Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
File: 4MZJtmoZ2i_sI2sEndEioO82iw8.mft (raw, json)
Hash identifier: iEbTx8wT049cl90n6UkBCpRDV+DSz6noI7V1kISA8sk=
Subject key identifier: A7:80:2C:58:B3:A3:34:23:10:FB:84:5F:72:6C:26:98:66:FE:D3:46
Authority key identifier: E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
Certificate issuer: /CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Certificate serial: 019D3789D042A76808D92B125535D1072C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
Manifest number: 017F
Signing time: Sun 29 Mar 2026 03:01:11 +0000
Manifest this update: Sun 29 Mar 2026 03:01:11 +0000
Manifest next update: Mon 30 Mar 2026 03:01:11 +0000
Files and hashes: 1: 4MZJtmoZ2i_sI2sEndEioO82iw8.crl (hash: XRgieqkBxROlIZ4dPp+r/GSZyMu7c38o2hWfBxfn1s8=)
2: INwAC_jNS7HwUjq0ta-X62KVJno.asa (hash: 0iRDupFn1+ZlmDKitgIiV/zTNurv4zOW9wtdEQ3dQhc=)
3: iQFBjQMYNTTJ2jk6e5feOS_a39s.roa (hash: GqVM6J5PfB8C9Ws9x090WHFvEBb+mt5HYBg+7QoW2vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:d0:42:a7:68:08:d9:2b:12:55:35:d1:07:2c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Validity
Not Before: Mar 29 03:01:11 2026 GMT
Not After : Mar 30 03:01:11 2026 GMT
Subject: CN=a7802c58b3a3342310fb845f726c269866fed346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c1:09:ba:ca:bb:78:69:52:29:1e:43:fb:9d:
5b:b5:14:76:ac:1f:1e:af:3b:d9:ce:30:3c:44:db:
7c:d4:ec:08:f4:ec:89:fd:65:18:30:31:dd:df:47:
db:73:ed:cd:82:22:da:03:d6:ad:cf:55:b7:3a:ab:
02:e2:15:ef:0c:c1:39:64:1a:c2:67:07:47:03:6d:
fa:47:63:16:9b:08:2a:02:66:56:42:98:9c:3a:c1:
f2:03:c0:10:cd:7c:0b:1a:9f:1d:34:70:90:e8:88:
ea:3b:d6:be:4c:dd:91:5d:b5:00:f7:3b:e0:a9:69:
b9:ab:cb:f6:f8:28:fd:1c:01:15:37:1f:bb:47:4c:
cc:d0:93:5f:39:31:ba:41:fe:a0:11:7a:66:67:08:
17:9f:62:70:36:08:9f:71:7a:4b:67:f8:54:b3:c4:
1d:d7:a5:26:f1:f5:0b:27:31:fb:6c:cc:ac:57:3b:
c0:9b:4b:ff:5c:35:f1:83:b0:e3:77:4f:ea:67:0d:
23:e4:63:a2:56:63:b6:c0:90:19:4f:e6:fa:46:47:
60:ba:0b:a3:63:b3:5d:9e:79:c4:61:80:94:e3:7b:
0d:57:d9:e1:96:a1:77:85:ff:67:a8:8e:ae:23:45:
4b:1a:07:69:5a:96:3b:7d:7c:41:8f:7b:eb:d3:4d:
8e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:80:2C:58:B3:A3:34:23:10:FB:84:5F:72:6C:26:98:66:FE:D3:46
X509v3 Authority Key Identifier:
keyid:E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:11:4b:ca:82:71:a4:f1:cf:a2:df:c2:9f:37:a1:57:5f:cd:
09:53:c8:ba:50:50:a2:d3:db:4a:1b:37:42:72:b5:e3:96:e4:
ed:f5:23:b4:36:b3:ef:c8:11:8e:b1:99:cb:86:2b:3e:7c:ce:
2b:5c:b7:79:86:7e:f7:48:0b:b7:4d:b1:7d:9a:f9:e9:bf:73:
f9:39:8e:3d:35:3b:cb:80:1c:7f:3f:9b:1f:4f:3b:81:73:cc:
45:a2:2c:6d:bd:4e:91:d9:2e:8b:66:f9:5f:ae:6d:c5:a3:6b:
1a:6c:d3:8f:bd:8e:9e:0a:bc:d1:dd:ad:8f:df:2d:3a:1c:e2:
0a:c8:ab:60:37:9d:03:1c:1f:68:5b:9d:07:b1:83:b0:bd:2b:
2c:c7:29:36:3b:22:a6:f0:a0:01:6b:34:97:f1:f1:64:46:35:
6c:30:bc:2b:43:9d:a5:d2:55:98:06:23:c3:53:e3:de:0e:67:
dc:04:f2:73:a4:50:d8:9e:aa:86:31:f0:1d:5b:3b:af:6c:d6:
44:29:84:96:84:2d:bd:64:52:5c:4e:94:bb:94:47:a7:3d:4a:
8a:88:8d:22:ce:aa:6d:bb:ee:66:16:8a:1c:54:49:8d:e5:d8:
fe:5f:dc:04:54:b8:56:08:c7:44:8e:9f:53:19:fd:2c:25:40:
fd:78:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:43 2026 by rpki-client