Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: lu8fC00SCGtmeTMQFocCktUc8vcGypu9CG+VeMh1I04=
Subject key identifier: 9C:87:48:4A:63:83:5A:EA:E2:5A:FE:95:2D:B6:A5:78:F2:08:02:B2
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 019D382EADF7CEF91F5BAC334EBB5C384234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0CBB
Signing time: Sun 29 Mar 2026 06:01:16 +0000
Manifest this update: Sun 29 Mar 2026 06:01:16 +0000
Manifest next update: Mon 30 Mar 2026 06:01:16 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: 5xkGQT0GjAN7OWrEEy4CXb1Gyp9r4GArtlqZIRf4hGY=)
2: 6c0GmPSIo0E5XPLL6BcvGXFoeoU.roa (hash: XKGNTxIctVAHlMjqMo1n+V2kjvQsJG2Ze8aGQf0oQWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:ad:f7:ce:f9:1f:5b:ac:33:4e:bb:5c:38:42:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Mar 29 06:01:16 2026 GMT
Not After : Mar 30 06:01:16 2026 GMT
Subject: CN=9c87484a63835aeae25afe952db6a578f20802b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:48:bd:b8:08:89:d0:d9:85:02:00:9e:fd:1d:
43:c5:9a:dd:53:7b:19:d8:c8:b7:f4:00:5a:c5:e3:
dc:80:e8:c3:05:e9:3b:02:23:8a:c6:7f:45:db:6e:
1c:db:0d:fe:80:82:f7:65:f3:a0:41:39:52:a7:0d:
5a:14:47:66:a3:86:c9:46:d5:93:73:8d:61:6b:ad:
b6:3d:94:f2:1c:55:60:3e:16:2d:1b:62:aa:b4:70:
70:24:5d:bc:21:fd:7b:23:b7:9d:19:8a:77:b1:f4:
98:29:38:74:11:64:15:bb:21:6c:5e:e5:35:ed:f7:
53:42:f8:d2:33:f6:50:a9:3c:c1:c7:9e:de:18:a5:
49:aa:69:c5:57:6a:db:a4:60:d3:7d:66:7c:a1:c3:
63:c7:ae:78:10:8a:56:a4:51:1c:c2:63:ce:ec:7e:
c3:c4:44:3a:b2:22:ee:b3:13:c2:56:2a:56:59:f0:
e3:bf:0f:2a:20:dc:8b:4a:33:5b:46:60:b4:82:cd:
6f:f9:a1:a0:d7:7e:14:81:35:f2:3d:c7:ba:43:19:
ca:b9:e9:23:a3:b4:2d:2d:77:74:89:a1:80:44:03:
0d:67:ef:31:7d:34:a6:c0:51:0c:e1:b0:f1:5e:70:
aa:5b:38:21:70:0e:99:94:63:2f:50:e8:57:ec:92:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:87:48:4A:63:83:5A:EA:E2:5A:FE:95:2D:B6:A5:78:F2:08:02:B2
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:aa:18:e6:9e:14:13:ef:a7:5b:39:96:9c:b7:87:4b:c0:7c:
a2:d8:45:2e:26:8d:2a:6d:dd:5d:69:9a:a2:11:e6:57:06:bf:
48:b1:60:4f:4c:7c:e2:32:38:12:36:8d:d7:8b:0f:9b:80:62:
4d:5c:1e:cf:a1:cd:9a:75:21:a8:39:be:5e:c5:37:48:8a:1c:
dc:7a:e2:36:6d:bf:e5:4f:8e:05:1f:be:ef:db:3b:41:5d:9e:
6d:9a:2b:6b:4c:50:e8:43:5e:ad:a7:5d:37:92:9b:40:b0:21:
95:b9:ea:4b:50:14:30:56:ec:db:ea:36:19:50:d2:65:77:dd:
38:29:4e:36:69:02:04:9a:6d:0a:5a:46:7a:5b:c0:aa:46:17:
67:60:48:21:4b:2b:73:b9:d9:69:9c:d6:01:f1:86:81:05:cd:
00:70:c8:30:b5:4e:bc:c4:3c:ca:7d:5e:18:b0:5e:68:e9:29:
7d:e1:bf:d9:b6:60:1d:bf:6c:ab:5d:56:90:a6:e2:5f:60:5a:
05:af:52:a3:5a:ae:9b:d3:d7:98:a6:7c:f3:d4:e8:85:fe:44:
b3:5e:52:3f:aa:76:f0:19:66:ae:83:e0:57:38:97:4d:57:55:
0f:8e:3d:e6:a3:2c:2c:e1:18:63:61:65:89:2d:79:bc:26:61:
72:b5:20:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:28 2026 by rpki-client