Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier: rI/IDG7H4v9wT5+moyXfCc3wSzq/LYuTnewQyNDQhLY=
Subject key identifier: F9:BE:AB:CF:04:A6:15:19:AE:D8:D2:10:C3:22:27:C9:D5:3C:26:FD
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial: 019D382DDA312CFA559C3A6A6563EAFB951F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number: 15BF
Signing time: Sun 29 Mar 2026 06:00:22 +0000
Manifest this update: Sun 29 Mar 2026 06:00:22 +0000
Manifest next update: Mon 30 Mar 2026 06:00:22 +0000
Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: q+99p/0DSXA01V4GG1aXCGJdT8ZZ2QpExkx5J5WgSSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:da:31:2c:fa:55:9c:3a:6a:65:63:ea:fb:95:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
Validity
Not Before: Mar 29 06:00:22 2026 GMT
Not After : Mar 30 06:00:22 2026 GMT
Subject: CN=f9beabcf04a61519aed8d210c32227c9d53c26fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:1f:35:fc:f6:cf:b3:91:3f:00:63:0b:b1:
86:3c:53:69:8c:25:c5:fd:dd:6e:a5:f9:89:64:c2:
fc:11:f4:43:4a:da:ac:bf:96:ec:57:9b:ac:91:b6:
ab:e7:f3:b1:9f:06:12:ed:c2:8e:a0:1d:47:98:a3:
18:b9:ad:84:14:3d:cb:20:d5:16:e9:c8:aa:dc:a1:
1a:bf:b5:f4:8d:f2:0b:d0:b0:e9:ef:02:a2:c6:96:
b3:f4:bc:16:d3:42:e3:53:07:57:a4:9c:48:1d:30:
ec:37:9d:14:55:bc:75:1a:2b:e0:97:66:6f:a2:ce:
4a:8e:4c:b4:dc:5e:7d:3f:0e:ae:22:02:7d:88:80:
9f:5d:50:18:08:6e:5c:38:ba:54:65:8d:ff:a6:d1:
52:fb:f7:92:9c:19:88:9e:9f:7d:81:14:cb:d8:da:
a2:9f:2c:08:43:79:88:41:e7:ac:dc:75:da:7b:ea:
ec:95:d4:04:bd:9b:63:c1:24:83:09:41:f3:31:14:
b3:05:93:6e:c8:92:57:09:d0:59:97:3c:8d:74:55:
25:df:97:0c:ec:c6:2e:ed:3c:e9:15:14:9d:10:5f:
34:75:b6:6e:8b:5c:d2:b1:84:11:15:14:a3:20:f3:
4d:4d:9b:46:76:b0:c2:46:de:dd:c9:39:bd:e2:fc:
a5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BE:AB:CF:04:A6:15:19:AE:D8:D2:10:C3:22:27:C9:D5:3C:26:FD
X509v3 Authority Key Identifier:
keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:03:ed:07:a8:77:2d:47:e8:d6:61:69:cc:81:f5:1a:3d:f0:
01:ff:42:85:2d:d7:e4:b9:17:d2:70:f6:08:10:23:3e:ad:19:
54:35:77:04:7a:ff:90:ff:2b:65:d4:79:73:2d:55:7b:59:77:
4f:0d:bc:77:a9:a4:34:17:b2:0e:66:ab:4e:eb:4f:ef:6a:0f:
24:f9:a8:75:56:2b:ce:5e:9f:43:63:c1:f6:ef:1d:d4:19:3d:
bf:a2:e1:58:3b:34:d8:e6:e7:34:29:d9:ad:98:7c:e7:83:c2:
ac:8c:5d:51:ea:8d:ee:4e:c9:57:28:e8:5c:48:8c:33:dc:60:
47:57:22:5c:a2:b1:56:09:07:a7:e9:9f:5a:f3:f5:5f:e2:77:
a3:98:af:79:c8:eb:da:3c:97:40:e6:96:90:0f:9d:20:52:fc:
82:b1:a6:04:db:ed:f0:75:dd:82:31:64:67:fc:5c:85:50:e6:
84:84:c3:f2:3d:cc:27:f8:5d:fe:36:d7:ff:1c:82:89:75:4f:
fa:25:7f:4e:1d:6b:41:17:30:3f:ba:24:ee:0a:d5:c5:fe:6a:
fc:84:a4:85:53:9f:e5:e6:a4:03:dc:6a:ef:db:9b:f8:87:4c:
b0:2e:5c:7d:29:88:5e:41:72:5f:b5:7c:af:30:65:07:9d:02:
b3:19:e4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:38 2026 by rpki-client