Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier: RBmbzeQUw4qLgbvPXstzFdsDa4+QKQlH1lU4Y8qBOak=
Subject key identifier: 43:53:84:14:D6:D2:1B:DF:01:8F:53:8C:A5:89:02:9C:C9:02:FA:74
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 019D3752EF44423CD8D0400CB5B4533D46C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number: 0D33
Signing time: Sun 29 Mar 2026 02:01:15 +0000
Manifest this update: Sun 29 Mar 2026 02:01:15 +0000
Manifest next update: Mon 30 Mar 2026 02:01:15 +0000
Files and hashes: 1: 2mbNbpusYk6iw7nI_ZoVXkx25Kk.roa (hash: jECrA0GxGXQNN5tkvnTh0W3htAuhM6FaT6MhUte5d2Q=)
2: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: WVVoD+KentTXD7XDoJocUEbsHegFBACcbWCSy9YSVrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:ef:44:42:3c:d8:d0:40:0c:b5:b4:53:3d:46:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Mar 29 02:01:15 2026 GMT
Not After : Mar 30 02:01:15 2026 GMT
Subject: CN=43538414d6d21bdf018f538ca589029cc902fa74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:ca:41:bd:7c:08:3d:af:67:32:0e:3a:ea:
8f:b1:4f:6e:a7:ea:12:4d:bc:90:b3:d1:03:88:71:
7d:8b:9b:4a:7b:73:87:76:58:31:c2:27:3f:f8:37:
c0:c1:2b:d9:55:44:a0:cc:aa:b4:3c:89:0c:a1:63:
71:56:02:16:9f:d1:63:9f:17:21:88:0c:f5:05:d2:
c1:8c:76:14:c6:ac:9f:33:e7:ea:2f:d9:94:c9:44:
5e:75:ff:3b:20:39:ac:bd:97:7f:d8:c5:88:78:25:
6b:24:49:11:90:f4:39:92:31:3f:dc:f5:b0:17:d4:
4f:fa:f5:ac:1b:d2:aa:fe:26:4b:90:e8:f2:8a:15:
b8:f3:e3:8f:37:53:48:d4:33:71:e4:31:42:76:39:
bd:30:9c:02:10:27:43:7b:d2:91:62:f8:90:7a:aa:
b6:97:65:3b:9e:d8:97:a6:b9:9f:95:1f:45:cc:cf:
be:9d:d6:c3:2c:11:2c:d1:68:9f:f3:a1:1c:cf:97:
3d:9a:33:39:0a:8b:78:e4:dd:79:29:d8:33:8c:42:
59:21:c4:a3:07:5b:9b:43:b7:7f:b0:ca:19:0d:bb:
ff:de:06:63:2c:2c:1d:12:94:ca:08:03:bb:5a:bd:
e0:7c:50:09:3b:f7:f5:6b:25:69:2b:85:c4:aa:14:
de:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:53:84:14:D6:D2:1B:DF:01:8F:53:8C:A5:89:02:9C:C9:02:FA:74
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e6:6e:69:35:e8:6b:5c:48:0d:c6:cb:4e:d3:a8:25:3d:7d:
c0:66:1b:9d:14:8a:5d:6a:ed:7c:18:7c:14:a0:14:54:f7:d0:
8d:32:6e:89:49:cc:b6:8f:24:b1:e4:f2:33:cd:f3:10:5a:29:
37:c2:ea:b8:46:ab:1a:9b:5f:b6:cb:77:31:a0:45:1f:39:d4:
3c:b6:dd:06:13:7f:c1:5b:60:bb:33:3c:be:cc:18:d7:2c:9e:
6b:7b:86:8d:f4:a4:f6:9e:17:1e:74:fd:47:a1:f2:62:4d:98:
c8:f8:0c:f6:7c:42:5c:b3:7d:7a:7a:c2:df:fa:2f:d1:76:d2:
71:14:f9:dd:60:68:f1:25:c0:77:7f:e1:de:e7:e4:10:ac:f3:
f7:2e:34:dd:d7:62:f6:6b:5c:ac:78:23:8c:a9:a3:23:cf:2c:
cd:eb:fb:c1:8b:64:2f:e4:97:9d:65:6a:86:40:a0:14:61:aa:
b7:06:7c:ee:10:11:c0:50:ea:83:70:8b:85:db:d2:8c:f1:ce:
ed:25:a5:7f:66:15:0e:18:08:fd:32:ba:3b:20:41:77:7e:c6:
6a:f2:5f:1a:89:0d:c4:2d:24:f7:5e:b5:31:1b:f2:01:e7:d0:
0d:d3:3d:59:8c:b1:77:df:23:cd:c9:24:c0:c6:eb:ea:96:bb:
c0:5b:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:33 2026 by rpki-client