Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
File: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft (raw, json)
Hash identifier: 2AmRNGhuzs9UugO5CyMupjrsuooWHZ+t+w9QUVtD8C4=
Subject key identifier: C2:58:74:85:61:FE:6D:89:61:F2:D3:A6:56:AC:02:FA:A2:FE:B0:E1
Authority key identifier: E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
Certificate issuer: /CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Certificate serial: 019D299775D3D45BD1767059C0C5E6B09E5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
Manifest number: 0741
Signing time: Thu 26 Mar 2026 10:01:25 +0000
Manifest this update: Thu 26 Mar 2026 10:01:25 +0000
Manifest next update: Fri 27 Mar 2026 10:01:25 +0000
Files and hashes: 1: 4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl (hash: sakNmLkhqe0WCossT5MiFFTbm3WJzC3tGU7HrI+x3Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:75:d3:d4:5b:d1:76:70:59:c0:c5:e6:b0:9e:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f43f3e61990fd3e5767debe98e51cc19cac708
Validity
Not Before: Mar 26 10:01:25 2026 GMT
Not After : Mar 27 10:01:25 2026 GMT
Subject: CN=c258748561fe6d8961f2d3a656ac02faa2feb0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a5:96:4d:07:92:3a:50:74:d5:25:a8:f4:e9:
4a:f1:c6:66:9f:d3:8c:43:2f:1f:c2:e5:90:62:18:
6b:65:b5:03:71:07:10:87:90:c9:5a:bf:02:35:1f:
50:dd:9e:5f:f2:91:15:07:e1:3a:6b:45:6f:82:59:
63:ee:a8:62:f3:d8:fe:3f:e2:5d:7e:f0:70:c8:39:
6e:e9:af:5d:a9:67:2b:a4:3d:05:8e:30:08:e2:d1:
1c:0c:97:89:31:f4:00:ea:2f:af:08:fe:3e:a5:15:
2e:ec:eb:1c:a4:80:11:f8:72:43:ff:4c:34:b5:2e:
ee:fc:06:b4:c6:52:f6:bc:49:9b:15:a3:70:d5:9b:
ca:93:47:fd:51:e8:7f:60:07:84:ed:03:31:5b:ad:
41:f5:2c:f3:87:9b:dc:4d:10:56:ff:c4:8d:db:f8:
34:d6:32:9c:90:45:a3:61:83:55:cb:2c:41:ec:cc:
55:41:eb:59:81:b0:aa:a6:20:f4:f6:c5:fe:0a:eb:
34:c6:31:0e:9b:dd:32:2e:97:3e:49:7e:3f:7a:c5:
b0:71:d7:77:69:fe:95:5c:da:1b:e7:57:d4:16:b0:
b8:9f:05:6b:2d:9b:8a:a1:d5:c8:32:fc:3e:1e:bc:
a0:b3:0c:56:aa:c1:2f:6d:57:74:b6:02:f2:39:41:
a1:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:58:74:85:61:FE:6D:89:61:F2:D3:A6:56:AC:02:FA:A2:FE:B0:E1
X509v3 Authority Key Identifier:
keyid:E1:F4:3F:3E:61:99:0F:D3:E5:76:7D:EB:E9:8E:51:CC:19:CA:C7:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d5383b-10e5-43e9-b320-3234160dbcd4/1/4fQ_PmGZD9Pldn3r6Y5RzBnKxwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:8c:28:46:94:b0:93:60:4e:c2:e3:f2:27:b4:8e:cd:67:31:
37:48:f2:42:2d:7b:26:73:10:52:e5:19:be:47:20:03:72:2c:
90:3c:4e:8f:d3:f8:e6:cd:e7:3d:6d:99:ff:62:4b:4e:f8:b1:
95:73:da:33:55:c8:92:c3:1c:5c:41:66:16:46:b5:29:ad:11:
f5:f4:ec:20:fc:f7:24:b0:64:d4:b2:71:7c:4b:55:d2:66:f6:
be:c6:f7:02:05:b5:9e:57:b2:10:10:ac:92:71:22:f4:9f:e9:
d7:53:ff:8e:7d:cd:10:fc:32:fe:48:33:aa:a2:60:22:bb:b4:
9a:99:a2:46:cc:e1:25:ef:8d:d3:e4:c3:85:18:8a:b0:ed:8e:
a8:e9:f0:d1:ee:45:51:10:86:06:55:ec:18:89:0b:3b:cc:9b:
ab:c5:9f:1d:dc:d7:71:95:c8:cc:76:37:2e:83:0f:ba:cd:05:
70:ec:4c:01:02:0a:d8:f6:22:e0:5f:2f:49:36:65:95:bc:26:
1b:06:29:92:db:f0:53:80:79:40:f5:17:d8:01:d0:58:fd:24:
0c:b8:0d:6f:57:70:a0:a0:b4:ba:c7:38:23:0a:20:5e:3a:99:
ee:78:71:54:85:a0:67:70:92:c6:c5:6a:ea:a4:9b:20:aa:8b:
1b:ca:22:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:21:09 2026 by rpki-client