Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier: NrQrFl/CLkBMwH4KdQN+9wjAKCpIsfPOCCAWTa0VgN4=
Subject key identifier: C2:38:C0:16:EA:AC:A2:EA:C9:25:32:0E:E9:B2:66:A3:E7:71:00:59
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 019D38D373AF053399D3D0AABDB7C8E6923D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 09:01:14 +0000
Manifest this update: Sun 29 Mar 2026 09:01:14 +0000
Manifest next update: Mon 30 Mar 2026 09:01:14 +0000
Files and hashes: 1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: alRqD477QXcTBWbZ/L/26IvHbvRBiHWZemy3rENeI/c=)
2: Ut_nk45-PrVxes0DMrlE6POGcXc.roa (hash: oo94Gr3/o7iKPPOqsqmwUWcuIt1lQW+gn6zRbGd06vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:73:af:05:33:99:d3:d0:aa:bd:b7:c8:e6:92:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Mar 29 09:01:14 2026 GMT
Not After : Mar 30 09:01:14 2026 GMT
Subject: CN=c238c016eaaca2eac925320ee9b266a3e7710059
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:55:19:a0:ae:75:b1:3a:21:4a:f4:77:50:
93:99:8b:62:80:87:56:17:62:19:b4:8f:8d:20:e6:
78:87:e5:45:44:23:74:f9:88:3f:8e:49:b0:20:64:
74:c6:f0:6c:0e:ad:db:86:84:66:11:5f:0e:61:4c:
2c:cd:c4:fc:aa:ab:e2:39:1d:b0:00:6c:9c:1a:e3:
a3:93:83:7e:be:c4:15:b4:ef:f7:34:d4:7e:35:b3:
ad:45:2e:65:5d:a4:c4:01:60:cb:4e:f1:d1:20:cd:
18:61:be:a0:88:16:a0:51:f3:dd:cd:bb:26:8d:d7:
7b:38:d1:f2:a9:c4:a3:c2:c6:a6:70:17:d4:71:9d:
6e:ca:6b:50:b7:6a:72:46:af:a6:e1:41:61:7c:7f:
a1:dc:11:20:39:19:2c:70:19:04:37:e9:01:7c:81:
87:0c:e8:4a:30:e2:2c:04:0a:1b:00:92:60:f0:3a:
a6:37:50:e1:28:75:4e:7f:34:9a:95:53:a4:13:b4:
9c:c9:9e:39:b2:82:a2:45:e6:bb:1f:56:fd:44:8e:
88:2e:4c:c0:b5:6c:86:29:e0:56:9b:56:a6:30:c7:
6f:fa:ac:35:c4:d5:e7:f9:12:8e:df:82:66:58:99:
3c:a9:16:c9:96:f2:b5:aa:0d:ae:a0:cc:78:0e:5c:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:38:C0:16:EA:AC:A2:EA:C9:25:32:0E:E9:B2:66:A3:E7:71:00:59
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:27:b6:f2:31:4e:ca:db:09:33:7c:ea:2b:55:4a:cd:6f:9d:
f6:58:33:18:ee:b4:c4:f3:ee:b7:cf:27:54:ea:fa:c8:28:4c:
a7:86:a3:6b:b0:de:37:ca:15:81:77:34:d3:0e:10:9d:0d:d8:
14:27:c4:9e:8b:80:14:8d:dd:da:ca:60:43:b1:ea:0a:0f:66:
39:88:d8:21:3c:ce:55:69:fd:c1:5a:6b:37:e1:87:08:57:91:
e9:d2:4e:e7:ce:b9:60:07:80:ab:aa:59:3e:f5:ff:a9:03:1f:
5a:d5:ed:1b:72:b1:9a:ca:b4:40:60:1b:2f:b4:82:b5:71:a5:
73:cc:65:ff:02:1e:22:c7:d0:a1:e1:56:b6:c1:01:79:69:4b:
8e:71:f5:9e:19:5d:5c:5f:b5:41:12:51:0f:de:93:33:f2:c9:
59:db:e1:13:72:52:ae:5d:b8:32:d1:02:ca:f8:b4:ef:5d:8e:
e3:fc:ad:d5:f8:0a:17:0f:7b:91:6d:71:0c:20:3b:2a:4a:d9:
ec:82:12:f6:94:0a:bf:59:e8:a1:ca:d2:9f:bb:51:a9:fd:b5:
8f:07:3a:3c:21:fa:d7:1c:4b:73:dc:05:18:35:cd:8c:96:14:
ed:22:47:ac:11:04:af:16:3d:14:5e:01:a4:d6:fc:20:af:f7:
a9:cd:2d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:20 2026 by rpki-client