Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
File: 4q9q9tGZ8R7LpDVVEOmbficatUA.mft (raw, json)
Hash identifier: lzIEgCOdhr/UHO/emG59OHNrWAVzKlUIZBXtcsePoGU=
Subject key identifier: FA:7C:72:C2:7F:75:E2:AF:61:F4:DC:55:3D:AB:D3:69:33:83:B9:D3
Authority key identifier: E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
Certificate issuer: /CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Certificate serial: 019D39AECC531ECB9C875514F3C288ADF4E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
Manifest number: 03C6
Signing time: Sun 29 Mar 2026 13:00:49 +0000
Manifest this update: Sun 29 Mar 2026 13:00:49 +0000
Manifest next update: Mon 30 Mar 2026 13:00:49 +0000
Files and hashes: 1: 4q9q9tGZ8R7LpDVVEOmbficatUA.crl (hash: zh8t5BwtSx/Y9xCNELwgqB9bLj3r+0k7NUg7XavdlUI=)
2: WsRPhT9Oh-9n_aMNy1_PxDNMYcI.roa (hash: /TTOGt1K8yp5w1qqEg6jDasBjpl22O3FqBsf/BAjXeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:cc:53:1e:cb:9c:87:55:14:f3:c2:88:ad:f4:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Validity
Not Before: Mar 29 13:00:49 2026 GMT
Not After : Mar 30 13:00:49 2026 GMT
Subject: CN=fa7c72c27f75e2af61f4dc553dabd3693383b9d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:3d:c4:e8:58:e8:1c:0c:1c:2b:02:6c:2c:
a3:2d:a9:48:1b:a8:6a:09:70:47:76:72:c6:9a:a5:
2d:c5:cb:b5:a5:52:ad:5b:76:2e:6a:59:05:11:b8:
dd:07:e2:ed:c1:01:17:38:7e:c3:27:dd:59:19:27:
11:4f:5c:53:f1:22:8a:0b:06:61:c8:ad:72:6a:5e:
68:78:6a:57:05:d9:c3:9a:d0:53:aa:2c:82:6a:4d:
78:54:2e:aa:a3:84:87:9c:b8:a8:2f:09:59:2f:80:
ba:cc:55:97:6f:3b:62:53:35:f2:83:26:05:34:89:
39:f7:b1:7b:bb:d6:c8:10:08:75:bf:9d:24:53:7e:
8c:c6:02:f1:23:f4:b8:c2:43:00:8c:50:88:6a:10:
c2:73:b4:27:23:fc:85:cf:76:a8:6d:c3:65:5c:6e:
af:34:5a:b7:a5:c8:65:76:78:10:17:7c:1c:6d:8e:
7e:17:1a:06:a9:8c:55:9b:44:8a:d6:c4:b2:04:8d:
c4:f5:3d:54:62:63:56:14:9b:7f:a7:0d:1b:08:3d:
5a:cd:c3:f4:b5:ef:fc:18:8e:55:25:57:a9:2d:bb:
10:d1:54:34:f5:d4:03:83:c1:f4:a3:32:f5:64:50:
08:3d:08:e7:6f:5b:b6:bc:f8:13:cc:06:06:9c:7f:
8c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:7C:72:C2:7F:75:E2:AF:61:F4:DC:55:3D:AB:D3:69:33:83:B9:D3
X509v3 Authority Key Identifier:
keyid:E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a5:d6:a0:bb:dc:bf:98:0a:ca:c3:59:a9:a5:ce:3d:5a:0e:
b8:ef:43:15:27:85:47:82:15:76:3e:05:c3:4f:c6:71:97:5d:
5c:b4:92:29:9d:b2:3a:ce:15:d6:ed:f9:47:de:7d:62:09:81:
28:70:38:c2:d9:15:48:d4:ee:61:b8:cd:97:3e:60:1b:ba:b7:
89:db:35:60:4b:d4:83:30:2c:5c:89:87:6d:1c:fe:b8:f5:4b:
5b:7f:ed:0e:37:66:f2:92:6c:91:4a:4e:de:32:c9:12:35:fe:
35:e0:71:1c:b0:6a:aa:7e:07:14:cb:b0:11:69:74:44:c0:a6:
55:54:4b:70:cd:75:7a:28:12:89:d2:01:3f:e6:ec:2b:31:46:
34:fd:32:e8:73:3f:11:6b:1f:09:33:f9:9a:f8:3e:81:08:fe:
42:89:14:a5:7d:c0:cf:88:bb:7a:9d:8b:ed:cb:c9:44:dd:1e:
25:10:e6:84:68:3f:4c:9f:5e:79:7f:e0:44:21:e1:f0:f5:bf:
2f:51:e6:91:ae:e0:e3:54:3e:40:be:c3:71:d7:84:0e:c3:20:
88:f6:7b:b8:91:70:95:59:2f:07:82:95:44:89:6f:70:3f:b5:
b0:f1:0c:c4:4e:b5:7d:08:f3:24:eb:4a:c4:10:6b:d6:ea:80:
84:b1:a4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:44 2026 by rpki-client