Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
File: 4Rzmt92aasCzJLpa2HOwr0ajktQ.mft (raw, json)
Hash identifier: 5BEljSgCTdmWHyero2jBkoc99J+VzBT833tTWJa4Ybs=
Subject key identifier: C6:80:4F:D3:B2:79:A9:39:F1:AF:33:1B:69:67:9E:F8:77:82:99:B5
Authority key identifier: E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
Certificate issuer: /CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Certificate serial: 019D39411C5B66D229892E8878B7AA28A52F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
Manifest number: 02A3
Signing time: Sun 29 Mar 2026 11:01:01 +0000
Manifest this update: Sun 29 Mar 2026 11:01:01 +0000
Manifest next update: Mon 30 Mar 2026 11:01:01 +0000
Files and hashes: 1: 4Rzmt92aasCzJLpa2HOwr0ajktQ.crl (hash: yjtUdcYn6OOxTwB1Cw2rVeJPskMzVNd1cCoarlcGk+E=)
2: 8mGjCH9xqFpZOCJZc787zSGC4EE.roa (hash: kpbH01pKQ8NTLrxbYMEWBBlk5pUCb7DZ0viTFQjgJ0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:1c:5b:66:d2:29:89:2e:88:78:b7:aa:28:a5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e11ce6b7dd9a6ac0b324ba5ad873b0af46a392d4
Validity
Not Before: Mar 29 11:01:01 2026 GMT
Not After : Mar 30 11:01:01 2026 GMT
Subject: CN=c6804fd3b279a939f1af331b69679ef8778299b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:cf:a6:4c:f7:2c:69:36:15:1d:e7:2a:b8:
36:67:8a:3c:b9:14:88:2e:22:fe:fe:0f:35:a6:fd:
5d:53:e6:4e:3c:91:f5:60:f8:43:e8:ca:3f:e5:93:
62:43:df:b0:7d:40:57:99:cc:b4:eb:3c:b7:7e:7e:
b9:d6:12:89:3d:23:9b:65:ec:0d:a5:29:f5:42:ca:
8f:52:9e:50:fb:0d:00:13:67:70:c1:68:5b:1c:3e:
66:02:50:a1:c6:8d:46:16:8c:16:a6:71:8c:5a:f7:
6f:36:36:7e:60:a7:3b:3a:06:a3:24:59:ae:33:97:
71:a7:6d:94:e6:01:db:a2:e4:b3:fc:7e:b0:fb:77:
1b:14:0a:2b:fb:bb:2e:41:46:78:ca:1f:56:f4:94:
6e:93:81:d7:98:c2:d6:2d:e6:a6:b2:49:9e:6b:8f:
2a:ea:71:b3:3a:3c:2c:be:75:9b:0e:27:46:62:c7:
56:2b:e4:d7:7e:4b:ef:28:f2:83:a5:82:dd:fe:48:
a5:01:81:44:f3:99:02:eb:d4:ef:17:b6:0c:d4:ae:
68:ae:43:1b:11:6e:81:5f:99:70:29:60:ec:e3:32:
2a:d6:a5:3a:a5:64:8c:9f:0e:5d:07:e4:38:47:6a:
53:c9:86:b5:a6:4e:0f:50:ea:d2:8f:65:6d:ea:98:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:80:4F:D3:B2:79:A9:39:F1:AF:33:1B:69:67:9E:F8:77:82:99:B5
X509v3 Authority Key Identifier:
keyid:E1:1C:E6:B7:DD:9A:6A:C0:B3:24:BA:5A:D8:73:B0:AF:46:A3:92:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Rzmt92aasCzJLpa2HOwr0ajktQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/61db4e-3efc-462d-ab1f-e590e6b4cd0e/1/4Rzmt92aasCzJLpa2HOwr0ajktQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:1c:1a:1a:5f:e5:57:31:09:59:ee:b6:c1:56:7e:6f:b7:30:
cf:f2:53:f2:5c:93:f1:25:b1:03:87:f0:da:35:4b:d9:65:e7:
68:7b:70:77:eb:79:b3:bc:5f:c2:d2:12:f9:d6:b6:2d:28:fd:
1a:53:c9:93:74:0b:34:ff:85:38:04:aa:d3:66:12:a7:58:12:
cd:c8:c1:ca:f8:81:d1:a8:31:d8:92:f4:0e:2b:ea:5b:ca:b6:
ca:2e:5b:60:96:c2:0a:b1:37:d2:88:42:90:77:eb:b5:d2:72:
31:67:26:f1:c4:7c:12:bc:74:df:90:de:c1:aa:51:12:20:48:
e2:1a:5c:03:70:f1:8a:1e:a2:7f:8a:b8:34:ab:f8:e4:b8:e2:
8e:7d:b8:e0:9c:23:2f:a1:89:f9:4b:3f:01:74:41:fb:6b:f9:
d5:f8:2a:29:64:26:8e:f1:ee:31:af:60:ba:a3:ae:c1:f3:e4:
1c:39:f7:4d:e5:2c:b2:b0:6b:05:da:70:c1:ca:04:f3:0b:11:
41:31:bb:1b:31:1d:7f:08:2d:20:66:a7:74:8d:a3:de:99:d7:
52:84:11:6b:d8:11:ac:75:d8:84:c8:b4:c6:dc:c7:bb:99:3a:
84:da:73:66:8c:05:98:22:36:4c:c2:c5:8f:17:74:d2:df:58:
fa:01:69:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:24:12 2026 by rpki-client