Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
File: Zp4hLXARG0TeZvV1An4ADNRB_c4.mft (raw, json)
Hash identifier: NtO+KLjykr2y/wj3w7An1uoftLCMiD3/IKofLVNvdZs=
Subject key identifier: 42:40:1A:47:2A:B2:9A:FD:32:26:3A:93:B7:63:FE:E6:9C:79:DC:1D
Authority key identifier: 66:9E:21:2D:70:11:1B:44:DE:66:F5:75:02:7E:00:0C:D4:41:FD:CE
Certificate issuer: /CN=669e212d70111b44de66f575027e000cd441fdce
Certificate serial: 019D38D3BD432BAE189BB6BFB6CCBEC6BD1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
Manifest number: 01F3
Signing time: Sun 29 Mar 2026 09:01:33 +0000
Manifest this update: Sun 29 Mar 2026 09:01:33 +0000
Manifest next update: Mon 30 Mar 2026 09:01:33 +0000
Files and hashes: 1: YUIe43riMIY5RXnu_EJdi74BiD0.roa (hash: 0nBv6yPBFubyXH/hyUWyIZCqz8H+FHQFrEWthFcJ/fU=)
2: Zp4hLXARG0TeZvV1An4ADNRB_c4.crl (hash: RcfmQJMudZJTT3ZlDzYhPbYhOl6i3HZ+zbfJFjeqpdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:bd:43:2b:ae:18:9b:b6:bf:b6:cc:be:c6:bd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669e212d70111b44de66f575027e000cd441fdce
Validity
Not Before: Mar 29 09:01:33 2026 GMT
Not After : Mar 30 09:01:33 2026 GMT
Subject: CN=42401a472ab29afd32263a93b763fee69c79dc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0c:cd:10:21:6f:39:09:2c:58:9d:80:c0:ed:
5b:cd:b7:f4:7b:a8:37:6a:74:31:dd:bc:0d:e2:7a:
d6:d8:4a:d1:3c:71:7e:df:87:b2:ab:bc:8d:d2:fb:
8e:78:9a:e7:dc:01:a4:77:39:9f:58:44:c8:7f:7b:
8a:68:ed:3c:50:18:00:93:d9:2a:60:b5:f4:3d:8e:
b8:21:b2:ee:77:ab:d6:5a:42:ac:a2:81:45:90:f1:
03:b4:33:dd:75:20:4c:a2:cd:ee:c2:75:44:e2:14:
2f:1c:76:4c:68:9a:ba:1f:68:15:fc:f7:a0:ca:89:
c2:a1:f9:0e:ee:1d:d0:f3:1e:f9:c1:4a:9a:21:bd:
19:1b:a7:30:33:40:d5:e9:b0:6a:22:6c:d4:4c:0b:
c9:f0:c2:cd:7f:21:c5:ad:c8:46:81:b7:74:a6:9f:
da:33:75:be:ee:b4:bb:cc:87:bf:3b:01:73:4a:39:
10:70:b9:86:af:ba:7c:8a:30:04:05:79:58:ee:9b:
32:a1:44:cc:31:bb:5e:d3:8f:1f:9f:91:b1:e4:b4:
2e:37:92:d9:63:79:64:c2:8b:03:38:ce:e7:28:c2:
b6:ee:61:ef:7c:9c:93:14:e8:e1:8e:83:9a:04:ef:
29:30:de:31:1b:fd:6b:3f:5f:d6:25:1f:5e:1d:60:
be:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:40:1A:47:2A:B2:9A:FD:32:26:3A:93:B7:63:FE:E6:9C:79:DC:1D
X509v3 Authority Key Identifier:
keyid:66:9E:21:2D:70:11:1B:44:DE:66:F5:75:02:7E:00:0C:D4:41:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e0:70:b2:62:61:fe:5c:93:c2:f7:f5:1d:ac:e9:16:39:a4:
85:dd:6d:64:77:f3:40:ec:bb:f3:5a:26:a8:a3:f9:2b:7d:ff:
39:1f:43:1e:0c:ce:0d:69:4a:53:d0:f3:8d:33:64:3d:bf:1a:
52:a7:14:d4:31:03:8d:9e:cd:d5:3c:5b:41:14:31:7f:11:fd:
41:a7:8c:e2:4f:9c:d8:74:d1:56:b2:70:0c:bc:ae:dc:c8:da:
5f:a1:1f:0c:c8:60:65:d1:14:2e:5f:0f:bc:e9:ec:ca:52:de:
c9:90:41:73:aa:b4:7d:90:cc:8c:ab:1d:6e:99:b1:01:ec:40:
3d:fb:a8:f3:38:6f:a3:9e:f2:6a:0d:95:b9:f2:55:3f:47:de:
dd:2d:1c:a0:e6:4d:29:02:f5:d2:ba:0b:b3:69:d9:6f:b7:a8:
b9:02:fb:f4:c2:38:d6:cd:b9:b7:be:44:73:44:ae:de:87:12:
0f:81:e2:30:fb:c3:9e:dc:43:f8:0d:1c:ea:5a:2c:b3:bf:39:
1b:0d:00:58:65:3b:b7:60:7d:cc:fd:ae:a5:7e:b1:07:d5:71:
a2:82:98:a9:77:7a:a6:9e:57:76:82:09:f7:2b:30:8d:2f:48:
de:19:c1:bd:af:12:65:d1:64:e6:23:78:b2:7f:c6:d4:28:7f:
a6:f0:3f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:10 2026 by rpki-client