Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
File: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft (raw, json)
Hash identifier: K1TZqfqfaOmIWqi1AVF9RpD3yiPC59mh5qMFuZbZpvc=
Subject key identifier: 2E:39:F5:64:F5:E4:06:42:0A:0C:24:54:15:B6:AE:3F:8D:61:70:DC
Authority key identifier: E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
Certificate issuer: /CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Certificate serial: 019D26CD2AEBA231289E0D1BE2C7C7B1AC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
Manifest number: 04C4
Signing time: Wed 25 Mar 2026 21:01:13 +0000
Manifest this update: Wed 25 Mar 2026 21:01:13 +0000
Manifest next update: Thu 26 Mar 2026 21:01:13 +0000
Files and hashes: 1: 4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl (hash: o9/iEB997DTBe9pzz6s6e63bTKS37JDLQMqU5H3engg=)
2: nm8pFEpWXGPLmBGfEmff0mnlzsw.roa (hash: +n+qMQpld1QaCfNSSKf78RqXBTGK3eec/GzY9ilFD5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:2a:eb:a2:31:28:9e:0d:1b:e2:c7:c7:b1:ac:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19a3bae48c95566314d60efa889f3d65f9bdd41
Validity
Not Before: Mar 25 21:01:13 2026 GMT
Not After : Mar 26 21:01:13 2026 GMT
Subject: CN=2e39f564f5e406420a0c245415b6ae3f8d6170dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6d:0c:60:0f:24:8a:ea:48:82:0a:27:0f:9a:
25:cf:90:30:67:b4:53:82:b1:46:8c:46:21:b4:8a:
5e:52:a9:8c:db:e5:04:93:92:38:7a:88:74:bc:64:
30:b9:b4:67:b5:2a:d5:0f:f6:01:51:17:4b:38:2e:
72:dd:48:66:20:b6:f2:92:5d:28:66:c6:83:05:b2:
5c:f6:0e:8b:46:e1:00:e8:5b:d2:4c:0d:dc:0c:e7:
1a:d0:20:74:98:1d:f1:6c:56:d6:ec:e0:71:66:d5:
d8:36:f0:2b:46:f6:58:b6:d9:ed:b6:fc:a3:8e:e3:
e1:78:ce:27:ff:bb:12:97:71:14:1f:ea:e7:61:06:
10:02:51:5f:80:ca:98:3b:9e:4d:5e:1f:81:52:a1:
4b:d9:22:57:18:ed:bc:35:fb:41:0c:86:01:8a:47:
b8:12:b7:48:2a:7a:7a:6f:e0:96:a5:f6:aa:29:8e:
2b:03:58:8c:67:cc:e5:15:4f:40:ab:6d:75:00:cc:
a4:d4:a9:71:ad:d3:68:af:8e:85:cd:0a:19:b2:33:
49:43:4c:73:c8:94:ed:e9:ff:ad:a0:a6:2c:92:f1:
5f:e4:53:79:db:13:86:9f:fa:90:82:50:31:be:80:
b1:8b:3d:cd:e7:74:70:46:d5:59:3e:55:26:ec:d5:
6b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:39:F5:64:F5:E4:06:42:0A:0C:24:54:15:B6:AE:3F:8D:61:70:DC
X509v3 Authority Key Identifier:
keyid:E1:9A:3B:AE:48:C9:55:66:31:4D:60:EF:A8:89:F3:D6:5F:9B:DD:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zo7rkjJVWYxTWDvqInz1l-b3UE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/630d0a-45b8-46c4-8c02-9184a91b8ae1/1/4Zo7rkjJVWYxTWDvqInz1l-b3UE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:5b:e5:ba:28:cf:0e:ed:25:eb:cd:bd:8f:b2:44:65:77:0e:
80:ed:b9:8f:32:41:49:5d:29:9d:f2:4a:3a:f6:9c:b7:63:4b:
c9:64:e9:fd:08:21:d2:a1:11:4a:cf:e3:4b:14:be:53:70:28:
56:2a:90:bf:18:de:ec:b4:e6:06:7f:17:9a:ed:67:fd:d2:71:
9e:fe:5c:3a:9e:03:d3:fd:85:9a:5f:5e:75:9d:a9:fc:2c:50:
2f:05:e8:e6:42:96:19:19:b5:19:7a:25:c7:53:cd:85:f3:e9:
8c:80:3e:ea:b1:00:35:ab:a8:25:69:d7:f7:42:59:b6:9b:91:
e9:c8:f2:32:3e:3b:db:7f:20:ea:03:fd:50:70:ab:2b:4f:d1:
65:51:ab:83:ba:73:ae:9f:9e:02:ef:43:61:d2:82:f7:df:75:
58:81:a8:11:56:12:9b:30:ed:c9:d6:1b:f1:bd:7e:f9:ad:16:
79:8d:a0:ed:25:fd:64:b7:0b:c8:e9:0e:cd:d5:7e:df:72:40:
af:99:db:c7:ae:2d:89:20:37:c2:bd:b3:6d:71:9b:34:e5:3c:
08:86:eb:de:c1:4a:b3:d5:50:73:d0:c6:32:b4:37:47:33:e4:
b6:b7:bf:e2:13:ce:29:a2:ca:dd:8b:87:b6:bd:07:8c:7f:62:
d2:59:27:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:27:20 2026 by rpki-client