Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: dr0RxeJicIJmLYfj/taNhjh/r8V4lYJ9Sa/klZcJOhU=
Subject key identifier: 19:B6:67:C8:4D:4D:32:FC:1E:3A:9F:45:4B:FE:49:4A:03:00:ED:B4
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 019D389C1D91DA59BE3AB7ACF5FF255AF9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 1899
Signing time: Sun 29 Mar 2026 08:00:48 +0000
Manifest this update: Sun 29 Mar 2026 08:00:48 +0000
Manifest next update: Mon 30 Mar 2026 08:00:48 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: Q0VAQxYtTOJ1k0JDMcaUYdpIf6seVJKNKHrH6rlK0KQ=)
2: CpV5ifZcjPyGOZZo5Kthc-0aYIE.roa (hash: lgb25S95umOL8YFj63EWLcLTY42lwBMqoGZsvrLzBnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:1d:91:da:59:be:3a:b7:ac:f5:ff:25:5a:f9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Mar 29 08:00:48 2026 GMT
Not After : Mar 30 08:00:48 2026 GMT
Subject: CN=19b667c84d4d32fc1e3a9f454bfe494a0300edb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:18:04:7b:3b:f6:0d:ef:43:b1:50:c0:08:
17:6e:7b:d1:9f:ae:26:1a:7d:f8:cf:ae:d0:73:10:
ab:f9:f5:e1:4f:54:ff:85:19:aa:61:8d:48:3b:33:
a0:1d:9e:8e:d6:17:df:c6:2a:1d:63:64:bb:15:9e:
9d:e4:29:77:97:45:3e:ca:fe:30:ad:b7:fb:8e:5f:
1c:fb:28:1b:b8:9e:9c:51:c2:a0:be:52:14:b2:2a:
33:81:63:03:ea:c3:f2:07:9e:e8:03:d1:0b:2b:54:
06:38:74:7a:a3:45:0c:e2:83:3a:f9:5d:c3:32:55:
bc:03:8a:67:5a:82:78:93:f8:6d:02:79:ec:63:2d:
e1:ef:10:3a:17:ad:77:f8:c6:77:91:b2:46:17:09:
80:eb:60:28:88:9a:e4:f0:d3:f7:6a:6d:06:88:c2:
d6:5d:2d:51:32:40:10:39:dc:84:18:e7:95:d5:cf:
eb:6f:16:6b:78:91:01:05:e8:1d:c3:8d:c7:ce:ca:
25:63:f3:1e:34:73:eb:63:5a:bb:bf:ea:e2:17:d1:
34:cc:a1:41:d3:2a:88:d4:ba:5c:25:08:ac:5f:f0:
03:cc:98:f0:1a:31:40:29:92:f9:67:15:a1:b1:8d:
d0:a6:cb:14:0c:1f:d8:fe:19:3d:49:9d:57:8b:66:
e2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B6:67:C8:4D:4D:32:FC:1E:3A:9F:45:4B:FE:49:4A:03:00:ED:B4
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c7:a0:91:e2:83:ed:e5:d6:95:57:e2:71:63:09:2b:57:44:
54:82:48:9e:ad:b6:94:ef:c2:fb:cb:ec:c2:64:8a:03:63:a8:
5b:cd:60:31:bc:27:a6:19:49:21:8b:81:65:1f:30:d6:8e:ad:
82:22:20:24:7a:4e:ec:83:81:68:ed:b8:8b:eb:44:15:f8:b4:
49:32:28:0f:d7:7d:f3:45:a3:d8:bb:a1:ac:56:c2:8d:4a:a1:
44:c8:13:47:be:77:1e:29:4b:0e:66:6c:5e:42:37:01:d1:4d:
ae:3e:37:cd:42:b7:87:37:f2:5c:59:fa:61:46:fe:27:70:6f:
78:6b:90:d1:aa:d0:e2:22:c9:07:be:e9:77:8c:3e:e0:02:88:
d4:6e:63:84:98:ef:ab:ad:56:69:5b:4b:db:85:e5:54:f3:f6:
4e:90:e3:b0:60:f1:fc:95:0c:9f:04:52:65:95:f5:a0:2d:cd:
ee:f3:47:79:c6:f3:ac:33:ed:ae:49:f7:27:03:d6:c1:e8:91:
7f:64:e6:18:5e:f9:28:53:b2:ea:78:43:1a:96:9c:11:d2:3d:
3e:26:ab:30:dc:38:81:c4:19:18:9a:ca:59:c8:df:a1:97:f9:
93:31:44:21:fd:a7:0b:68:16:a7:3d:51:9d:19:ba:fe:6e:bd:
c3:d4:bc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:33:31 2026 by rpki-client