Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier: 4ByddjcrLFtGBBha4A59X7nskfnolSszmMLtbVjpkxI=
Subject key identifier: C6:88:85:83:7D:C7:9D:A6:9C:C1:A0:86:E9:95:EF:CF:67:2B:DB:A5
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 019D2772CE87D75E5E7E26D587C74D204031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 00:02:08 +0000
Manifest this update: Thu 26 Mar 2026 00:02:08 +0000
Manifest next update: Fri 27 Mar 2026 00:02:08 +0000
Files and hashes: 1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: 7d/f6/rgcBhyjouMZdO8Zezmt230TYD49pNDIruS3Ss=)
2: Ut_nk45-PrVxes0DMrlE6POGcXc.roa (hash: oo94Gr3/o7iKPPOqsqmwUWcuIt1lQW+gn6zRbGd06vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:ce:87:d7:5e:5e:7e:26:d5:87:c7:4d:20:40:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Mar 26 00:02:08 2026 GMT
Not After : Mar 27 00:02:08 2026 GMT
Subject: CN=c68885837dc79da69cc1a086e995efcf672bdba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:6d:4d:67:1f:a8:51:3c:cc:1c:95:a2:99:
3a:50:90:14:9b:98:2c:ce:e6:98:a5:9f:bc:50:7c:
76:3d:53:6c:76:7a:27:be:bb:2f:c2:1b:eb:8e:03:
18:c8:61:36:41:2d:2a:c6:0f:6c:bc:4c:db:96:2d:
f1:8a:b4:58:02:c7:73:55:57:79:11:90:a1:a3:41:
56:6b:f3:de:e8:a2:43:54:67:e5:c7:37:8d:aa:8a:
bd:b3:92:3c:b5:3b:03:92:80:d4:d9:53:d6:cd:e0:
df:27:9e:15:83:7b:6b:b6:cc:b1:cf:20:47:a7:52:
a4:1e:85:ed:41:a5:4d:76:b6:a5:fc:10:9e:e8:4c:
17:39:6e:de:71:a7:8e:c2:a5:02:08:3a:cd:93:4b:
90:cb:b8:3e:b2:5c:5b:25:76:64:3d:91:89:0b:ff:
11:a0:9d:e1:a8:81:f7:27:37:e1:61:95:4e:19:42:
1a:35:0d:0a:67:bf:c4:57:a2:b0:f1:06:e3:e2:a7:
cb:5c:c5:74:1e:92:29:10:f4:08:5a:bb:aa:76:6b:
65:2f:d5:4b:35:3f:4f:e5:cc:7b:ab:2f:2e:86:59:
71:ed:b1:7b:53:a6:47:fb:3d:d0:44:8c:2b:2d:7c:
79:86:a7:2f:66:69:9b:10:62:94:b7:88:37:fc:99:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:88:85:83:7D:C7:9D:A6:9C:C1:A0:86:E9:95:EF:CF:67:2B:DB:A5
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:51:fb:40:9c:b0:0e:86:91:13:67:f5:bc:48:c4:76:7a:a9:
f3:ae:ed:ff:11:93:07:77:66:87:26:7e:89:a4:4a:ff:50:49:
5a:e1:3b:ac:c8:b2:18:6b:dd:73:2b:d2:c6:11:6e:06:1a:01:
06:d6:9e:6d:71:8f:7a:83:f1:f0:cd:b5:2d:0d:77:c2:b5:27:
ce:7f:77:a5:4d:ec:ba:5e:e7:dd:c8:df:57:05:be:d3:2c:dc:
13:08:a7:f7:9e:95:55:4c:f6:e8:bd:4e:5a:76:fd:a0:b2:ad:
b7:07:42:dc:fb:6e:86:89:63:a4:b9:61:21:a5:4c:71:71:e0:
67:2d:de:36:ae:94:84:53:d8:4f:b3:9c:cf:31:15:5f:d8:f1:
72:0b:0e:2e:bd:07:3b:23:b9:75:2d:75:6f:9a:f8:83:29:0f:
a4:10:86:72:45:65:f3:b0:a2:28:70:ef:00:aa:83:ef:49:a7:
d8:bc:63:1c:21:12:dd:8c:42:e6:1b:00:95:88:5d:4c:1b:d8:
70:fe:ba:5c:90:5b:be:af:ab:6d:63:c1:9d:63:ce:ff:6b:2d:
fc:8d:7f:1e:ba:8a:bf:f2:30:66:db:ce:7a:7c:a2:d8:78:c8:
07:ce:c0:41:76:98:47:7d:0a:80:12:f0:12:16:ed:16:ba:fc:
bc:e0:0f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:16:31 2026 by rpki-client