Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
File: 4MZJtmoZ2i_sI2sEndEioO82iw8.mft (raw, json)
Hash identifier: nQREvr6P1Wwer14NeCzVD2/qsDhgQccytLzu0xPv/gI=
Subject key identifier: 38:6E:C3:70:59:40:21:85:B5:C6:DE:31:E4:B5:F2:62:A9:F2:F0:08
Authority key identifier: E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
Certificate issuer: /CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Certificate serial: 019F129C4A2FCAFC1E908574EB1C9CD07172
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
Manifest number: 0275
Signing time: Mon 29 Jun 2026 09:01:00 +0000
Manifest this update: Mon 29 Jun 2026 09:01:00 +0000
Manifest next update: Tue 30 Jun 2026 09:01:00 +0000
Files and hashes: 1: 4MZJtmoZ2i_sI2sEndEioO82iw8.crl (hash: WoKfiGJ2g4UjtaY7f3rUdg8hBu4W9dHrkpT9VHjPaQg=)
2: INwAC_jNS7HwUjq0ta-X62KVJno.asa (hash: 0iRDupFn1+ZlmDKitgIiV/zTNurv4zOW9wtdEQ3dQhc=)
3: iQFBjQMYNTTJ2jk6e5feOS_a39s.roa (hash: GqVM6J5PfB8C9Ws9x090WHFvEBb+mt5HYBg+7QoW2vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:4a:2f:ca:fc:1e:90:85:74:eb:1c:9c:d0:71:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Validity
Not Before: Jun 29 09:01:00 2026 GMT
Not After : Jun 30 09:01:00 2026 GMT
Subject: CN=386ec37059402185b5c6de31e4b5f262a9f2f008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c1:65:b9:85:9e:b3:64:ca:49:9a:64:c6:a2:
3f:76:32:b0:5b:30:f8:35:65:3e:ff:0f:1a:6e:1a:
04:1a:1a:64:96:49:a0:73:c6:79:ed:af:35:21:92:
a6:6c:d1:a3:13:99:9c:42:15:3c:b3:f9:6c:27:f6:
8d:e1:1a:8a:a1:4c:2e:e8:af:08:65:f0:a0:9a:79:
03:6b:38:14:39:cb:43:af:74:58:87:00:18:34:5a:
f5:3c:6d:76:d3:7a:63:14:0e:a8:d6:cc:86:bb:32:
32:ec:06:4b:36:54:d2:35:88:b2:23:26:24:c1:ab:
9f:2b:db:5d:3a:48:d4:32:e7:e8:93:b4:41:a5:d8:
0a:2b:e6:3c:2c:e1:4a:5d:79:cb:af:8b:63:b1:0c:
dd:cd:88:93:9e:cd:84:94:b7:7f:b4:20:d2:fd:07:
cf:91:82:16:42:cb:bc:ab:61:84:64:fb:63:68:9e:
f3:dc:d3:03:c2:ee:89:c0:f2:06:e3:f5:f4:d2:1a:
60:b9:9f:b9:8a:a9:20:22:d8:f2:ac:7d:54:76:90:
38:f9:55:ed:77:85:09:5f:3f:a9:83:64:d6:11:04:
6c:b8:49:de:cf:cc:6c:82:64:3a:27:fb:7c:99:be:
35:99:fd:d4:7f:30:ec:4f:8f:8a:79:19:71:c2:35:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6E:C3:70:59:40:21:85:B5:C6:DE:31:E4:B5:F2:62:A9:F2:F0:08
X509v3 Authority Key Identifier:
keyid:E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:91:29:5e:7d:6d:2d:45:ea:e9:97:86:be:f6:74:b3:65:eb:
56:82:eb:cb:c9:d1:43:df:6d:20:28:d6:cd:d6:d1:2e:69:ce:
9d:46:b2:59:b6:5f:59:a5:4b:69:62:a0:9d:50:57:de:a9:27:
e4:f6:21:5d:f3:50:9e:b3:fd:56:58:47:08:29:1b:3e:ea:4e:
13:bc:cd:78:4e:a2:87:3f:9a:81:44:90:e1:10:76:db:e7:41:
cb:3b:7c:19:9b:60:77:4c:8e:5a:6b:71:de:8d:a0:10:bf:7f:
00:32:f1:68:5b:0d:e7:ef:65:63:55:db:d4:2e:4f:65:ff:3a:
50:7b:8f:76:70:bb:51:df:fc:77:21:ce:d8:ce:44:c0:71:12:
2b:c2:74:05:0f:bf:5e:4b:25:a4:18:df:2c:f7:93:a0:6a:6c:
30:6b:7f:cd:70:f3:67:81:be:c0:1d:69:de:42:50:e9:30:8c:
a7:da:ce:3e:96:f3:c0:bf:bf:cc:df:e3:78:bd:8a:4b:8b:55:
bf:d0:dc:4c:74:89:62:45:46:d4:b3:42:78:3e:30:5b:4a:df:
41:2d:1c:08:68:5c:33:26:ae:bb:db:45:ec:41:b4:4f:a7:46:
08:12:d9:b3:88:ce:3d:06:5d:3f:28:95:f2:2a:0c:0d:56:b0:
93:97:70:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:35:31 2026 by rpki-client