Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
File: 4tccU1qnoKzpP62r22WD-ISmxiY.mft (raw, json)
Hash identifier: w+Bn/E4SvW7ImzHWvvbMUpq6TwqEON9w/CW388w6jQA=
Subject key identifier: 36:A7:62:34:B4:3C:CA:5C:D1:09:53:F5:77:5A:D1:BF:04:61:A2:BF
Authority key identifier: E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
Certificate issuer: /CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Certificate serial: 019D28F2F9C3DA116C705FB99E34BEF14340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
Manifest number: 0960
Signing time: Thu 26 Mar 2026 07:01:45 +0000
Manifest this update: Thu 26 Mar 2026 07:01:45 +0000
Manifest next update: Fri 27 Mar 2026 07:01:45 +0000
Files and hashes: 1: 4tccU1qnoKzpP62r22WD-ISmxiY.crl (hash: 6f/wL6pcdrn0jqdpLGGK1pgZi4Dwwns5SE9KWYxnrhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:f9:c3:da:11:6c:70:5f:b9:9e:34:be:f1:43:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Validity
Not Before: Mar 26 07:01:45 2026 GMT
Not After : Mar 27 07:01:45 2026 GMT
Subject: CN=36a76234b43cca5cd10953f5775ad1bf0461a2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:07:9b:86:ee:11:76:2b:dc:88:9c:b7:a4:f9:
f5:72:27:5d:58:69:ec:e7:1e:17:eb:c7:b0:f6:9e:
39:e5:90:80:c3:89:f8:37:f1:28:97:e9:44:e9:f7:
ae:64:b1:4d:8a:dc:4c:1f:e2:c3:d3:21:65:ae:7c:
41:bb:16:d9:4a:62:57:66:23:62:44:62:03:80:3d:
90:a0:d0:fa:92:d7:48:2e:be:87:f2:71:eb:a4:c5:
73:a7:f8:a4:1c:bd:c8:a4:40:99:55:f6:60:e6:d2:
45:83:1e:4c:5c:24:db:0d:ed:af:38:47:72:2d:0c:
70:62:3c:4a:9f:79:0b:4d:4f:8e:63:4d:d0:96:8e:
d4:3c:f6:10:0d:bc:d4:3d:1b:9e:e4:c8:c7:29:72:
9f:f1:98:ab:b5:59:b9:98:d0:62:ae:20:36:9a:de:
23:1b:d8:9e:0a:32:cc:c7:29:d4:b9:3e:78:c5:43:
58:11:bc:ac:8b:36:ff:4c:c3:a9:3d:2e:7d:0d:18:
e8:ba:12:06:fb:38:d7:9e:e7:73:9a:99:8b:ce:42:
43:29:53:57:10:89:7e:bc:2e:63:3f:ee:d1:91:94:
f4:26:d4:28:8c:6c:51:4f:d4:02:6d:05:83:a5:b2:
1b:b1:2e:da:54:bb:7e:96:38:be:12:eb:ca:6b:ef:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A7:62:34:B4:3C:CA:5C:D1:09:53:F5:77:5A:D1:BF:04:61:A2:BF
X509v3 Authority Key Identifier:
keyid:E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:45:87:ff:ae:b1:20:21:1f:70:18:0d:e2:5c:dd:0c:63:a8:
2a:f3:cd:15:33:7e:b9:f0:8a:e9:62:4d:e1:cd:cf:1b:b7:e1:
d1:00:62:01:8a:2b:06:6b:8c:ff:60:b1:0d:06:3b:a1:8c:f3:
64:d9:ea:b9:0d:db:f8:a9:f0:74:fd:dc:51:e8:55:f8:68:43:
00:1f:6f:4d:8e:b9:6b:30:60:8c:40:6f:ef:c4:1d:a5:fa:5e:
47:73:41:77:3a:ac:e1:84:43:d3:06:b2:f1:f6:76:d4:19:4b:
a7:5f:aa:78:03:b3:ab:18:23:0b:bf:7e:2c:de:33:01:48:ce:
8c:7e:6a:02:44:26:f2:fb:c7:3e:c2:1b:03:85:32:8d:d8:9e:
52:a4:02:05:9e:b1:50:a4:44:84:a2:a2:bb:27:ee:5e:5a:49:
87:87:8c:6d:fb:98:a2:21:0f:69:da:96:38:a0:c2:14:14:3d:
2c:ec:6b:37:8a:3c:ac:2e:79:d6:cf:12:a7:e7:62:e9:14:ed:
89:dc:36:0e:9e:4c:05:40:06:b4:e1:a8:3b:e6:34:2a:b0:6f:
14:07:48:8f:57:92:8d:cf:3e:53:72:f8:6b:73:2b:e7:44:4b:
51:d1:b2:0c:78:33:dc:dc:bb:cf:52:b8:ef:97:1d:42:83:c0:
57:3a:bf:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:18:31 2026 by rpki-client