Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: oiee2rRMOlIW1XY+dmBvfwOfE7r25WZT3viebnx4oG4=
Subject key identifier: 0D:29:07:93:F2:15:6D:F8:97:78:4B:7F:EB:25:DA:9F:7F:74:97:42
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 019D2A04D366AE2799001C034E0E11CEB99A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 1759
Signing time: Thu 26 Mar 2026 12:00:52 +0000
Manifest this update: Thu 26 Mar 2026 12:00:52 +0000
Manifest next update: Fri 27 Mar 2026 12:00:52 +0000
Files and hashes: 1: 1_xba5d5cbirhQ2s_z8_1tiC0PA.roa (hash: Bfsy6ICU1Mj8KS3Ard+cJzbdeC4klrQoTK7qG8jjB4g=)
2: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: jS83Q/Dvs9L6VY1vVWwubCyLc6oJoNYeJUcrpNWZbrw=)
3: mGPgYFI0a87W2xPkMo1Inw-FNM8.roa (hash: dR0boNIbJAGAYCT8YMYIsJDWFR4gMtz1D9GMelmMhUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:d3:66:ae:27:99:00:1c:03:4e:0e:11:ce:b9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Mar 26 12:00:52 2026 GMT
Not After : Mar 27 12:00:52 2026 GMT
Subject: CN=0d290793f2156df897784b7feb25da9f7f749742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:18:6e:de:40:c4:b9:19:a3:66:94:79:2b:9c:
7e:7c:ba:1b:2d:e8:3c:74:86:06:00:26:94:62:7f:
31:ab:48:4b:09:c9:11:f0:8b:5f:4b:9e:2a:4d:0a:
bc:86:e4:d8:b7:6e:e8:5f:23:12:93:25:c8:bc:4e:
31:0e:7d:50:66:1e:91:fd:f5:dd:13:da:e8:bb:20:
37:6d:5c:40:ad:3e:77:f7:2d:51:5c:ea:b2:1e:ab:
b1:3a:bb:ea:7a:12:95:15:17:63:47:a5:59:71:35:
91:94:57:dc:f2:e6:12:00:4d:89:b6:49:a5:6b:9d:
80:6a:ca:26:78:62:37:34:d2:80:7b:09:e2:c0:e0:
7a:34:69:5a:68:de:9d:fc:a2:3e:91:6b:a4:39:62:
eb:1d:9b:b3:ca:41:69:44:a3:ab:56:8b:8b:19:27:
8f:c5:39:dc:96:a9:0d:ca:f5:d6:bf:8b:e6:c4:2c:
d9:ed:77:83:17:d3:34:08:ac:66:c6:ac:04:7f:28:
50:04:cc:1f:b5:ce:57:4f:f7:dd:fd:63:cf:22:7a:
58:0a:ce:5c:d4:49:d8:99:3d:4b:10:48:de:7e:08:
2c:21:3a:77:21:7d:09:dd:f7:15:b3:e5:0f:30:ca:
b6:31:f3:e1:94:34:f9:9e:c9:fc:3b:c4:fa:0b:2a:
04:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:29:07:93:F2:15:6D:F8:97:78:4B:7F:EB:25:DA:9F:7F:74:97:42
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7f:6b:6f:1a:a3:19:a1:85:c3:05:9a:4c:ec:9d:e4:c1:59:
71:aa:9f:fa:dd:82:01:ef:9b:60:5a:77:3f:78:6a:73:07:71:
c9:7c:d3:b2:80:cf:e2:72:78:e2:fa:c6:06:87:3d:43:42:ac:
d7:2e:eb:8f:56:ed:b3:4a:5f:80:d6:1f:ee:88:00:6c:3c:50:
14:9a:10:19:ed:32:fe:f6:41:c5:f1:c4:8b:47:13:51:c8:b6:
f2:a1:f8:62:6a:4e:32:9f:1d:1f:5f:4e:0b:d3:d3:b2:59:e1:
ff:50:7c:29:b8:a7:9e:b6:e6:0b:bb:fd:e1:b8:41:13:b0:89:
c6:8a:73:b9:03:7b:72:19:1b:cd:da:e0:61:27:a3:74:d7:3c:
c5:02:67:54:43:ac:6e:77:a6:91:48:da:37:b9:19:71:b7:96:
e1:b3:92:3a:83:97:74:46:99:cc:bc:3c:6f:73:0d:2b:f6:0d:
8c:9f:4f:0e:4b:68:1a:4b:44:d6:b8:76:f1:dc:08:35:47:d0:
6d:67:7b:21:9f:0a:36:09:9b:72:d6:86:8f:c0:33:ca:50:a2:
4f:ba:98:e2:44:df:47:29:f7:13:10:a0:51:a1:e8:af:d1:50:
66:fc:74:63:fa:69:5f:53:13:df:2b:a3:57:14:8a:9c:24:a9:
6a:63:cf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:13:50 2026 by rpki-client