Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier: ToShC0M2X0bPUSEg50qRHYbVA54k4VfPc54QPvqIwuM=
Subject key identifier: 7A:25:3A:A0:06:1B:CF:F1:46:18:79:AA:93:D2:6B:DE:3B:8A:BC:5F
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 019D389C1F289785B9E6E9CA59DBBE5CE3F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number: 07E9
Signing time: Sun 29 Mar 2026 08:00:48 +0000
Manifest this update: Sun 29 Mar 2026 08:00:48 +0000
Manifest next update: Mon 30 Mar 2026 08:00:48 +0000
Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: FC3YzJ2znNAp+nOVnVplKzL93sbED1hAcjJ5n725UNw=)
2: NyZecqDxZWfaHCuoM0IhIFWnpqg.roa (hash: iqpBZxFEqsIO8elb98oBs7HFDqASdANh9B/9XR18vAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1f:28:97:85:b9:e6:e9:ca:59:db:be:5c:e3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Mar 29 08:00:48 2026 GMT
Not After : Mar 30 08:00:48 2026 GMT
Subject: CN=7a253aa0061bcff1461879aa93d26bde3b8abc5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:89:be:dd:e0:1b:44:17:a3:01:37:62:31:
f4:5a:1a:fc:7e:01:48:8d:1d:cc:76:84:7a:f3:2f:
8f:91:72:4f:b4:b1:5b:62:4a:18:6b:1f:4d:65:cc:
7f:8b:eb:3a:95:e3:78:94:d4:b4:15:83:8a:6e:26:
54:a8:14:5d:a1:6e:67:4d:24:f8:02:9f:1a:65:68:
6b:65:9e:26:3f:b4:5f:ed:6f:b2:43:4d:90:87:70:
e4:ef:ad:d3:34:15:28:55:67:64:15:23:f4:c8:37:
65:06:bf:6b:a6:a4:11:67:51:26:25:d6:8d:dc:c8:
e9:3e:9d:67:db:aa:2d:f3:af:86:14:31:ca:bd:04:
d8:68:be:a3:1f:e8:19:1c:25:31:5c:97:2b:b5:44:
5c:22:dc:5e:ec:3d:43:df:e2:41:e4:15:47:53:7e:
a5:7d:57:47:4c:6e:bd:46:64:20:e1:76:e3:94:6f:
ee:e4:35:c8:50:4b:63:57:59:bc:1f:b9:0a:ca:49:
85:6d:b3:5e:76:90:6e:c6:3a:57:9f:7a:9f:64:47:
7b:33:d2:f1:9a:68:09:c1:fe:39:f5:9a:69:43:af:
8e:e3:db:bb:17:14:fe:75:ec:20:0b:2e:e9:75:43:
f9:39:d7:0d:ef:7f:ad:7d:08:30:c9:0d:1c:93:01:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:25:3A:A0:06:1B:CF:F1:46:18:79:AA:93:D2:6B:DE:3B:8A:BC:5F
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:6f:e0:ef:3d:96:f9:cb:73:be:6c:f6:5f:fe:84:f7:23:78:
7f:0d:54:e0:75:9a:bb:8b:ef:24:27:34:fd:8d:23:e8:65:b8:
89:c0:70:ee:2a:17:78:e8:09:43:c1:5c:d3:4b:02:4f:51:02:
42:f3:f0:d4:66:78:74:6c:14:d2:fe:ab:3d:8a:fe:84:ea:f9:
62:a7:08:79:9f:00:21:01:05:87:48:07:5d:62:52:7c:6f:0e:
1f:fb:c6:6a:49:df:a8:2c:74:e4:fb:a7:6a:6f:89:7e:91:b9:
66:01:01:8c:ed:da:5c:20:e5:42:7a:e6:18:b8:2a:10:49:4f:
d0:d5:63:30:c9:37:10:ec:ec:67:0f:3f:57:f8:2d:49:50:a4:
f2:6b:aa:d1:02:81:54:ea:4f:01:97:eb:3e:8a:3c:b5:c8:c8:
08:e9:9a:8f:6e:ea:7f:bf:52:be:6e:83:8f:cd:c4:4a:00:b4:
41:98:9f:a4:b8:da:be:8a:6c:fb:e6:cf:6b:23:1c:25:06:d5:
fa:3a:86:e7:0d:60:72:f8:d0:0a:74:a8:b8:fc:e9:da:5f:b9:
74:37:c0:ba:44:b3:e8:da:ff:69:d4:b3:30:e5:bd:02:2a:2e:
11:0c:28:e5:0c:31:40:d2:9b:c4:af:0e:9f:41:50:a4:97:f9:
26:a7:d1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:19:25 2026 by rpki-client