Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
File: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json)
Hash identifier: uOoWdzfOIEoFaaguh3UFaq30cuhe2i3IVYVtMUelWpM=
Subject key identifier: E2:6C:19:0B:5C:FC:EB:CF:3E:FC:6D:D9:6C:A9:99:04:3C:F1:35:AF
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 019D2583EFA5EC02E96B8C03D7C527EAC6BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
Manifest number: 0DA0
Signing time: Wed 25 Mar 2026 15:01:36 +0000
Manifest this update: Wed 25 Mar 2026 15:01:36 +0000
Manifest next update: Thu 26 Mar 2026 15:01:36 +0000
Files and hashes: 1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: gYbbLFiN1MOq1nNUrfCUUaw9t9fgAPmdcwTPqVZz76A=)
2: emclNVVbrOSgwEekW1bHsSKyOAU.roa (hash: umsW/YEVV8b6bDEdAr61c5AeNAQYb7n62AaiTl4HN1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ef:a5:ec:02:e9:6b:8c:03:d7:c5:27:ea:c6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Mar 25 15:01:36 2026 GMT
Not After : Mar 26 15:01:36 2026 GMT
Subject: CN=e26c190b5cfcebcf3efc6dd96ca999043cf135af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f9:59:2d:17:9b:de:bc:6a:6a:75:1a:ae:a8:
46:1b:a2:f3:68:3b:d3:44:27:3f:fb:fb:47:dd:ff:
52:9c:9b:3b:5b:df:78:53:26:44:8b:18:87:09:5d:
87:96:96:12:e6:f6:f5:ef:ae:44:8d:c5:5e:30:61:
3c:15:32:e7:92:8d:8e:68:76:31:0c:9e:99:85:78:
23:3b:b5:8d:a8:6e:f2:00:c5:5a:a0:e1:1a:d9:cd:
d7:8a:4e:32:df:e4:7b:c3:98:a1:25:e3:5f:6f:47:
f5:80:9c:78:c8:0c:91:9d:d3:55:a9:7b:7d:6d:d1:
70:2f:23:1c:c1:f6:19:8d:0c:4f:9a:85:0b:41:44:
9c:e6:b8:61:69:74:97:83:37:3b:79:f4:d6:c6:fe:
60:0a:89:81:88:1d:61:02:18:70:ac:b4:5b:47:d4:
37:e7:25:aa:28:b5:52:7b:b8:b4:ea:1e:1c:a6:ec:
63:56:f3:71:6d:6d:2f:40:70:9e:bd:b7:eb:b7:08:
ba:45:37:68:1b:15:31:80:7e:17:d3:38:80:74:4b:
25:16:3e:8b:4a:7f:c8:13:27:e9:20:f6:d4:d7:58:
21:58:ed:4a:cc:34:38:3d:39:9b:32:26:6a:ae:37:
d4:96:de:c0:a3:a1:1e:06:cd:db:a8:34:4f:7f:40:
dc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:6C:19:0B:5C:FC:EB:CF:3E:FC:6D:D9:6C:A9:99:04:3C:F1:35:AF
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:04:c8:fb:92:07:97:b4:d7:0b:a9:4f:3d:df:1c:f3:df:68:
90:26:86:ef:20:d4:49:f9:4c:87:aa:2e:70:ca:75:d7:4f:65:
34:4b:ff:ab:87:03:df:5d:88:93:41:65:9f:b6:bf:c5:66:8f:
48:fa:38:49:8d:bf:5b:13:e1:6d:f7:57:4d:74:bb:ea:6f:22:
89:a6:a9:b0:51:ba:b0:53:e0:c5:ba:4b:d7:8b:6e:a0:d9:94:
f3:cc:2e:4e:2f:bb:39:d9:1b:bc:ad:36:d7:32:f4:fa:e4:30:
3b:33:f0:e4:95:a2:d4:e9:c0:39:f6:9c:34:c4:df:e5:b5:fb:
f3:c7:38:f5:49:dd:cd:10:74:bb:b2:3f:60:32:ee:fc:b5:17:
36:fb:24:2a:55:b3:13:f1:eb:57:64:35:11:24:33:6c:0f:fa:
1e:2c:27:cd:23:46:b8:c2:eb:c7:2a:8e:e2:86:67:20:a0:20:
51:f7:9b:7f:9d:9b:e4:61:53:bf:35:8e:a8:58:f2:65:d2:fc:
04:b0:76:6d:34:aa:df:47:65:f1:ea:16:cc:89:48:2f:0d:e6:
4c:e0:80:c6:8b:56:e0:44:86:76:da:8d:56:f8:c4:76:c2:71:
17:22:b2:51:2b:11:56:95:c7:63:86:bd:f1:37:76:1d:59:ba:
b9:04:dd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:26 2026 by rpki-client