Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
File: c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft (raw, json)
Hash identifier: HFzswhkI133OcjUh0YMZDpp5cblqUkhTtfhrPyNVyWE=
Subject key identifier: 88:BB:09:37:4D:73:B2:85:A4:57:F8:F6:06:3C:75:51:03:7B:58:53
Authority key identifier: 73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
Certificate issuer: /CN=738fd9467821d05286f4b33be86176651b6aff3e
Certificate serial: 019D382E247380E45770E2A13D42689F3BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
Manifest number: 1821
Signing time: Sun 29 Mar 2026 06:00:41 +0000
Manifest this update: Sun 29 Mar 2026 06:00:41 +0000
Manifest next update: Mon 30 Mar 2026 06:00:41 +0000
Files and hashes: 1: c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl (hash: oQDLCM2dQy9oZfWBelGX4LlAPfuuoyYuh/LFz+6SjnM=)
2: okA67YNjezSzOo_8gn-eIneCcxo.asa (hash: FQmpiQldGJRr0eGTeXQeQJQNu9pYJqL2NiCY/LJ/720=)
3: r-lSdkFJmIx7S9lbAiwH1l8mV0U.roa (hash: ZccLhzPfTQovlv2pD2Hypaasm3jNsKh86uT4/OsCE2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:24:73:80:e4:57:70:e2:a1:3d:42:68:9f:3b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=738fd9467821d05286f4b33be86176651b6aff3e
Validity
Not Before: Mar 29 06:00:41 2026 GMT
Not After : Mar 30 06:00:41 2026 GMT
Subject: CN=88bb09374d73b285a457f8f6063c7551037b5853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:67:6f:94:7b:11:f0:e5:81:d1:71:42:63:d5:
2a:4f:21:58:aa:b0:73:7c:9c:2c:97:7d:ee:5c:29:
63:c2:62:12:c7:a4:26:53:d4:13:64:89:bc:13:bb:
3d:62:79:a9:20:36:fd:92:36:85:64:69:30:38:25:
78:ac:90:87:97:b2:e1:88:6b:9b:18:31:2c:bb:5d:
c5:ed:ff:4a:0b:4d:d7:21:7c:5f:77:07:0e:b5:bf:
9b:a5:67:63:a9:2d:39:4a:9d:10:ab:d3:22:64:bb:
9d:1f:1d:ba:a8:8c:b5:39:5b:a3:a4:bf:f5:b5:81:
20:7d:e8:ae:9c:d9:a3:0e:10:cd:25:13:8d:81:a0:
95:68:67:e6:7c:c5:ff:e7:2b:05:52:6e:1f:1e:be:
ff:c4:44:0f:df:b3:81:20:08:d9:c0:ea:e6:32:02:
f8:40:a8:47:f4:9f:eb:29:22:1d:56:f7:0c:45:77:
10:71:bb:26:af:3f:eb:c8:18:27:2c:1b:26:5d:24:
fc:95:a0:c6:97:68:86:e6:d4:dd:62:3c:e8:06:92:
ee:59:04:15:88:17:8b:1e:1e:f2:1d:96:4b:38:2c:
01:89:77:eb:0f:19:0f:b7:74:56:dc:17:a8:c1:03:
af:06:9c:1e:7a:e9:2e:03:53:7f:07:7f:80:0a:8b:
d4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BB:09:37:4D:73:B2:85:A4:57:F8:F6:06:3C:75:51:03:7B:58:53
X509v3 Authority Key Identifier:
keyid:73:8F:D9:46:78:21:D0:52:86:F4:B3:3B:E8:61:76:65:1B:6A:FF:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4_ZRngh0FKG9LM76GF2ZRtq_z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/b7cd91-7e4a-46cf-9498-09fac0697649/1/c4_ZRngh0FKG9LM76GF2ZRtq_z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d6:17:76:8d:64:8f:10:9a:c6:d0:ef:1a:9f:08:52:28:a5:
9a:88:ad:ae:dc:b5:39:25:7d:4a:b9:94:9d:cb:a8:9e:dd:b3:
eb:99:0e:27:e0:6d:ac:68:a2:67:ab:07:fd:03:11:63:18:74:
5e:f7:1c:20:84:bb:0a:9b:59:a4:13:9d:47:a5:06:e7:cc:ba:
e6:08:13:65:d9:3c:58:45:8a:97:33:4e:b1:81:30:4c:ae:e2:
3e:d4:a6:41:5a:4a:d5:2d:88:51:c2:08:d1:45:73:6e:3d:8e:
62:d8:0f:c0:2e:9f:c8:60:6f:ec:44:8e:e9:ef:4f:01:56:f0:
7b:bd:d5:09:c1:e3:81:47:01:2d:58:f1:a5:26:32:4d:27:c7:
03:33:db:8a:d2:b4:6c:d1:9a:b6:72:af:a3:d9:90:06:e9:a3:
23:22:d1:f0:77:90:5b:23:92:8c:92:29:74:d3:a8:15:fc:93:
b9:b3:6e:f5:16:0a:82:70:35:34:f7:33:08:05:30:26:4e:32:
70:b4:fe:ff:e7:3d:09:27:e9:4d:8d:81:4d:1d:bd:2c:c7:85:
af:eb:cd:67:f9:7a:77:87:3a:2f:77:98:6e:ae:f0:90:72:0d:
f1:43:ab:31:fb:bb:a2:2a:15:7f:15:fb:f6:04:c2:57:56:ce:
07:71:37:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:01:07 2026 by rpki-client