkz09b65+U2waCdQNHHKMmlvCfubRmuf2QBGY=
Subject key identifier: CF:09:56:CF:44:4D:D7:90:83:1F:32:EB:F8:83:8F:CD:57:F4:28:72
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Certificate issuer: /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial: 019D39416E57529AD1B6A20BBBB4C1E78B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
Manifest number: 0867
Signing time: Sun 29 Mar 2026 11:01:22 +0000
Manifest this update: Sun 29 Mar 2026 11:01:22 +0000
Manifest next update: Mon 30 Mar 2026 11:01:22 +0000
Files and hashes: 1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: vljDbWEAAdyskLOVYDrj6dmZK6f6AazZ9SE9xPWgb9E=)
2: xsczLZy6vYyowOb8czcl6wqwt9w.roa (hash: Mvlo5cxvh4qQACxtbdlZhswtrG2sScu72g8Sl/rtq7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:6e:57:52:9a:d1:b6:a2:0b:bb:b4:c1:e7:8b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
Validity
Not Before: Mar 29 11:01:22 2026 GMT
Not After : Mar 30 11:01:22 2026 GMT
Subject: CN=cf0956cf444dd790831f32ebf8838fcd57f42872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:6a:4f:54:08:d1:ad:c7:02:ec:63:35:37:
7a:df:dc:24:73:e4:86:ce:9a:e7:44:4d:b6:75:29:
53:ec:05:0e:2e:bb:87:db:5c:02:d7:df:15:05:41:
0e:f0:94:70:34:40:e5:55:74:58:85:6e:82:fe:67:
e0:5a:8f:48:26:42:b1:eb:7a:6c:0b:d9:4a:06:a8:
8f:70:98:c2:6e:39:28:c2:69:5e:12:59:c6:e6:95:
28:af:0d:36:35:fc:e4:f3:43:71:ad:aa:f3:1f:b0:
e9:ea:0d:27:e4:2e:8d:bc:27:61:c9:76:10:e1:be:
ae:8c:a6:10:9d:06:7e:63:de:b1:2a:29:21:54:f2:
5c:21:34:af:09:6c:73:33:33:86:88:67:00:40:e0:
9d:d6:04:69:22:2b:60:3f:aa:23:b8:fc:f1:94:35:
31:43:dd:b3:f4:f9:ed:2f:14:4b:10:14:17:21:12:
4c:e2:06:18:67:cb:da:dd:e7:39:56:43:38:e6:ae:
44:d5:b6:a9:e1:6b:c1:6f:19:46:88:f3:61:a3:5b:
a6:8c:35:98:43:35:1e:b1:88:a7:46:b7:a4:1e:8f:
9b:dc:6d:78:16:6f:5f:45:10:73:80:55:6c:ad:ab:
32:ee:65:f1:a6:a8:15:27:46:f5:59:e6:0a:f7:e3:
79:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:09:56:CF:44:4D:D7:90:83:1F:32:EB:F8:83:8F:CD:57:F4:28:72
X509v3 Authority Key Identifier:
keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:29:f9:3e:c3:3b:2f:40:2a:54:88:a1:78:c8:b5:9f:9e:f1:
94:6a:c3:e1:41:00:6d:ec:73:be:6c:54:96:f2:4d:e4:44:ec:
13:9b:f8:13:7a:64:cd:f2:d2:c5:98:86:4b:f8:bb:46:9a:14:
1a:8a:09:80:ec:e1:78:cc:25:65:6a:80:af:45:49:70:fe:9e:
db:29:62:8c:64:6b:6c:e2:14:75:1b:a9:b0:26:99:7c:56:e2:
f6:ff:d1:dd:34:75:b6:54:6a:65:c8:ac:39:b8:0f:a4:18:22:
79:41:06:29:4e:73:de:9a:d3:cc:8f:d5:f3:cb:9f:38:e2:02:
03:6c:4c:0e:1b:86:e6:29:58:11:a3:1b:01:f1:a2:db:4a:3f:
b8:ee:c0:72:c7:3a:df:e6:ed:4f:e1:01:2a:f4:1b:7e:cf:df:
46:6b:e7:a9:60:66:3d:b9:06:3c:64:33:5c:ed:73:a9:ca:71:
5e:9d:0a:1b:29:74:0e:54:92:f5:d8:12:b4:90:78:33:2f:7b:
04:fd:dd:c1:30:de:30:5a:75:ed:4d:24:23:54:14:9b:7d:26:
87:e1:9a:77:be:62:a5:64:b5:06:6f:ec:99:21:f8:c3:25:58:
b2:f6:80:cf:3f:20:46:77:b4:6a:a2:8e:d6:77:cd:35:c7:a1:
3e:c7:96:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:05 2026 by rpki-client