Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
File: 4Zd4WdBx9xUIN7KstDU_8z79gxw.mft (raw, json)
Hash identifier: QnrndnAIRwlBOy9sJw8QWugieBYexRl4n9D7xzWh9js=
Subject key identifier: C7:85:EC:47:3D:F7:D9:56:09:8E:EB:51:4F:2F:A4:B5:2C:F6:04:A2
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Certificate issuer: /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial: 019D25F1E8FB1DF89D841EED623494786429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
Manifest number: 1657
Signing time: Wed 25 Mar 2026 17:01:43 +0000
Manifest this update: Wed 25 Mar 2026 17:01:43 +0000
Manifest next update: Thu 26 Mar 2026 17:01:43 +0000
Files and hashes: 1: 4Zd4WdBx9xUIN7KstDU_8z79gxw.crl (hash: ETySt+BMiXB9Ye7NxrWMDbbDw3jY9HqSoSxOBzL+kPI=)
2: ZYafFY5hgrZvAujIo4WJUy5Xkqs.asa (hash: gV/VgEXsJQud2DLaq6P58qMjbq6QyvStYKRKnU9km8E=)
3: vAtADiVzn1Bh76pWGdcxSENwoAM.roa (hash: QoQZh2KeNuOMLkkI0LNnA2kiP20KbUQKF1Cg2Ja7ZC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:e8:fb:1d:f8:9d:84:1e:ed:62:34:94:78:64:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
Validity
Not Before: Mar 25 17:01:43 2026 GMT
Not After : Mar 26 17:01:43 2026 GMT
Subject: CN=c785ec473df7d956098eeb514f2fa4b52cf604a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:32:90:df:c1:b0:65:86:3f:21:44:a9:6c:
02:21:9e:ca:fe:2e:5e:04:e4:98:81:32:2c:e9:37:
14:be:b3:42:b1:96:31:67:42:8b:69:8f:db:ef:dd:
e1:0c:7b:79:b9:25:9f:72:05:e9:ee:28:b5:15:1f:
4f:e7:cc:e2:ad:73:6a:94:73:f7:89:03:c6:d0:de:
54:bf:0d:f7:51:f4:0b:60:71:24:22:f4:08:af:2c:
b0:5f:14:2d:c1:5b:95:0f:45:b7:72:87:2d:e2:d7:
d8:d4:51:bd:09:3c:d2:1a:4c:be:53:09:98:68:97:
7e:fc:49:63:ac:12:60:fb:af:03:53:29:cb:bb:30:
c5:e5:09:c1:8b:a3:b1:c8:38:4d:b8:af:d3:28:b0:
72:2f:10:63:de:e8:91:38:b4:eb:c2:a4:13:08:af:
d7:dd:d9:1c:b7:fb:ff:aa:40:09:25:6f:be:62:7d:
c3:1c:64:03:5b:e9:6e:92:1d:61:95:2d:0d:f3:74:
c0:d8:83:22:22:41:03:76:d7:b0:56:5c:07:90:42:
64:9a:a8:b5:79:65:9b:d5:18:c7:86:6f:57:3a:88:
f7:9b:3e:35:b5:8c:d6:ff:c6:c4:31:0a:0c:a1:f3:
84:4a:72:21:89:21:51:27:e7:a3:f5:28:34:aa:08:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:85:EC:47:3D:F7:D9:56:09:8E:EB:51:4F:2F:A4:B5:2C:F6:04:A2
X509v3 Authority Key Identifier:
keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:f1:03:af:ce:9f:99:bb:0d:1f:ac:07:67:d9:f5:2c:f7:67:
f2:4b:5d:5e:c5:da:41:f1:f3:2c:2a:2a:31:06:de:98:29:c3:
77:5f:4c:a4:cc:11:46:23:eb:47:71:97:e0:07:84:54:07:fb:
b0:1e:02:1d:83:0c:5f:4b:c9:76:5d:ad:ca:1a:df:80:e8:7c:
98:fe:93:17:48:0b:d3:e9:a1:14:11:78:ea:88:54:36:f8:6c:
31:4e:84:79:3f:9a:63:b5:38:73:f4:2a:b3:ce:7d:ca:e0:aa:
80:50:e2:1e:12:6f:bc:a7:36:5b:6f:15:c9:db:e9:57:b0:28:
53:2a:be:b7:31:45:19:30:63:47:2c:be:c3:66:ca:6c:97:f5:
b7:6d:b8:06:a4:46:8c:40:1c:c1:57:0b:fd:36:37:f7:a9:80:
84:62:a3:18:76:9c:8f:fd:55:1b:fe:58:be:10:e5:3c:d8:de:
eb:e8:48:ee:1d:ca:a9:4d:03:31:dd:ec:25:dc:83:f4:2b:ad:
2e:fb:d5:36:4f:e8:f9:96:48:d6:a8:10:2a:90:7d:22:f9:a1:
7e:14:29:88:46:40:15:20:10:66:62:38:9e:d0:12:ae:91:b2:
ea:a3:fb:28:c7:65:93:fe:a7:bf:91:81:4a:fd:1e:69:a4:00:
ec:5c:c8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:25:45 2026 by rpki-client