Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
File: 4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json)
Hash identifier: U0a/YGrEWyjUZQhL9LfJYKoje7MKwZvbLK7pPaCsWr8=
Subject key identifier: 2A:B4:8C:41:69:A7:60:0F:21:42:91:ED:29:B0:64:2B:C6:D8:C0:DC
Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155
Certificate serial: 019E1E35F6A476DB04FC37D7CE64C38EB0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
Manifest number: 0373
Signing time: Tue 12 May 2026 22:01:53 +0000
Manifest this update: Tue 12 May 2026 22:01:53 +0000
Manifest next update: Wed 13 May 2026 22:01:53 +0000
Files and hashes: 1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: q2GAZzwkElISp4UUTF2zpkT0g5w+cpuoczpL8apgSqM=)
2: EOa20siYhVvooEhEC-epku9D3Yo.roa (hash: CaHqewaEFsaPKRUAGEnwAKh1/0YdOwyqr30Vur/C7RQ=)
3: F-khUpYShoOhEncM3MZ3Y_Wm7h4.roa (hash: zuk3r9ZBjNWRUgr9lOJrcdso6ykt5/DxOmxhn65NsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:f6:a4:76:db:04:fc:37:d7:ce:64:c3:8e:b0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155
Validity
Not Before: May 12 22:01:53 2026 GMT
Not After : May 13 22:01:53 2026 GMT
Subject: CN=2ab48c4169a7600f214291ed29b0642bc6d8c0dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:a8:6d:03:91:11:24:86:df:03:d5:92:f3:
9e:f7:b0:ef:92:4b:51:ee:54:f9:51:48:db:00:43:
d8:3a:20:29:3c:84:4a:4d:1a:c4:a1:94:49:25:08:
f7:35:bf:cf:94:29:c9:9b:21:1c:75:f0:43:c9:84:
cf:9f:0b:23:57:4b:f9:57:fd:03:28:76:58:81:fd:
7c:2d:00:91:4a:73:a7:d2:d3:5a:93:75:4f:60:b1:
9c:cf:cf:71:26:6e:e6:88:4d:a6:36:82:b5:fc:14:
46:c5:11:df:6b:2d:f2:73:5d:1e:75:95:14:4c:1a:
c3:a4:b9:2d:ff:f4:4c:76:34:e1:d0:d2:fb:64:5d:
d9:cc:73:3c:79:40:f5:c6:a5:c5:5a:c0:cb:fa:12:
d9:59:f9:9a:d3:1e:c1:c0:aa:9f:59:3b:98:78:db:
ef:58:a7:cf:44:65:64:48:6d:2c:ac:4b:b4:d0:35:
2a:40:23:2d:52:86:49:f9:7c:11:ca:8b:5b:69:ca:
78:c2:46:0b:5b:2c:47:35:71:5b:8b:4a:f3:b8:82:
eb:35:01:a7:37:45:35:ee:7d:c1:a5:fe:98:b6:65:
5b:00:2f:5d:8f:25:d6:2c:43:37:29:72:f7:90:0e:
7e:f3:9b:7b:8c:07:27:a0:7d:e5:e5:bb:44:3c:5d:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B4:8C:41:69:A7:60:0F:21:42:91:ED:29:B0:64:2B:C6:D8:C0:DC
X509v3 Authority Key Identifier:
keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:03:74:d1:82:ee:aa:73:b0:1a:04:67:07:24:15:2d:9f:59:
d7:f1:a6:74:ef:0a:dc:df:30:33:31:fb:f5:94:be:a9:ab:50:
ed:77:2b:4c:02:64:cb:af:e0:a9:c1:27:cc:49:ff:41:bf:f4:
c9:1f:90:69:bc:c8:74:28:4a:e2:cf:4b:87:46:f5:fc:6d:21:
c8:d0:d4:98:d8:a9:5c:de:4b:cc:43:ff:13:ee:ae:5b:57:e8:
64:4f:3f:c5:d8:6b:07:f0:7e:5d:31:ca:ae:cd:98:f2:34:93:
27:3f:5e:3d:a8:80:01:48:70:fd:4a:a1:4c:e8:f1:7a:1e:ee:
59:09:c6:99:f5:90:19:9b:53:28:e8:b8:d3:5f:4f:98:fb:ee:
e3:3c:be:2a:1b:fc:0a:cc:82:98:7f:0a:62:52:04:b1:b9:89:
4d:3d:3d:49:ac:ef:df:66:6e:c2:6c:b6:07:7c:19:9e:ce:46:
91:0a:19:63:37:6e:8a:2a:b1:69:d8:da:d8:9d:d9:56:51:f3:
e9:81:5c:1f:72:23:dd:07:ff:62:6a:4f:11:ce:d2:ef:f7:57:
90:e3:37:d6:ad:4f:30:42:62:91:30:04:76:80:2a:97:c7:88:
dd:a2:ed:05:67:39:8c:93:e0:ae:8f:ae:be:57:a1:0f:f3:8c:
92:a3:7f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:54 2026 by rpki-client