Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
File: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft (raw, json)
Hash identifier: h/4DmCh+gZt0OIeNLbjCn87c+meU0OzWESWBLZ90qFc=
Subject key identifier: 08:24:78:45:AB:C1:9E:9F:35:72:CA:9A:53:25:9E:56:B6:0D:6A:F1
Authority key identifier: E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
Certificate issuer: /CN=e33779b8388d001fdcbddc48ace227f009850660
Certificate serial: 019D2703A041EB3BC4AE3AC5886C0EA1A404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
Manifest number: 1881
Signing time: Wed 25 Mar 2026 22:00:42 +0000
Manifest this update: Wed 25 Mar 2026 22:00:42 +0000
Manifest next update: Thu 26 Mar 2026 22:00:42 +0000
Files and hashes: 1: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl (hash: BHyJRVT+Aj6TZR0EDkD/47rmrzSseYUHLQ2sLKb4Yyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:a0:41:eb:3b:c4:ae:3a:c5:88:6c:0e:a1:a4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33779b8388d001fdcbddc48ace227f009850660
Validity
Not Before: Mar 25 22:00:42 2026 GMT
Not After : Mar 26 22:00:42 2026 GMT
Subject: CN=08247845abc19e9f3572ca9a53259e56b60d6af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ea:71:e3:b0:de:40:f2:e0:c6:15:9b:e0:df:
c2:34:2f:bd:f0:5c:05:65:dc:2e:df:09:cb:e6:a3:
eb:5a:b7:2b:71:9d:27:f0:6a:08:90:d3:5c:68:ce:
fd:80:22:97:ae:3d:b7:e2:b3:25:21:b5:52:e8:31:
39:2a:b3:2d:ea:b0:3e:a5:3b:d8:ac:16:40:cd:97:
66:80:6d:92:61:f3:5e:c1:1e:1b:01:8e:f6:7c:17:
42:85:f6:c3:d4:92:4e:e5:4f:ff:13:c5:80:37:a6:
ed:e1:8c:ea:7a:07:51:aa:8f:b0:36:23:51:83:7a:
99:0c:61:7e:60:a0:14:8b:0c:71:8c:25:1f:b7:90:
c0:d3:e5:79:c0:80:f8:f8:8c:d6:36:1f:01:7e:f1:
c3:48:c5:90:57:30:b9:25:0e:b9:42:2b:af:fc:4e:
e9:e6:e5:81:78:52:8d:60:ad:1a:56:cd:d9:6a:6f:
55:85:fb:e1:9b:59:cd:57:f9:cf:b2:09:64:05:50:
15:5c:1e:d1:12:32:ec:20:5d:55:0d:28:87:49:1c:
75:3b:4f:d2:65:bf:50:f2:bd:0a:9b:10:37:c4:9b:
24:b3:f7:c6:9b:92:cc:65:b4:12:4d:61:d1:7e:e9:
bd:ca:1d:5e:dd:f0:4f:d3:e2:5a:7d:76:82:66:fd:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:24:78:45:AB:C1:9E:9F:35:72:CA:9A:53:25:9E:56:B6:0D:6A:F1
X509v3 Authority Key Identifier:
keyid:E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3f:65:24:23:91:27:a7:aa:e4:90:a0:f2:67:d7:9e:e6:d6:
1d:a8:5f:27:24:77:3f:82:92:94:bc:d6:c5:35:1c:fa:21:b9:
33:0a:a6:7a:3d:43:a1:a7:88:f0:91:59:22:0d:53:f6:df:e8:
b6:50:84:61:d2:96:f5:03:78:d4:ea:2c:57:78:99:8f:59:ee:
05:5c:9f:02:02:c3:9f:3a:64:39:16:d2:f8:33:76:f5:37:9d:
20:3a:7e:0e:40:58:b5:42:c4:ee:4a:ad:63:d1:12:5d:5a:09:
33:34:63:fa:0f:8e:36:5e:90:2b:65:eb:82:19:f8:5d:ae:f8:
25:e9:21:56:87:55:32:44:eb:af:eb:38:5c:17:49:2c:a2:a6:
83:dd:81:e0:2d:d5:35:21:88:c3:ea:18:b3:a6:6d:8b:a6:47:
6e:06:d2:2f:e7:7f:d4:30:d5:cc:0c:37:40:19:fc:c3:36:83:
a6:2e:d1:b9:2a:a2:06:ae:35:c4:36:57:59:25:0a:5f:cd:cd:
ee:d8:4a:b2:de:89:10:d7:c0:66:3f:a9:3e:d3:38:9b:c9:af:
e6:b4:e8:69:9a:a8:8c:0b:99:7b:16:49:a5:fb:6d:41:e4:9d:
91:61:ae:b6:83:81:02:c2:50:a9:8d:27:3b:f8:dc:98:18:bf:
34:53:ee:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:46:55 2026 by rpki-client