Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
File: 4GU20rF8RcF1c58zExGb4hnTMaw.mft (raw, json)
Hash identifier: zQb6bvOMTqtPEEr3UuXr3P2OdO/KMmjrRm5YrEUeNMU=
Subject key identifier: 6D:67:27:15:FA:3A:D8:9C:9D:2F:C1:45:D0:27:64:4E:33:BC:72:B6
Authority key identifier: E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
Certificate issuer: /CN=e06536d2b17c45c175739f3313119be219d331ac
Certificate serial: 019D28849E86640D5697FF825DFA0AA09E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
Manifest number: 1697
Signing time: Thu 26 Mar 2026 05:01:13 +0000
Manifest this update: Thu 26 Mar 2026 05:01:13 +0000
Manifest next update: Fri 27 Mar 2026 05:01:13 +0000
Files and hashes: 1: 4GU20rF8RcF1c58zExGb4hnTMaw.crl (hash: zKmnPGOvsM1CRewDeu9CbXD9dqNvTIXARXGfj1JznQY=)
2: E582u3b_wirr6G_w4u9uogz74z8.roa (hash: 81B6PrtCWAN/tZ4dAD4doQginsu0czWU20EU6ygqMqw=)
3: XzHwdc8CnV6b37aUuwbB9K5aCVg.roa (hash: Ajp8GTPxK9A3C7R9uHBAngG8he1JSPPWTWmru9BuMHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:9e:86:64:0d:56:97:ff:82:5d:fa:0a:a0:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06536d2b17c45c175739f3313119be219d331ac
Validity
Not Before: Mar 26 05:01:13 2026 GMT
Not After : Mar 27 05:01:13 2026 GMT
Subject: CN=6d672715fa3ad89c9d2fc145d027644e33bc72b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:78:b8:45:cb:8b:88:ec:43:64:22:11:ce:
39:cd:32:a5:b2:2c:a8:1d:61:c3:6d:8c:68:3f:6c:
e4:51:c6:ac:57:30:aa:f3:59:31:9c:9d:6d:16:89:
48:b1:6c:ba:d4:86:eb:01:a4:cf:d9:4c:33:16:4f:
70:69:73:0c:ee:c4:1d:3a:92:83:33:01:38:cc:a4:
33:42:20:ef:54:9e:48:d4:f8:1c:a1:d5:c5:e0:ad:
84:34:e9:7b:74:4d:d9:c0:b2:53:ce:21:b9:8b:a5:
52:06:64:d6:3a:c2:52:b1:c1:5f:cb:bd:12:d1:db:
92:a3:db:47:e4:59:4a:c2:46:ab:d2:57:07:db:df:
c6:40:52:b1:da:81:d2:ba:83:3e:7a:61:82:b4:65:
44:a9:13:9b:2e:87:52:4a:58:cc:3f:69:c2:9f:5c:
d9:f9:b5:26:1f:e0:c7:18:d4:c9:49:f0:6a:6b:9d:
04:48:56:d5:20:f2:1d:8a:2e:4d:43:71:5a:1e:89:
56:df:1b:71:0a:4c:ac:35:eb:1c:1a:b3:4f:f7:f3:
9c:2c:d9:5c:7f:e9:53:7d:d1:2c:11:a1:ff:3b:25:
64:23:73:ae:40:ce:f6:15:88:5a:b4:f8:3a:15:94:
ca:e7:ec:f0:f3:17:cd:11:78:b8:dd:63:e0:2d:63:
78:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:67:27:15:FA:3A:D8:9C:9D:2F:C1:45:D0:27:64:4E:33:BC:72:B6
X509v3 Authority Key Identifier:
keyid:E0:65:36:D2:B1:7C:45:C1:75:73:9F:33:13:11:9B:E2:19:D3:31:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GU20rF8RcF1c58zExGb4hnTMaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6e43b9-c6a7-4d51-8061-06c8bb374a58/1/4GU20rF8RcF1c58zExGb4hnTMaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e3:e1:1b:89:b6:58:d2:7d:28:ac:34:b3:cc:60:18:b2:df:
be:14:96:8e:31:05:4f:bd:c6:f4:fc:f1:86:44:01:46:eb:73:
b9:72:00:09:35:e8:29:61:64:e7:3f:e1:71:2c:cf:1f:39:c2:
e4:38:60:ba:2a:d1:7e:0b:f9:d2:f4:fc:b1:7c:65:9d:6b:89:
d6:51:13:2d:4c:5b:45:52:5f:49:5f:e7:c9:b9:2a:c2:48:5b:
da:87:44:57:33:d8:b2:6c:b0:3c:d1:82:87:eb:94:05:7f:5f:
ac:ab:4c:0e:cc:31:05:29:db:e5:cc:4b:38:7b:67:be:3c:6f:
12:c3:1b:73:4e:32:f6:22:86:14:4c:fd:9f:77:7c:36:21:0e:
8c:dd:50:57:e0:e7:a9:08:8e:80:da:07:09:d0:eb:70:c4:f2:
83:a8:35:f9:3e:f4:df:84:62:ec:25:9e:94:d8:62:e1:7b:97:
47:75:64:31:f5:76:f8:fb:c0:84:2b:88:28:b4:af:c1:e7:1c:
07:cc:a2:ed:27:f6:ec:ec:5f:d3:f1:bc:1c:ff:8d:7e:5f:df:
c9:69:f7:b3:66:6f:b3:9b:ee:4d:a4:db:d4:2c:32:17:39:6c:
01:69:ae:80:57:4e:cd:c2:19:9a:93:39:03:74:42:ec:68:bf:
3b:49:2e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:10:43 2026 by rpki-client