Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
File: 4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json)
Hash identifier: 6HB25uO8xH2sHSvtoAWczDcpMev9Cbu1j2cIHp3Fw7I=
Subject key identifier: 22:6E:1F:4A:9B:97:99:1B:CA:3B:8F:9C:B9:86:D7:4B:30:92:CE:04
Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155
Certificate serial: 019D28F217697C04D5D67ABF784D31997215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
Manifest number: 02F4
Signing time: Thu 26 Mar 2026 07:00:47 +0000
Manifest this update: Thu 26 Mar 2026 07:00:47 +0000
Manifest next update: Fri 27 Mar 2026 07:00:47 +0000
Files and hashes: 1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: bWv+mquUEbCQOhxBNxRNuyZwcgvanS+xLE7iFhFj5eU=)
2: EOa20siYhVvooEhEC-epku9D3Yo.roa (hash: CaHqewaEFsaPKRUAGEnwAKh1/0YdOwyqr30Vur/C7RQ=)
3: F-khUpYShoOhEncM3MZ3Y_Wm7h4.roa (hash: zuk3r9ZBjNWRUgr9lOJrcdso6ykt5/DxOmxhn65NsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:17:69:7c:04:d5:d6:7a:bf:78:4d:31:99:72:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155
Validity
Not Before: Mar 26 07:00:47 2026 GMT
Not After : Mar 27 07:00:47 2026 GMT
Subject: CN=226e1f4a9b97991bca3b8f9cb986d74b3092ce04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:39:b6:43:ac:c5:9a:a9:e3:39:66:2c:c2:fa:
ef:d1:eb:30:a5:9e:fd:8e:da:9a:db:72:04:a6:73:
39:96:84:44:eb:26:1d:d8:dd:a7:c1:d5:27:3c:1a:
9d:96:4a:8e:97:7b:13:10:f8:c6:64:b2:a0:98:2a:
a5:f8:43:47:1f:17:3f:71:62:55:00:d6:db:43:3b:
7c:f4:0d:c5:11:71:5a:87:b1:74:7e:be:6d:65:16:
7e:82:36:ab:52:d8:12:d8:53:61:ab:71:30:fd:d9:
9c:04:b6:e7:bd:a3:b8:1d:df:f9:47:4e:df:8e:aa:
33:b2:61:f3:7b:f0:fd:d8:4e:9a:48:7d:ec:6d:8f:
9e:10:e4:d5:46:c2:74:81:f8:b6:60:fd:ea:90:ef:
fe:46:15:97:bd:40:d8:0c:72:ad:a3:6a:78:41:8e:
41:f4:d9:0c:ee:23:1c:ed:6e:17:cd:33:68:71:7a:
cc:0f:80:fc:c1:28:3f:a7:24:ad:16:75:7a:d9:a2:
d6:ab:3a:9a:5b:b9:26:02:16:88:62:2c:59:69:3a:
66:c0:e4:fd:af:15:c3:2d:69:6b:79:44:75:f5:20:
c4:ab:9e:2c:13:1f:a8:67:49:b4:8d:6a:28:82:bf:
d6:36:94:f0:02:ce:41:a7:06:86:98:ff:56:b1:0c:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:6E:1F:4A:9B:97:99:1B:CA:3B:8F:9C:B9:86:D7:4B:30:92:CE:04
X509v3 Authority Key Identifier:
keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:12:7b:8f:9f:7c:32:07:87:8c:4b:95:56:80:4e:fa:a8:eb:
78:33:74:9e:8f:0b:e1:85:43:86:93:88:5c:0d:2f:42:69:00:
8d:eb:bf:95:fa:15:ed:b1:4e:c7:73:1f:41:e4:f0:6b:b0:a6:
b8:74:e7:73:65:f1:b4:27:a6:a1:fa:44:b3:5a:4b:b5:ac:03:
3d:7f:61:60:0d:cf:da:34:68:de:83:7a:a8:33:c6:69:67:05:
ad:0c:f8:91:53:cb:c8:ec:b1:33:ae:36:b7:9b:d6:6f:96:66:
fa:33:6d:89:56:4e:f9:16:82:64:01:23:d9:ff:37:6b:ed:9b:
1d:ce:79:b3:f9:64:ac:be:cf:3c:95:ea:94:dc:f0:f1:65:f1:
0b:3b:51:e4:08:17:a0:8f:45:83:90:55:fe:90:9a:63:fc:e8:
ab:07:ed:e6:ae:59:bc:75:ed:d6:14:6c:38:8f:79:6c:65:6a:
ed:52:de:03:02:d5:55:1d:5a:75:45:dc:05:43:37:80:92:8b:
9c:1d:72:48:e4:90:d6:1f:60:d1:7f:0f:b8:69:9e:ae:9f:d2:
d6:92:b6:de:ff:e3:53:a9:3d:71:4d:6f:41:36:27:d6:eb:20:
e3:c1:cf:33:7e:fb:b6:14:f6:41:84:54:6a:d0:df:68:d5:58:
19:a6:fa:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:38:35 2026 by rpki-client