Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier: j3oFbcJdSaeoyEcDwhaZ1VhJ5P137YQcM/Yjwc3G0gI=
Subject key identifier: AC:59:D9:2A:05:E3:60:C0:6B:E9:A6:08:D0:5E:A2:BE:E6:CC:1A:77
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial: 019D28BB686DCBDAFA5F59F6C786CCFE2CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number: 15B7
Signing time: Thu 26 Mar 2026 06:01:03 +0000
Manifest this update: Thu 26 Mar 2026 06:01:03 +0000
Manifest next update: Fri 27 Mar 2026 06:01:03 +0000
Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: zUe1Z/ES41Cx4AzCvmBp395XlJVaUPpeLkhJKTlg/XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:68:6d:cb:da:fa:5f:59:f6:c7:86:cc:fe:2c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
Validity
Not Before: Mar 26 06:01:03 2026 GMT
Not After : Mar 27 06:01:03 2026 GMT
Subject: CN=ac59d92a05e360c06be9a608d05ea2bee6cc1a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:68:06:d8:c9:55:2f:29:71:9e:a0:12:30:
1d:0c:ff:27:3d:ee:f7:ac:55:14:c9:4d:e4:ab:ca:
e6:82:74:ab:bc:03:90:84:c7:4a:3e:69:0f:cc:05:
23:62:37:80:b9:74:33:55:20:5c:3f:8a:6e:a5:1f:
a0:62:fb:7f:e6:e8:53:e6:92:97:94:5d:08:be:5e:
41:a8:93:ba:d6:25:40:cf:c2:6c:98:ea:45:8c:e7:
88:6f:60:bc:d6:1a:31:a1:70:0e:4b:f8:8f:86:0f:
26:da:cb:83:49:dd:44:f8:0a:4c:9f:61:01:8b:23:
a0:d9:86:c0:3a:0d:ab:e6:1d:b5:65:9c:a1:a7:2b:
97:fc:a6:ba:ed:c2:71:23:c6:3f:c2:2a:95:33:ca:
8e:ac:c3:3e:79:c4:1c:9a:64:30:93:29:64:aa:91:
3b:0a:1d:4b:84:6b:b6:90:f7:97:2c:fb:d1:8c:c6:
08:d4:34:c3:03:2b:36:de:01:ed:bf:59:ad:05:1b:
6b:ec:1e:26:97:17:a2:79:c7:6f:db:de:95:0a:56:
7c:4a:d2:f1:35:c3:be:31:a0:15:e0:17:72:e5:67:
8b:4f:5d:44:35:92:62:74:be:34:ba:71:07:af:02:
c3:c4:e6:ee:a1:e4:da:24:66:ea:42:99:b2:bb:3a:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:59:D9:2A:05:E3:60:C0:6B:E9:A6:08:D0:5E:A2:BE:E6:CC:1A:77
X509v3 Authority Key Identifier:
keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:04:1a:8f:4a:3f:88:80:bf:27:f9:5a:60:eb:57:30:c3:ed:
e1:b6:69:7a:b9:bf:fe:a6:81:d8:6d:fd:31:85:12:60:f2:ea:
af:93:fe:64:9d:e9:da:fd:90:54:3a:38:2d:45:b9:03:e9:59:
26:37:d6:85:55:f7:3b:f1:79:77:82:44:a9:17:29:38:9e:13:
f0:23:5f:59:c1:3f:40:73:8f:55:08:40:0d:65:bb:18:44:a5:
91:56:54:4a:37:e9:59:b0:db:1e:9e:c1:4c:a7:41:25:a0:c1:
07:37:c9:70:6d:d4:92:5b:02:ff:42:ab:2a:c3:c7:e5:d8:10:
8a:c1:f1:42:00:31:de:ac:a4:35:1f:6b:25:c9:eb:2d:b4:19:
e2:99:75:87:37:21:17:24:b8:c9:a4:2a:3b:94:40:45:3f:e0:
91:45:ca:6c:fd:2a:8e:7e:7f:6e:69:9a:83:26:eb:9b:71:e9:
19:10:6b:cd:5d:c5:cf:f1:40:5d:9f:6c:29:a7:88:b9:33:98:
f3:1f:df:3c:24:f0:a2:d0:69:dc:19:51:48:c2:9a:9c:36:2f:
3f:8a:01:70:c2:52:7a:c0:1b:5c:ca:55:37:67:e0:b0:28:4d:
cc:c3:31:2e:c9:bb:f0:33:cf:fd:d1:4e:ba:a4:e1:19:23:b9:
0a:ff:f2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:32:15 2026 by rpki-client