Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
File: 4ucXSfgCklOQH3HUZBA56Q8al_o.mft (raw, json)
Hash identifier: CEZUz2RMlJpz7TpX9HWemebXGqhc1SgpBOnicxstC5U=
Subject key identifier: 89:94:CD:AE:8C:7D:A4:31:1F:1C:E9:2D:F7:A3:6E:A4:27:2D:37:0E
Authority key identifier: E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
Certificate issuer: /CN=e2e71749f8029253901f71d4641039e90f1a97fa
Certificate serial: 019CF34DE9BDF684BAF923F0A09C0BF0587D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
Manifest number: 8F
Signing time: Sun 15 Mar 2026 21:01:35 +0000
Manifest this update: Sun 15 Mar 2026 21:01:35 +0000
Manifest next update: Mon 16 Mar 2026 21:01:35 +0000
Files and hashes: 1: 4ucXSfgCklOQH3HUZBA56Q8al_o.crl (hash: fwgg6nmE9NiGVFEZ+8XFE95nnsBPAexrAlTxO2jo5Aw=)
2: JcRsIAV11TxO42T56xBXGNtE8kc.roa (hash: 3pabyOSkwOQBV5aehMnDFgC88a6tehv2gFnKarnZZow=)
3: XbFlHyCBOID9fwZAWWJUvKR3I1U.roa (hash: d1XG1P6bU90g/zeLcvn00HiiT+uT6qBEWhZA1fPBjyc=)
4: ivRHLwQWI9cVsBzw0XGDFOtrOBs.roa (hash: Ilz4iptmtb2hDf1QiYufOvE04YvbCXcLVA+AVaG4uKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 21:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f3:4d:e9:bd:f6:84:ba:f9:23:f0:a0:9c:0b:f0:58:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e71749f8029253901f71d4641039e90f1a97fa
Validity
Not Before: Mar 15 21:01:35 2026 GMT
Not After : Mar 16 21:01:35 2026 GMT
Subject: CN=8994cdae8c7da4311f1ce92df7a36ea4272d370e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:b4:5f:c4:26:8a:f5:82:3b:98:9f:02:9f:
20:6b:81:da:c7:01:77:43:95:9a:38:6d:42:28:ff:
b6:25:eb:5d:f8:78:00:6d:a3:85:3c:89:ee:af:a2:
d8:c4:c7:84:67:74:5e:b5:50:bc:cf:5c:24:f8:70:
4d:a3:84:25:9b:42:53:66:1b:ef:ad:f7:f9:df:21:
ea:4f:6d:6d:dd:2d:f1:3c:5b:0b:64:5d:d9:7e:ac:
61:fd:6d:7a:eb:fc:9d:37:b0:b2:6c:b6:d4:2d:ba:
c1:08:9d:a0:9a:7b:c0:06:71:e9:f1:4a:b5:84:ce:
85:a3:25:8d:d9:04:f0:b1:55:8a:0b:3e:e1:81:89:
9a:71:31:07:97:1a:a7:36:bd:de:b9:dd:3b:3e:27:
89:52:a5:a0:3c:8f:86:e5:50:92:2e:f9:fe:c6:3a:
cd:96:b4:76:1b:88:01:35:9b:3c:92:0c:b3:d0:ca:
25:a1:b5:f8:69:a6:38:5e:df:02:02:f5:93:15:3e:
df:1e:ef:97:19:4d:d7:78:52:7c:8d:1a:97:e5:04:
af:52:24:cf:39:3d:f9:d0:03:1a:a5:e2:bb:19:f3:
31:19:dc:c0:85:f1:eb:11:93:94:f4:6a:3c:48:51:
17:3b:b8:59:57:81:a4:7f:a0:64:be:61:1a:35:d8:
bb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:94:CD:AE:8C:7D:A4:31:1F:1C:E9:2D:F7:A3:6E:A4:27:2D:37:0E
X509v3 Authority Key Identifier:
keyid:E2:E7:17:49:F8:02:92:53:90:1F:71:D4:64:10:39:E9:0F:1A:97:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ucXSfgCklOQH3HUZBA56Q8al_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/33104a-a903-4278-bc60-8ad23018a5ad/1/4ucXSfgCklOQH3HUZBA56Q8al_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:0d:49:75:f0:29:40:89:d0:9d:db:13:0f:80:67:0e:74:d5:
66:a4:b7:3e:88:8a:00:ce:c9:0d:8e:bc:39:f5:44:c4:31:8e:
93:a4:77:72:90:0f:30:10:d4:a9:22:42:58:c2:f2:04:99:75:
5a:6d:a9:49:c9:90:f4:e9:d3:69:36:ba:2d:b1:ce:9f:22:72:
9d:40:fb:92:aa:6b:ef:95:24:b8:d6:9a:e6:e6:63:f6:b2:73:
2c:e7:9f:e0:f5:f5:10:83:72:85:ac:99:c7:4c:a6:68:25:16:
86:e2:18:fb:8d:64:f9:16:e0:be:13:7e:56:c3:71:74:83:01:
5f:13:d0:3a:11:55:77:9d:94:2f:4a:0d:12:7f:57:ad:32:7b:
ed:99:cc:07:5f:50:2b:57:48:ee:8f:31:de:a5:22:f6:2e:0b:
38:b6:28:4a:ea:d4:f0:b2:5c:90:07:e3:57:4b:50:38:f6:a1:
53:51:dc:34:46:fa:9b:00:8b:54:0b:92:b9:f8:8f:14:0d:17:
06:a2:96:6f:7e:47:00:e8:5d:19:09:5c:27:2a:e6:32:67:3e:
8f:87:cd:5c:f0:ae:0f:dd:f6:16:d1:28:ce:c3:4b:08:89:2f:
17:e0:94:d4:e5:f8:4d:d3:b1:59:5e:d5:2c:d8:a5:7d:d4:b5:
05:7a:25:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 04:51:01 2026 by rpki-client