
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.mft
File: 4U-Z-ZSPLAeHhGluSv-1NhjHrD4.mft (raw, json)
Hash identifier: zdVX9hl8yem0OEwOoBeMROReux2wdlmjqIfaUBgJ0+g=
Subject key identifier: 21:6B:A5:30:5E:9B:9D:93:C5:E2:33:9F:23:1E:CE:F8:FE:5E:7D:E2
Authority key identifier: E1:4F:99:F9:94:8F:2C:07:87:84:69:6E:4A:FF:B5:36:18:C7:AC:3E
Certificate issuer: /CN=e14f99f9948f2c078784696e4affb53618c7ac3e
Certificate serial: 019E1F10D4EE3BAB48FC9981C6EE59F86BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.mft
Manifest number: 2A
Signing time: Wed 13 May 2026 02:00:57 +0000
Manifest this update: Wed 13 May 2026 02:00:57 +0000
Manifest next update: Thu 14 May 2026 02:00:57 +0000
Files and hashes: 1: 4U-Z-ZSPLAeHhGluSv-1NhjHrD4.crl (hash: aans97qz906wBPcuzntXLvwlB3jhecxwQsnbEQK6V/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:10:d4:ee:3b:ab:48:fc:99:81:c6:ee:59:f8:6b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14f99f9948f2c078784696e4affb53618c7ac3e
Validity
Not Before: May 13 02:00:57 2026 GMT
Not After : May 14 02:00:57 2026 GMT
Subject: CN=216ba5305e9b9d93c5e2339f231ecef8fe5e7de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:97:9e:19:f6:64:fe:86:91:78:ee:8c:25:ee:
8f:f5:3a:aa:52:6c:b9:26:a1:17:ad:39:41:b9:d3:
ff:1e:3f:a1:ed:25:d0:47:82:f9:79:1c:3d:92:36:
94:5e:13:1f:dd:87:27:8a:47:d8:1f:66:6e:79:08:
34:5a:69:df:86:a6:52:fd:b0:ce:9f:f6:41:b4:d1:
36:89:be:ab:58:b0:df:51:da:e7:11:f4:78:21:4b:
8a:ef:fa:c5:68:85:6d:d3:b3:f0:18:cb:40:49:ff:
57:71:47:20:f6:d0:2a:38:f0:28:be:4d:9c:8e:ce:
81:d0:6a:fd:de:d8:3f:bb:a8:e8:29:29:15:2d:9e:
67:a3:d4:54:02:7a:9a:cb:26:ac:f8:b8:a3:27:23:
fb:2b:7a:a5:25:fc:94:9c:10:0c:5c:b0:bb:1a:69:
db:a2:09:c9:7c:44:b4:49:86:81:2b:04:82:fe:66:
ac:24:db:54:ce:d5:8d:ac:16:a9:f1:94:26:dd:46:
d3:df:68:35:8d:77:d9:59:4b:b4:62:93:11:21:c4:
f8:97:ed:83:21:93:1b:83:94:90:11:8b:dc:d4:bd:
5a:0a:dc:1b:21:07:5b:b0:ca:8a:4a:b1:99:54:37:
cb:a7:61:bd:d2:ca:6c:8b:7d:8b:52:68:86:b3:47:
1a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6B:A5:30:5E:9B:9D:93:C5:E2:33:9F:23:1E:CE:F8:FE:5E:7D:E2
X509v3 Authority Key Identifier:
keyid:E1:4F:99:F9:94:8F:2C:07:87:84:69:6E:4A:FF:B5:36:18:C7:AC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:bd:62:44:23:fe:8d:27:2e:01:3a:17:4f:2a:f3:cb:6a:22:
d9:f5:58:c5:0d:32:d0:66:da:a1:c1:07:18:be:21:a2:1a:0f:
dc:ef:43:13:59:1a:50:c7:3d:d5:a6:4f:4f:ca:5e:af:5c:01:
17:c0:7c:28:48:e9:44:cf:bc:8c:62:e1:93:8a:d5:ba:5e:42:
59:17:05:96:b5:d9:5c:93:40:94:d0:53:d2:6b:fd:e8:f4:48:
4a:21:22:e7:c1:e8:72:37:35:49:6b:fd:c1:02:4b:77:c3:5b:
20:e0:c0:81:ee:a3:2b:0a:f7:4b:f0:35:6d:6c:83:8b:0e:0a:
dd:37:00:f3:89:ab:1c:34:71:68:44:fa:ee:42:99:0d:1e:0e:
fb:b2:5d:09:86:80:da:47:ce:64:7f:15:76:ef:08:c4:4f:28:
50:21:91:09:a5:cf:aa:b4:d2:49:e0:fc:81:8b:fb:47:23:5e:
e4:4e:d2:16:98:4b:40:69:8e:8d:cf:e0:21:05:79:14:87:46:
9b:b0:bb:32:87:0c:e5:cc:2c:ae:6f:49:c1:18:24:c6:cf:0f:
62:f9:c1:36:74:73:28:67:cc:52:7f:fd:a1:15:36:97:5d:ab:
3b:c7:0a:d0:40:64:13:24:0b:aa:b6:09:dc:30:d5:cb:23:17:
59:48:16:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:09:28 2026 by rpki-client