Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier: Oi1gcZ+PxRDJkwEyjaz9eEXeDDL3CHKs5IyxSbJPHSM=
Subject key identifier: 69:5D:28:3E:38:5E:2C:2D:EC:45:FF:7D:00:3C:10:D5:26:7E:AE:CA
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 019D389C3A485233BFDF2A981E503026498B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:55 +0000
Manifest this update: Sun 29 Mar 2026 08:00:55 +0000
Manifest next update: Mon 30 Mar 2026 08:00:55 +0000
Files and hashes: 1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: Ato7XEPP/Wgb6SkBBVfXZwO0FBkEt7FoRxX4yf4kVwo=)
2: WIclx685icB5o3UOREAKLFzzP34.roa (hash: uDpM1rHiGL2CuGW9o80RIXGPENrx4ls410ovEwWq5XE=)
3: hCTpwVd8i1hPStdoLxWMzM8N_TE.roa (hash: ihYHu1XwJ3avyhb/XoPHgm87ZbqnGY5kgmNHjUUXafY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:3a:48:52:33:bf:df:2a:98:1e:50:30:26:49:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Mar 29 08:00:55 2026 GMT
Not After : Mar 30 08:00:55 2026 GMT
Subject: CN=695d283e385e2c2dec45ff7d003c10d5267eaeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:c5:34:0d:ec:50:ef:01:72:34:d4:c3:de:
59:a2:53:95:70:2e:8b:15:9d:da:e0:43:69:f2:71:
4d:3d:d3:c1:8b:2f:37:d4:7d:db:f6:33:b3:12:7d:
b9:7e:0b:a1:7e:3d:f1:0b:ec:05:10:dd:3f:bc:76:
70:9b:60:36:ae:6e:12:68:a7:8a:14:6b:f0:c8:dc:
28:a7:47:29:0e:6f:f0:f9:6b:2e:57:2c:71:8a:82:
c6:94:ec:d0:03:6d:a2:7d:67:48:84:01:ff:48:6c:
64:24:e5:b3:80:dd:66:a2:3d:eb:a5:bf:d2:0c:81:
42:78:0b:91:2c:35:67:9e:2b:83:f4:5b:e9:40:d5:
e5:b4:58:91:5d:33:d5:3c:05:77:e5:6c:1b:87:77:
c6:ca:c8:95:20:de:0c:d6:c0:07:bc:04:d0:e2:7e:
a1:79:62:27:19:3d:b7:27:c6:ff:88:df:46:34:df:
21:fa:10:b1:f4:25:da:1c:7d:4e:4b:2b:e3:8e:77:
7b:25:f1:e7:59:9c:78:73:38:20:6b:47:34:7c:48:
c3:d9:53:bf:87:dd:04:74:77:4e:6b:5b:45:1e:49:
a0:d7:f8:1d:8f:bf:d9:19:4b:b3:72:2d:ad:b9:a1:
0c:65:47:4c:e6:aa:5d:9d:d8:67:a8:21:a6:4f:dc:
18:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5D:28:3E:38:5E:2C:2D:EC:45:FF:7D:00:3C:10:D5:26:7E:AE:CA
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a9:6f:89:7c:bc:59:1f:e1:3f:ab:9a:8c:5e:77:a8:b0:c2:
9b:9a:b9:1e:cf:a4:f4:3b:06:8e:06:a1:91:94:9d:56:5d:8e:
94:2c:98:18:b7:19:fa:ab:29:73:93:6e:82:83:22:8e:7b:c9:
a6:63:9a:73:2d:de:04:2c:75:2e:c1:59:12:37:e2:35:b6:1a:
33:cc:f0:75:c3:8b:37:ac:e9:fb:14:92:b5:77:a1:33:60:42:
f1:bc:c2:21:d9:15:6c:45:a9:89:e7:3a:42:bc:62:9a:62:a5:
00:dd:65:8f:5a:26:0e:06:0c:1b:e8:ed:b3:59:ed:8d:a0:05:
c3:ab:d7:9b:36:8d:57:e3:63:60:a2:86:c2:a1:be:7a:78:95:
8b:a8:36:14:d1:6d:02:05:b2:3d:22:a6:ec:be:61:3d:e7:81:
95:a7:09:35:3c:34:97:bf:a5:49:1d:1c:57:ae:a7:b8:b2:3d:
a7:4d:d0:e7:ec:a8:18:96:43:10:0a:d1:84:a5:17:cc:90:b3:
1b:9d:e6:3b:d6:65:74:3a:87:00:49:55:6f:26:cc:83:df:cd:
9c:dc:eb:7d:72:3b:8d:01:6c:a4:c6:7c:33:79:c9:97:47:d3:
49:02:86:8e:ea:00:d9:b4:0f:a9:30:1f:1d:09:50:48:27:2e:
85:6b:d3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:44 2026 by rpki-client