Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: 140aMW7ArpRaP7V3QbG62pK4WKFiN2SiuJh17Hf6Ads=
Subject key identifier: 6E:F9:51:78:10:DF:7A:F4:75:1B:C4:16:26:50:3D:D4:F4:C1:F2:59
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 019D38D325F4214FE596C1B080B56E3AFD59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: BvnR5KCMhsoLCz2hSAnbNfkHGk0.roa (hash: hDwrjYY17s8gLiCt6EYouA8sleyAadnkSLPmIcLH8nw=)
2: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: w8eQNLfH+Hedoz/TXqoyfLhiCyQVMG1uM9VPeeQN/Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:25:f4:21:4f:e5:96:c1:b0:80:b5:6e:3a:fd:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=6ef9517810df7af4751bc41626503dd4f4c1f259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:63:cb:c3:e8:99:6a:80:8e:d5:d4:e2:bb:
13:65:1d:20:21:15:ae:cd:72:bc:d5:fe:bd:a8:77:
87:21:17:a4:ba:57:4d:66:27:6a:37:52:3a:ed:25:
d4:37:4a:58:35:fc:3d:09:a7:1b:f6:ea:ab:7a:cb:
69:49:1c:ba:38:91:c2:1f:3a:04:96:df:fa:85:72:
2d:95:6c:33:0e:1c:60:c1:23:a2:23:cb:b8:60:42:
2d:1a:27:73:d5:93:02:b3:73:81:86:24:8a:a5:03:
ac:d4:8b:37:44:91:ad:bd:42:c1:61:0d:bb:73:0c:
c4:c7:cb:a1:90:b3:78:8a:b7:2b:21:5d:5d:16:4d:
99:83:24:a1:50:95:b1:51:77:80:43:a2:a6:ee:8b:
ce:e1:52:14:9d:3a:a5:a5:cd:73:9a:31:b6:16:8d:
dc:ac:a0:6c:f7:07:a2:2b:f1:c8:1e:c6:9e:32:8d:
45:87:19:62:6b:6c:08:f6:89:39:1d:4c:ea:55:21:
ab:23:52:4c:52:57:8f:b5:24:2b:5c:51:9f:6c:83:
2b:d4:bf:36:2e:e5:b1:06:a3:ab:44:35:22:34:63:
2b:02:10:bb:34:bc:89:21:90:39:83:36:ed:d3:b2:
c3:ca:3c:1d:8d:b7:4c:14:97:e4:a7:81:9a:3a:75:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F9:51:78:10:DF:7A:F4:75:1B:C4:16:26:50:3D:D4:F4:C1:F2:59
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:dc:a3:fa:28:24:25:43:eb:37:14:e2:fb:43:31:ce:05:35:
4d:4a:2a:e3:74:e2:5c:e4:af:ca:80:7a:9c:78:44:db:2d:2e:
8b:37:47:30:bc:b0:55:fa:6d:bf:3d:b8:1d:d4:de:95:91:3f:
d5:df:32:53:d4:19:cc:ba:ee:c6:12:6c:c3:e0:d5:2e:78:28:
ac:af:0b:2b:cb:fb:35:3d:07:d7:5b:58:bc:97:b3:f8:33:c2:
b5:6f:a1:18:52:03:ed:f6:a3:06:10:30:40:4d:e0:89:44:c6:
4f:f0:b5:c5:ea:95:87:42:6e:41:c1:40:5a:e0:1f:d1:f8:05:
d0:99:e8:4d:a4:16:52:92:31:a9:b7:70:8c:a8:f0:dd:00:ca:
43:f3:c1:9d:99:f4:60:16:40:95:37:5c:9f:a3:c4:dc:76:fe:
24:e5:ef:0a:9a:7d:45:f9:a6:40:42:02:47:a8:0b:6c:93:3f:
ee:9a:cc:24:e6:cc:2d:5e:68:1f:30:10:e0:6a:ab:b7:43:03:
16:3f:34:ff:95:29:c7:8a:b9:f7:fe:70:48:5a:d2:77:04:d6:
49:26:d6:0d:21:89:1d:f6:e6:55:05:69:37:27:77:00:31:10:
99:5b:99:65:27:7a:12:36:bf:43:7f:cc:e3:f1:bb:90:85:37:
1d:13:79:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:16 2026 by rpki-client