Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
File: _4MmzOvF_DL70ONP7n85u6iPuaI.mft (raw, json)
Hash identifier: xx0z9A5G13CMvVJqNP3WatqfI6iL27uoLSOxx9ms7RI=
Subject key identifier: 1D:42:82:99:8C:4C:90:A3:85:50:47:8C:F1:54:31:16:42:2B:59:CA
Authority key identifier: FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
Certificate issuer: /CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Certificate serial: 019D29CDD35466980B89F527452BD004EAEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
Manifest number: 1407
Signing time: Thu 26 Mar 2026 11:00:47 +0000
Manifest this update: Thu 26 Mar 2026 11:00:47 +0000
Manifest next update: Fri 27 Mar 2026 11:00:47 +0000
Files and hashes: 1: _4MmzOvF_DL70ONP7n85u6iPuaI.crl (hash: UblYiYvr1PxglO9EHE5jjEmT3sdzHNTB2MCOghtZr3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:d3:54:66:98:0b:89:f5:27:45:2b:d0:04:ea:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8326ccebc5fc32fbd0e34fee7f39bba88fb9a2
Validity
Not Before: Mar 26 11:00:47 2026 GMT
Not After : Mar 27 11:00:47 2026 GMT
Subject: CN=1d4282998c4c90a38550478cf1543116422b59ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:1a:83:e0:45:8c:20:c8:30:e1:0e:bd:23:59:
b8:96:ca:c7:03:74:3f:82:3a:b7:3a:5c:e2:66:79:
14:bb:a1:1d:57:3f:85:6f:94:86:34:b4:28:bd:c5:
8d:fa:e2:5e:be:fc:66:6a:5d:2d:ed:96:f5:a8:c6:
d5:1a:27:7d:06:38:a4:2f:68:d4:c5:85:35:ff:bd:
a0:59:ea:81:7e:25:02:1e:38:bb:49:5e:21:a7:b9:
7c:7f:a2:37:8c:ab:6c:8f:a9:ec:42:22:e2:ee:d9:
a2:3f:b6:82:24:32:b1:20:93:bd:38:15:7b:64:c1:
ee:60:5a:ac:72:26:77:f6:e5:c6:ea:ce:53:05:d5:
38:39:0d:2e:d9:9e:57:d4:af:71:94:10:5b:cb:3a:
96:0c:c1:49:0a:33:79:bf:6f:1a:7e:b8:42:c6:28:
99:44:bc:45:99:dc:48:b9:da:96:7f:bc:17:8a:0d:
7e:a3:c5:4e:9a:ef:f2:13:e2:e6:2c:f6:dd:21:91:
6d:e5:6b:57:7b:39:82:e3:1f:8c:b2:ef:18:7a:b8:
9d:84:17:d7:a7:ea:f8:08:b3:a1:6e:e2:62:9b:17:
b1:cf:54:fb:b9:66:15:f4:75:14:93:eb:ee:0a:ff:
2c:a2:9f:57:f0:15:fc:25:fe:ca:a3:db:d5:d7:49:
14:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:42:82:99:8C:4C:90:A3:85:50:47:8C:F1:54:31:16:42:2B:59:CA
X509v3 Authority Key Identifier:
keyid:FF:83:26:CC:EB:C5:FC:32:FB:D0:E3:4F:EE:7F:39:BB:A8:8F:B9:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4MmzOvF_DL70ONP7n85u6iPuaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6f5b6a-f4bb-4fde-8a51-8b1344b7d5a6/1/_4MmzOvF_DL70ONP7n85u6iPuaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:be:4d:f6:d9:af:d0:c2:23:56:7e:3f:9d:4c:3e:56:ed:fc:
a7:82:4e:cc:4c:fe:f3:31:7b:c4:d3:f1:a2:25:d0:af:b2:d9:
4c:a8:77:d5:38:97:e1:6e:48:be:a4:4a:cf:dd:ae:46:1e:73:
27:8e:69:d4:a4:47:9e:2e:ad:11:e9:a3:c7:02:77:c6:37:a3:
0d:64:8f:1b:34:c2:c1:e4:b2:cd:1a:6d:06:84:6a:05:49:bf:
24:02:d9:5c:96:33:83:ad:e6:94:4c:f2:67:a9:07:23:33:ff:
3b:2c:cb:f4:ed:22:09:fe:6b:6f:ad:29:b5:c8:09:e6:8a:35:
2c:06:eb:c3:a1:d8:a6:cb:0e:9c:7a:ba:c4:4f:2c:60:40:de:
53:f3:95:64:72:38:9d:49:c2:a7:af:8d:08:a1:c0:45:5b:c0:
a0:40:aa:dc:ca:d2:ce:e8:65:08:56:01:86:de:73:1a:a9:6c:
ee:ab:ea:23:96:bb:d8:74:b1:a3:36:66:ec:35:32:da:75:37:
d3:54:4c:55:08:5d:c5:33:53:0c:19:71:83:dd:68:eb:f1:c9:
51:ca:c7:4d:d0:1f:e9:d4:59:1c:23:a2:a8:31:9c:76:ac:d9:
87:ce:83:11:ba:86:e7:0b:2a:b5:dc:10:46:9e:b7:e0:28:7d:
47:cf:d5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:39:38 2026 by rpki-client