Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
File: Zp4hLXARG0TeZvV1An4ADNRB_c4.mft (raw, json)
Hash identifier: NDrQuJ5COmr0fY3YRwxD3TFOdwdIFUByDurv27o1G0M=
Subject key identifier: 35:0F:41:C6:8B:20:EE:91:14:71:0E:72:23:64:03:86:58:88:3A:20
Authority key identifier: 66:9E:21:2D:70:11:1B:44:DE:66:F5:75:02:7E:00:0C:D4:41:FD:CE
Certificate issuer: /CN=669e212d70111b44de66f575027e000cd441fdce
Certificate serial: 019D2961A61E5C5C3AEBEA33E4CAD2F9A809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
Manifest number: 01EB
Signing time: Thu 26 Mar 2026 09:02:38 +0000
Manifest this update: Thu 26 Mar 2026 09:02:38 +0000
Manifest next update: Fri 27 Mar 2026 09:02:38 +0000
Files and hashes: 1: YUIe43riMIY5RXnu_EJdi74BiD0.roa (hash: 0nBv6yPBFubyXH/hyUWyIZCqz8H+FHQFrEWthFcJ/fU=)
2: Zp4hLXARG0TeZvV1An4ADNRB_c4.crl (hash: VelJHCWNr+Wl2+qih5QC3bB16O5kiHz8ht3L2Ugtmfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:a6:1e:5c:5c:3a:eb:ea:33:e4:ca:d2:f9:a8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669e212d70111b44de66f575027e000cd441fdce
Validity
Not Before: Mar 26 09:02:38 2026 GMT
Not After : Mar 27 09:02:38 2026 GMT
Subject: CN=350f41c68b20ee9114710e722364038658883a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:b0:46:72:74:59:b7:fd:46:1d:4e:84:05:
08:9f:67:bc:cd:87:b7:d7:b1:60:d2:76:83:7e:74:
65:63:8c:b0:10:80:1c:d8:df:89:6e:0f:3d:15:b1:
32:19:fa:b6:07:dc:97:eb:e3:a3:2c:80:90:b7:4c:
d0:30:3b:c5:bd:73:31:ff:ad:2b:f3:e9:fd:84:50:
61:d9:2c:28:4a:c1:3e:19:af:4e:5d:d3:81:ca:4d:
9c:e5:59:8f:2b:5a:59:20:9f:a5:51:d6:55:ee:95:
f4:70:2a:52:1c:78:78:5a:b7:30:7b:ed:dd:97:90:
14:65:6f:7b:e3:85:af:6c:27:3f:98:e1:74:eb:bf:
7e:9e:09:1c:ea:f3:be:5f:8b:c1:c3:cf:3b:39:57:
ff:50:b0:0e:0b:c7:ba:24:04:df:b3:48:21:16:fb:
90:58:c1:b6:14:3d:0a:20:db:d9:d4:8b:9c:ed:ce:
2c:17:a1:88:73:f2:5f:5e:af:09:c6:27:4a:29:8a:
7c:4e:cd:10:37:64:18:fa:66:85:59:2f:ba:f1:25:
1b:f4:82:8e:3f:0a:05:0a:55:b5:73:64:a9:0a:5e:
65:37:c8:a5:c5:55:b1:ff:20:98:04:35:87:ce:56:
1e:94:33:e9:90:44:9a:9f:33:31:8b:98:5b:69:eb:
40:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0F:41:C6:8B:20:EE:91:14:71:0E:72:23:64:03:86:58:88:3A:20
X509v3 Authority Key Identifier:
keyid:66:9E:21:2D:70:11:1B:44:DE:66:F5:75:02:7E:00:0C:D4:41:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:aa:9f:41:4f:fc:19:6b:fa:a2:c1:92:b6:2a:86:aa:11:38:
00:a7:39:df:d6:05:f3:19:a9:57:39:0a:a1:dd:ce:ef:3d:8e:
90:d5:22:f5:18:f4:43:40:02:c3:96:33:96:61:ae:74:99:d4:
1a:66:40:85:2d:c6:5e:9f:79:ab:d3:a7:72:df:f2:4d:50:a9:
da:22:86:90:da:68:70:76:89:d9:fb:d2:e3:fc:83:74:5c:06:
fd:3c:a0:3f:bf:2a:2b:c6:4e:b1:c1:59:b4:b0:db:03:fd:5f:
42:5d:c3:32:e0:28:49:ad:b8:6e:5f:b6:d8:b6:0e:4e:53:0f:
2d:4f:69:a8:76:6d:29:8e:f9:7f:c6:ec:1f:f6:22:35:5f:b4:
af:31:2d:9a:e2:51:96:e9:95:13:da:6f:03:7a:22:4e:00:2d:
e0:6f:98:60:73:8d:d3:44:4b:8c:13:77:3b:27:1f:2d:2c:42:
0c:d1:29:02:50:5a:c1:eb:ff:a3:7f:93:69:65:0c:7c:83:9b:
60:8b:3c:11:bb:44:ee:17:10:50:87:89:a0:ce:57:20:4a:20:
ca:0b:ca:7d:c9:b5:f0:24:56:ab:58:e0:77:79:ec:95:4e:20:
2f:30:5a:6a:bd:13:ce:71:50:3b:8c:07:7d:34:99:3d:26:2a:
59:4a:9c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:51:39 2026 by rpki-client