Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: BMTjrz85z0/fcUOgLtZuoA3wYqlqrLPJiMyI0lp9aNg=
Subject key identifier: 79:A3:59:CB:C1:05:59:94:33:71:DB:35:7E:22:41:2D:B2:3D:16:1F
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 019D38D38515CD702D4A1F03B73BB2852AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 1823
Signing time: Sun 29 Mar 2026 09:01:19 +0000
Manifest this update: Sun 29 Mar 2026 09:01:19 +0000
Manifest next update: Mon 30 Mar 2026 09:01:19 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: bKwg/ZRZa+pHEJlPrsts6H3btAK1KUrMrgWbStNGmKA=)
2: Z-KRt-a6fFf_5XtERzEP16Ujm4E.roa (hash: UsGPZBKjWrTYFqihznPKPakXtZqMZXtabA/JlRVq59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:85:15:cd:70:2d:4a:1f:03:b7:3b:b2:85:2a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Mar 29 09:01:19 2026 GMT
Not After : Mar 30 09:01:19 2026 GMT
Subject: CN=79a359cbc10559943371db357e22412db23d161f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b0:13:a8:af:21:1c:dd:2c:f0:42:00:30:af:
ed:25:f2:05:36:ff:a9:28:c0:77:f8:d3:e5:a3:6c:
64:67:77:bc:ff:0e:d8:af:f9:f8:ea:a8:08:14:78:
b0:e7:4b:51:9b:f8:4b:60:6d:66:4b:02:23:34:46:
57:2f:b6:9d:a7:fa:0d:25:32:c9:21:d0:97:26:40:
09:08:5d:b8:e0:f5:86:f4:d8:b2:4a:47:b8:25:e1:
ad:dd:6c:cb:cb:75:69:79:87:80:3e:71:09:98:98:
0b:b3:4b:2e:76:ed:9f:ec:e9:26:ed:0b:04:35:92:
dd:e6:34:9a:cc:bf:71:f2:81:dd:e0:9e:9e:83:f6:
77:09:51:29:0d:e9:ad:e9:9d:d8:26:ce:ee:1b:7e:
40:3f:07:fa:70:12:fb:8e:e2:e5:1a:02:e7:f2:30:
c6:3b:5f:56:43:98:0c:7a:16:61:88:18:41:c2:61:
2f:e9:15:ca:37:09:02:64:5f:14:2c:26:13:d9:eb:
a0:22:39:bc:63:fa:3e:29:de:99:4f:bc:94:fd:b8:
77:cb:29:54:26:56:23:75:04:f7:2c:32:f3:ef:7f:
ea:7f:58:7f:92:ce:92:99:60:d9:ed:e5:b6:3c:b1:
9f:ed:01:bf:d2:d3:55:25:d3:c7:e2:c6:64:29:33:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A3:59:CB:C1:05:59:94:33:71:DB:35:7E:22:41:2D:B2:3D:16:1F
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f6:9f:57:c8:d7:34:7f:e0:c4:b0:1d:8e:02:a7:73:4b:c4:
8c:44:9e:da:bf:53:34:b2:12:a1:af:33:c2:0d:9f:3e:03:e7:
c6:84:d4:46:1c:79:be:40:b0:23:8e:ec:34:de:7e:0f:eb:d5:
d6:a4:84:1b:1e:7c:3e:1f:74:f2:c9:f1:4f:0a:16:be:9a:9d:
7d:7b:da:61:33:61:24:fa:3b:71:c6:c1:6f:c3:5d:ed:c3:47:
75:c7:c7:72:68:89:d7:ca:e7:2d:17:82:66:5b:a9:89:e3:15:
f1:7a:66:24:3d:02:dd:34:77:d4:e3:2b:54:68:15:b4:c6:04:
e8:3c:96:26:e9:ff:5e:20:3a:38:eb:c9:ca:b8:11:5d:83:a1:
76:da:2d:0f:46:5c:53:5d:e7:04:56:06:0b:93:40:19:55:5a:
bd:75:4c:d2:b2:9a:05:27:3c:3f:ed:8e:95:ff:0c:15:a6:1d:
62:95:90:a3:08:09:fc:1f:89:62:95:66:e0:b4:26:15:d6:e4:
f4:c1:5b:13:dc:30:af:17:bb:db:71:b9:45:23:c0:37:87:01:
e6:77:a3:75:82:39:f5:92:14:7c:52:5c:45:66:b3:3d:12:be:
ee:0d:7a:c8:bd:91:ec:c9:f7:3f:17:46:ed:0d:e3:e6:02:87:
f8:bb:ec:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:39:00 2026 by rpki-client