Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier: WiCSHqie1jGyQk1TRkG0Y0xXYZIBrUrjDLYvwzX80BU=
Subject key identifier: 4B:C6:E0:40:6E:7A:94:AE:5E:77:46:E3:D6:A9:37:53:5A:5A:D0:78
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 019D2BBCB3DB6D66F400EB505912097F69F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number: 17C7
Signing time: Thu 26 Mar 2026 20:01:20 +0000
Manifest this update: Thu 26 Mar 2026 20:01:20 +0000
Manifest next update: Fri 27 Mar 2026 20:01:20 +0000
Files and hashes: 1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: UhtZP43l1LMBxbZbQzf/DSw+P+Q6ho4bq7RJUwqSb2k=)
2: pZ2DG9liFeCKNbzetKHvN52UJO0.roa (hash: ngpoJdoTiDK1ogZAlMttmztrBQw9vwYksg/OwsA6X2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:bc:b3:db:6d:66:f4:00:eb:50:59:12:09:7f:69:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Mar 26 20:01:20 2026 GMT
Not After : Mar 27 20:01:20 2026 GMT
Subject: CN=4bc6e0406e7a94ae5e7746e3d6a937535a5ad078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:88:6d:90:e3:77:05:d1:13:62:f8:69:9e:
94:d8:45:62:14:dc:e1:da:6c:6d:2f:bc:12:b0:38:
11:b4:ab:3d:28:ce:97:82:0b:e4:5f:a8:0d:20:f9:
cf:4b:10:58:6d:ee:ba:26:81:ed:54:d9:8f:48:1e:
c2:d9:00:c9:77:19:33:48:35:c5:0b:87:c8:20:aa:
12:41:31:32:ae:6b:f6:9e:cb:fc:eb:9d:7b:b2:45:
0c:66:a1:12:b4:87:6a:6f:44:74:fe:21:67:91:a4:
2b:27:55:00:50:bb:7e:cd:26:5e:57:d5:97:14:cf:
57:c0:d2:3c:74:81:1d:19:26:10:94:45:a8:30:15:
c0:60:92:c5:29:1a:5e:13:c0:8e:14:36:12:62:1e:
63:5a:4a:8a:2e:7c:e0:f3:32:c9:90:38:91:8e:35:
34:35:ed:fb:b9:ed:3b:e5:a7:ea:e0:4c:4b:5a:18:
c7:75:c6:19:43:59:4f:ef:a3:fe:63:c5:7e:74:be:
e9:d6:10:9a:bc:b2:47:53:07:9a:05:d6:ef:a2:a2:
a7:69:d3:5f:79:e8:64:62:72:14:db:46:39:85:a3:
cd:a6:e6:ad:96:b7:e7:08:bc:d4:68:6a:68:98:e6:
60:7f:88:20:39:0a:7e:c4:f2:4e:3b:c4:e1:6a:a2:
d5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C6:E0:40:6E:7A:94:AE:5E:77:46:E3:D6:A9:37:53:5A:5A:D0:78
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:30:e5:11:9e:0f:37:f4:6b:e4:fa:b9:7b:b6:97:78:b0:6b:
93:e1:2c:4f:6b:91:89:c1:00:de:29:cd:fb:34:a2:b1:12:9e:
f8:5a:e2:f5:f2:5a:93:a8:bd:07:04:cb:f2:59:3a:6f:4d:77:
d7:47:af:3b:d3:33:74:f8:47:ea:b9:fd:2b:df:d7:9b:6f:26:
e2:29:b2:d5:15:e8:d5:91:03:48:de:dc:ba:0e:51:71:b9:73:
64:0a:48:bf:2c:30:2a:c4:e0:3c:7a:0f:bc:84:db:f1:a5:62:
30:3c:35:3c:2d:80:6e:24:80:87:6d:f0:bd:4c:30:30:b8:53:
1e:49:8a:34:e4:fd:3e:c5:2f:ef:38:f1:12:ac:c6:73:7b:12:
6a:5f:28:74:f8:bb:1a:f6:02:85:51:83:fc:93:74:0f:a6:81:
cf:76:fa:f7:4a:5e:97:af:cd:bb:7c:b1:b0:9d:67:21:8c:e9:
c1:b0:ae:de:7d:fb:c0:2e:1c:4d:98:81:fe:4e:1c:69:38:95:
66:64:1d:53:2e:e5:d1:56:2b:67:39:a0:66:3b:41:3c:bb:43:
d9:71:b6:76:18:0c:8d:33:04:3c:f0:23:d3:93:32:28:f1:8f:
8c:42:1e:82:83:2d:4a:4a:93:48:cc:58:b2:b2:93:f1:fc:e4:
55:f9:cf:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:35 2026 by rpki-client