Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier: f5jwERtiu1RZddfUCi+hEbjUt5tZGRrrYp21bzI2Jt8=
Subject key identifier: 60:CB:D8:90:35:A1:41:E7:BA:22:62:C5:9B:47:B9:9E:8D:44:66:85
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial: 019CC8630711142C61E97F1DC9790A67F5DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number: 1166
Signing time: Sat 07 Mar 2026 13:00:58 +0000
Manifest this update: Sat 07 Mar 2026 13:00:58 +0000
Manifest next update: Sun 08 Mar 2026 13:00:58 +0000
Files and hashes: 1: 0549ZLBzM4beeKAOhluORbZXoyA.roa (hash: WowH9si60Z2zpExgKOKJlrVy2XcJuZgBQ4vzt0r71L4=)
2: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: Xx1uBCBj5i/bdTQmQD8Uiun9yJ2jJ6nKstMD3s8nUNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:63:07:11:14:2c:61:e9:7f:1d:c9:79:0a:67:f5:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Validity
Not Before: Mar 7 13:00:58 2026 GMT
Not After : Mar 8 13:00:58 2026 GMT
Subject: CN=60cbd89035a141e7ba2262c59b47b99e8d446685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2e:4b:7a:9b:5b:ca:2b:85:47:c7:3a:0f:77:
c4:3d:f2:5d:9e:be:39:d0:b9:d8:d6:6a:30:29:d2:
a4:2f:f0:a3:d0:37:23:46:21:0f:f1:3e:c3:d4:8f:
90:05:a1:c2:93:15:90:dd:7f:4d:79:24:99:3e:25:
97:88:6e:e9:df:22:e1:0c:f1:c0:e4:79:6a:88:c1:
31:1d:f9:8b:8a:f2:c6:f8:17:3e:9b:1c:bb:1f:85:
34:b2:ee:74:63:cb:8f:52:3a:e8:34:c3:9d:35:4c:
59:32:05:89:dd:2e:be:ae:9c:6b:c0:b9:a6:75:37:
89:54:1a:78:ed:38:6a:d5:e4:01:86:82:03:33:59:
20:7d:ae:f5:04:b2:11:5c:04:1b:e2:27:f0:d3:f0:
28:6c:13:f6:af:10:52:ca:eb:57:b3:e0:e1:0e:ac:
28:00:ec:ce:07:6d:ca:81:ae:49:be:76:8c:33:95:
82:48:47:8a:e8:2f:ad:fb:bd:71:ab:ef:48:f9:2e:
9a:a2:90:62:06:c2:6a:30:eb:c5:41:92:c8:23:ed:
7c:9f:df:79:de:21:d5:e5:b0:ce:f3:73:18:87:9c:
1e:4d:ba:25:3f:16:18:0a:1b:28:72:9b:ca:a6:f0:
e7:4d:4b:5c:71:17:43:b0:93:cf:e5:96:35:6e:0a:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CB:D8:90:35:A1:41:E7:BA:22:62:C5:9B:47:B9:9E:8D:44:66:85
X509v3 Authority Key Identifier:
keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:33:3b:ee:dc:5f:19:bf:36:3f:d9:00:ef:17:ef:4e:d4:95:
71:12:cf:34:ff:24:ab:61:90:73:8d:9c:b3:1d:e8:a7:bb:b8:
41:21:1b:5f:1e:23:e7:bd:3c:6d:6c:40:bb:0e:d4:df:78:82:
b8:9a:db:04:42:3a:08:8d:69:66:00:29:0c:4c:b3:6f:7f:1c:
6c:55:c0:53:57:7c:9b:8b:88:c6:2b:1f:ee:62:3c:ef:70:f7:
75:37:b8:7f:70:58:fe:69:b3:5b:2e:77:5e:c0:4d:ff:82:79:
e3:76:c0:05:c2:77:50:a7:3e:da:94:d4:44:8f:ac:e5:dc:00:
72:65:b5:90:f1:b5:5b:b9:85:54:83:71:27:51:11:2e:8d:d5:
68:58:83:2a:1c:02:b3:a6:29:30:63:d8:86:45:d6:44:8d:dc:
67:66:62:7a:17:01:b4:d0:c4:ff:b8:5d:2a:77:b8:61:45:b0:
27:91:f3:7b:b8:6c:76:d3:fc:62:5f:b7:c6:94:25:f9:c2:8e:
c6:40:5c:9d:bf:1e:53:ac:2c:c7:86:9a:98:b8:a1:d6:94:7a:
af:ff:cd:50:af:4c:ed:74:79:61:a8:d1:69:3d:21:1a:75:bb:
1f:23:e3:16:90:20:ca:bf:60:27:b5:89:7b:59:ad:89:42:5b:
c7:e6:ea:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:31:32 2026 by rpki-client