Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
File: 4z5VR668F6SCuM0e6BfdjO_2o68.mft (raw, json)
Hash identifier: L8NE1GA7hcVSqH5NQ1nU0oUXVO2Po0RlAkP6Q73HKDc=
Subject key identifier: A6:FD:2B:07:73:91:7D:5D:37:D3:C8:8D:11:AD:4E:FC:E4:2E:13:89
Authority key identifier: E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
Certificate issuer: /CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Certificate serial: 019D2703B63035C0CF3E4283C1362B8C624A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
Manifest number: 1067
Signing time: Wed 25 Mar 2026 22:00:47 +0000
Manifest this update: Wed 25 Mar 2026 22:00:47 +0000
Manifest next update: Thu 26 Mar 2026 22:00:47 +0000
Files and hashes: 1: 4z5VR668F6SCuM0e6BfdjO_2o68.crl (hash: ZadaW9E4QrCDsn08vjiXwC/3MrMMidTd7sFePghGTMw=)
2: qdXzckccTNRBLeVgvgBV-qMZrj0.roa (hash: 3pjw8O0uhsqIQNn1FT30jie8vZXZn3/jYkrEa74ywGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:b6:30:35:c0:cf:3e:42:83:c1:36:2b:8c:62:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Validity
Not Before: Mar 25 22:00:47 2026 GMT
Not After : Mar 26 22:00:47 2026 GMT
Subject: CN=a6fd2b0773917d5d37d3c88d11ad4efce42e1389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f0:d9:83:0c:45:2a:52:01:53:39:c4:04:94:
bb:cd:f1:cd:8c:a7:d7:63:9a:b3:e5:4f:21:1d:3a:
7e:b5:8a:bc:f5:64:b4:be:e0:12:f8:7e:ca:47:5d:
1e:20:6c:1d:d6:2f:36:a4:0b:7d:71:57:56:80:2a:
7c:35:a0:a0:91:3a:a7:ae:83:99:3d:9e:60:6e:48:
02:a5:37:74:2a:1e:5e:34:50:82:f2:18:9e:12:20:
c5:2c:5b:61:54:27:d7:8b:65:f1:ec:0c:f0:88:19:
33:68:66:2d:30:98:7a:62:53:c5:d3:2b:42:5e:69:
ab:d8:53:cc:94:ea:98:b7:e1:46:31:b6:ac:14:9c:
29:ba:9e:49:e7:35:b1:4a:f4:9f:5d:63:4d:10:4d:
17:95:47:6d:ab:11:df:23:90:31:44:8d:98:24:be:
4b:01:e6:c9:fb:33:2a:cc:93:3f:01:66:30:ce:99:
11:c2:2a:a5:d3:88:32:e6:e0:e3:4b:4f:65:1c:ab:
43:6a:a8:5f:5e:2c:cd:a0:50:6a:42:60:54:29:17:
43:04:17:d4:6b:ef:81:86:70:7c:cf:c8:ef:fa:0b:
9d:e9:0b:29:60:0f:31:3a:68:14:d8:68:d8:af:17:
4a:49:5f:2c:fb:ab:53:90:45:09:ec:aa:9c:b1:ad:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FD:2B:07:73:91:7D:5D:37:D3:C8:8D:11:AD:4E:FC:E4:2E:13:89
X509v3 Authority Key Identifier:
keyid:E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:61:74:2f:f6:91:04:31:5c:c9:5e:c1:78:66:3b:22:3c:44:
2e:a1:3b:9a:29:69:21:40:67:d1:db:80:92:2e:3f:48:ef:ad:
69:a7:2f:74:06:5a:ca:ac:18:ad:6b:d6:0f:be:d4:49:ce:ac:
98:c0:a5:e8:29:e9:19:9c:8d:25:bb:0a:5f:9e:17:6d:32:d2:
a7:8f:0d:6b:a4:c5:c7:1d:e9:22:ce:57:3b:5e:79:dd:34:08:
39:ba:9d:c8:6e:61:87:ad:7f:84:a9:1d:22:83:b9:8a:e8:12:
16:b5:df:4e:ec:7a:80:97:96:66:e7:1b:2b:b6:73:77:db:c9:
6a:eb:d5:8f:4e:a2:c9:73:e7:34:55:a2:9a:87:9d:75:95:67:
56:05:b5:f2:3b:11:4b:97:bf:1b:59:fd:97:60:9f:cb:b2:9d:
d9:af:30:a7:46:d9:66:75:c2:a6:a4:58:f8:b0:62:78:9c:f3:
6d:03:b6:95:53:7a:25:1f:ad:b8:2e:71:38:61:e0:77:1f:a0:
f2:b0:02:12:c1:e7:3c:79:39:5d:90:10:7d:1c:f9:98:43:c6:
b2:a8:c0:bb:9c:9c:a6:0e:a2:c9:a6:e0:f0:75:23:00:86:a7:
8d:e2:ba:12:e9:b9:26:76:90:97:b1:f7:fe:41:1a:e5:dd:54:
b4:c0:f8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:51:44 2026 by rpki-client