Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
File: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json)
Hash identifier: AZkaUI1rBMpSttKr9ivbqDNxKO3psQWljKx57wN/W34=
Subject key identifier: B5:12:06:AE:4D:C9:CD:D0:9C:29:E7:E7:91:C7:4D:7C:B9:46:AB:B3
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Certificate issuer: /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial: 019D25F1AFC71079D23B8C7BA7EEB300F2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 17:01:29 +0000
Manifest this update: Wed 25 Mar 2026 17:01:29 +0000
Manifest next update: Thu 26 Mar 2026 17:01:29 +0000
Files and hashes: 1: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: j7xl9Wt3EO76qN5NAeFably6qPlZiS69VVIpBCB19e0=)
2: fe1imW15nJcWqPFUEtzxex8TfJY.roa (hash: 7SyOd5vhLLHK1X5KDoXQcbr6Cl3ba3LVf0tf6U/sBZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:af:c7:10:79:d2:3b:8c:7b:a7:ee:b3:00:f2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
Validity
Not Before: Mar 25 17:01:29 2026 GMT
Not After : Mar 26 17:01:29 2026 GMT
Subject: CN=b51206ae4dc9cdd09c29e7e791c74d7cb946abb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:7d:d1:ae:3b:7a:ee:60:1c:1f:7c:d3:10:73:
c0:f4:03:98:89:d0:9d:fb:ca:a8:f7:56:d3:ec:49:
8a:ba:22:45:fa:64:66:6e:82:a7:b4:59:2f:6d:6f:
a7:03:39:08:7d:85:79:7b:76:13:2c:f5:2c:cb:8a:
77:69:2b:17:97:7f:77:43:45:01:c2:7f:87:9f:b8:
a3:61:90:15:e8:42:3c:e6:7b:59:9a:a0:2e:65:69:
db:e5:07:ee:13:93:54:26:33:2c:6e:e6:3b:82:a9:
57:ee:96:41:38:55:eb:03:b0:a6:be:01:36:ac:0f:
a0:c2:bc:0c:88:03:74:23:f0:26:c8:19:f0:6b:7c:
b6:32:ac:46:99:23:7a:b0:43:0a:90:b8:66:33:95:
31:4e:af:85:ab:66:dd:1d:be:b5:0f:1f:5c:80:31:
37:43:26:bd:39:94:e4:2f:33:f7:1d:7e:eb:82:53:
05:d7:9d:a5:35:af:9d:ea:d6:cb:4c:ac:78:af:a0:
d1:84:a3:fc:f2:1c:09:51:44:65:a2:52:9b:80:85:
d8:65:43:2f:0c:51:9d:16:4e:52:89:9f:ef:7b:e5:
7c:21:e6:fd:66:36:37:cd:62:6e:b1:65:20:ec:7e:
38:f8:9e:28:e9:ac:25:69:10:81:fa:da:04:23:57:
26:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:12:06:AE:4D:C9:CD:D0:9C:29:E7:E7:91:C7:4D:7C:B9:46:AB:B3
X509v3 Authority Key Identifier:
keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:97:4c:be:33:58:7f:6e:33:9e:28:5f:d5:f7:a7:a3:f8:88:
69:2e:82:5c:be:6c:bf:35:83:0d:f6:50:8d:b6:91:cc:fb:5a:
1e:c7:35:af:75:9c:20:4c:5c:88:96:da:5b:df:10:65:68:47:
ee:1b:12:98:16:20:23:b6:e8:c3:29:12:e6:5b:c5:de:1b:a8:
83:47:6c:6c:9b:e8:dd:66:a3:76:3d:45:67:db:15:16:b8:9c:
57:00:16:a3:25:ee:dc:e9:31:21:d3:98:eb:8d:74:98:2c:ba:
cb:cc:cc:d2:79:38:15:44:e6:1d:c9:52:c7:47:d8:80:a3:e8:
9e:00:52:0a:ac:29:4e:d3:7c:26:4c:e3:80:cd:a7:15:3d:a6:
4f:1a:cb:ff:49:df:c2:e7:aa:bb:71:2a:94:19:80:5a:c9:7b:
d6:6f:b3:e8:db:4c:eb:9a:12:af:a3:d2:5d:68:e4:1e:0e:73:
35:c0:67:18:9b:c6:d6:ac:2f:d7:4a:8b:00:39:5a:7d:d0:bf:
c3:67:c7:7c:cf:00:e3:0f:f8:b7:54:d6:1f:18:d4:55:1a:1b:
a6:bc:62:cd:4b:80:19:61:79:5f:d9:1a:40:de:1f:48:f0:14:
e7:72:55:2d:a2:33:55:87:7a:1c:7b:0b:16:1d:b0:1a:04:89:
f5:2b:c6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:26:35 2026 by rpki-client