Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
File: 4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json)
Hash identifier: gFGpVYgFNC9eLrsi4/lsJ06raOoamSowCh5WA9RK67c=
Subject key identifier: 0E:E2:9B:FB:F3:B4:30:08:29:31:FB:0A:C7:35:92:67:A9:CA:56:5B
Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155
Certificate serial: 019D38668B8834CFAE6E30D3EE06FA6E19BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
Manifest number: 02FC
Signing time: Sun 29 Mar 2026 07:02:17 +0000
Manifest this update: Sun 29 Mar 2026 07:02:17 +0000
Manifest next update: Mon 30 Mar 2026 07:02:17 +0000
Files and hashes: 1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: uFs+6iRKpjL6fpQVnBJ7S+p7lChNK4i2+McgCYl4pyM=)
2: EOa20siYhVvooEhEC-epku9D3Yo.roa (hash: CaHqewaEFsaPKRUAGEnwAKh1/0YdOwyqr30Vur/C7RQ=)
3: F-khUpYShoOhEncM3MZ3Y_Wm7h4.roa (hash: zuk3r9ZBjNWRUgr9lOJrcdso6ykt5/DxOmxhn65NsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:8b:88:34:cf:ae:6e:30:d3:ee:06:fa:6e:19:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155
Validity
Not Before: Mar 29 07:02:17 2026 GMT
Not After : Mar 30 07:02:17 2026 GMT
Subject: CN=0ee29bfbf3b430082931fb0ac7359267a9ca565b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:2c:0b:cf:9f:4a:e1:75:0f:12:a0:ec:72:
8b:e1:97:15:3c:97:5b:f6:1a:dc:de:5f:eb:b4:9d:
70:18:04:05:b0:e8:ea:1e:d2:dd:49:87:91:5f:55:
b1:cf:55:13:22:55:a5:46:42:ee:ab:33:fc:d7:e4:
8d:3c:19:0d:73:a7:6e:e2:22:ab:fd:53:37:35:78:
a9:16:d9:34:12:8e:f8:7c:f1:0e:47:05:1c:bc:17:
af:05:da:ed:ab:29:6a:b8:8f:5d:6e:85:cf:1c:e4:
2c:34:71:7c:48:ef:1e:88:03:f6:13:6d:b7:e6:5b:
d6:9f:f3:df:82:43:8d:ef:29:a8:53:61:87:6f:f4:
c3:f1:17:56:0b:a4:ac:8d:51:24:f3:54:ce:05:a9:
fa:ba:08:f2:e8:7e:62:76:ff:dc:a9:c4:98:a5:01:
3e:c4:84:95:7a:32:2b:13:d4:16:21:e6:a7:ab:a0:
6a:23:00:87:79:d9:48:be:45:2c:41:03:01:c9:b5:
8e:69:e4:db:84:8e:7f:82:f4:51:b6:4d:cd:3e:f3:
80:b4:cb:8d:6b:18:cc:c7:59:4d:cc:01:ec:53:38:
8d:6d:64:56:d9:d5:62:d2:8b:94:f6:fa:80:26:d7:
8b:1e:59:07:f3:d0:11:27:b4:90:ff:f8:cf:c9:d9:
d3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E2:9B:FB:F3:B4:30:08:29:31:FB:0A:C7:35:92:67:A9:CA:56:5B
X509v3 Authority Key Identifier:
keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9b:e2:98:46:de:d1:59:ff:72:d8:e9:7d:23:1e:fe:99:bd:
fa:e5:46:61:e4:62:99:42:36:a4:cd:73:cd:cb:1b:bf:c5:ae:
5a:40:63:e8:ff:19:55:50:e6:50:bf:cb:07:9b:4a:50:5d:f6:
ac:37:01:41:e5:32:ef:4b:44:99:3c:84:70:f5:ef:9c:d1:55:
92:0e:d2:92:8a:f4:a3:39:98:98:38:4a:6c:f6:ad:31:07:ff:
47:ef:96:16:d4:9a:f5:e3:38:d3:14:96:f6:8c:69:9e:4f:3a:
6a:d4:49:4c:5d:79:0b:ca:09:18:c2:ba:b1:81:42:a9:c7:39:
81:45:bb:ea:ac:97:fb:65:39:d4:d9:1b:eb:8f:2f:bc:9c:f1:
f1:e4:3b:c9:b3:f7:77:32:4f:4a:a9:d1:8b:f0:c2:ae:8b:ca:
2b:90:34:66:6e:12:5d:77:ef:3c:31:04:b9:67:6d:14:02:b9:
e1:bc:29:38:66:7f:d0:42:51:9e:08:19:d7:89:4a:78:40:f4:
28:84:21:c3:2b:b8:69:29:ae:2a:a4:f3:87:0b:c9:5a:2f:eb:
58:3e:3f:20:27:0b:e9:54:6b:ef:97:a8:d4:53:84:a6:fc:43:
25:e1:f1:5b:27:13:15:c9:99:56:0a:5c:a3:2e:35:a8:88:67:
5d:45:1b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:17 2026 by rpki-client