Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: EfiEGagpfwIZp3hVyUxJDwCxZ15o2Gpz5/r07ZUQNX0=
Subject key identifier: B6:90:4C:A0:D7:9B:FA:66:29:8F:EE:B9:71:F1:D9:5A:E4:8A:B7:56
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 01A1DFBA205E945428757060D9EAD1492EFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 0736
Signing time: Sun 15 Nov 2026 15:01:19 +0000
Manifest this update: Sun 15 Nov 2026 15:01:19 +0000
Manifest next update: Mon 16 Nov 2026 15:01:19 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: 4pejFHASd3z+Ew2/unyd6CbsXDdWql5+baaVTWqixGE=)
2: nm8pFEpWXGPLmBGfEmff0mnlzsw.roa (hash: +n+qMQpld1QaCfNSSKf78RqXBTGK3eec/GzY9ilFD5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:ba:20:5e:94:54:28:75:70:60:d9:ea:d1:49:2e:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: Nov 15 15:01:19 2026 GMT
Not After : Nov 16 15:01:19 2026 GMT
Subject: CN=b6904ca0d79bfa66298feeb971f1d95ae48ab756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7a:ed:e0:08:ab:4e:5a:ce:bc:db:41:d6:9a:
9f:5c:8c:06:4e:e2:29:a5:0f:07:ac:7f:e1:9e:03:
01:08:ec:51:db:67:57:52:72:76:b5:61:0a:dc:99:
95:d9:18:1b:c3:f0:fe:50:cf:39:ae:b6:3c:b7:f8:
58:ec:76:b4:d8:bf:de:f0:d3:1c:41:5d:ea:51:16:
d0:77:46:21:9e:88:ef:d0:03:a3:4c:3e:74:a9:0d:
08:b2:cc:18:9d:bd:f3:63:4d:4a:93:a0:38:2f:12:
29:e1:c1:8c:64:b5:4e:60:86:f3:05:57:ba:d9:f6:
9d:67:8f:4f:5d:80:a8:8a:33:7b:8c:b7:30:b9:4c:
28:d0:79:5b:f9:fe:5c:5f:ac:86:37:41:48:e2:4d:
f7:e0:82:5d:84:aa:f0:10:22:ce:86:b5:53:d2:31:
74:05:48:78:6c:5e:2b:0f:e4:90:08:0b:30:51:c7:
d1:db:fb:f2:54:45:cd:92:f9:9c:47:33:6d:9e:b6:
fe:94:18:2b:00:49:75:89:18:6d:68:c2:f3:2f:a1:
54:22:75:08:1a:86:d9:96:39:ac:38:15:9c:c7:34:
cb:39:e1:1c:4e:c9:87:03:85:8b:4e:86:e4:9a:c7:
e4:6d:9e:91:c9:bf:9e:b8:75:d2:36:85:0d:b4:15:
0c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:90:4C:A0:D7:9B:FA:66:29:8F:EE:B9:71:F1:D9:5A:E4:8A:B7:56
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:03:35:75:f4:16:83:41:9b:0a:69:98:18:33:65:11:48:12:
a1:1b:56:63:3b:05:df:dd:ca:3c:49:2a:78:51:fb:c5:00:c4:
5f:3b:ca:5d:f8:c0:8b:a1:7f:05:d9:22:3c:68:a1:e8:cb:61:
6a:22:78:70:5c:21:f9:d1:f4:08:78:52:76:6f:3e:6f:1b:47:
68:75:42:42:cf:03:86:5f:f5:3c:19:71:3d:8b:52:c5:e1:f1:
62:97:76:f9:00:18:82:a1:60:1e:0a:7b:09:fc:44:5b:21:b0:
e1:a0:66:90:c6:1e:9b:75:73:9f:08:ac:33:ae:c3:1d:49:55:
6e:46:4b:bb:d2:70:af:65:e1:2d:1e:13:93:4a:31:37:fd:48:
7d:cb:96:a8:70:4e:9c:bc:12:4f:e1:4a:3a:2a:b0:90:88:e3:
30:a0:1a:ae:32:40:ad:d9:33:5b:ec:63:6c:b0:c6:2a:aa:4d:
32:15:a3:80:84:0c:e1:84:ac:26:38:a1:82:18:d7:d1:96:d8:
eb:25:a9:a0:3f:c8:11:d7:da:d0:61:25:9e:4f:56:a3:40:10:
00:e4:8e:0f:1f:df:dc:82:51:72:11:c3:14:9c:88:fa:de:c9:
0d:de:f1:f2:4f:2f:92:61:12:18:10:81:40:ee:f4:2a:29:ac:
e4:03:14:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:45:01 2026 by rpki-client