Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
File: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft (raw, json)
Hash identifier: kZV5vBmRhcPMNhP7nqHjvaHvApmMZszvvT52hMKbSog=
Subject key identifier: 75:25:6C:D5:1E:3F:13:14:E1:2B:E6:DC:16:9B:F9:4B:A1:BC:15:5D
Authority key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
Certificate issuer: /CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Certificate serial: 019D3977780E21E32AAF64C84AECC351D63A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 12:00:23 +0000
Manifest this update: Sun 29 Mar 2026 12:00:23 +0000
Manifest next update: Mon 30 Mar 2026 12:00:23 +0000
Files and hashes: 1: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl (hash: 4t4lYgR5FQTCUMVhTPGknMu/v+Yy7NuXbbcaWduhmOQ=)
2: Ci7zv_DnAxQFZ_khRfP74GA8IGU.roa (hash: cMMuhG7xrtOzbQLc/BDIeV4S+eWZ3lL1QRAwLOKEPgQ=)
3: hvjTcKPQGXrhHxR8FLC4HcSQhWk.roa (hash: nOSvBwGcqr48/L9ifoZ/bQG7uxX3sVi/N4rTjGne47k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:78:0e:21:e3:2a:af:64:c8:4a:ec:c3:51:d6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Validity
Not Before: Mar 29 12:00:23 2026 GMT
Not After : Mar 30 12:00:23 2026 GMT
Subject: CN=75256cd51e3f1314e12be6dc169bf94ba1bc155d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6a:ab:e7:2d:f6:e1:48:05:17:2c:3c:f8:9f:
06:0d:e3:b7:b7:8a:cb:60:5d:3a:5a:ed:f7:59:22:
dd:b4:85:e9:07:9f:14:bf:01:3c:fc:3e:31:6e:83:
09:bb:d4:5a:5b:7d:57:32:65:aa:d1:5e:ae:d3:e6:
20:58:ca:18:54:38:d7:a3:55:b5:bb:cb:de:d3:e2:
b3:68:75:08:00:6d:2a:19:95:d9:5c:62:8e:2e:89:
6a:a8:91:91:01:2d:c1:23:33:d8:a2:59:dc:88:66:
2d:4c:fc:71:ef:eb:1c:ab:81:9a:02:fc:5c:9b:6f:
5d:19:57:6d:04:c9:57:bd:63:e0:6c:3d:1e:da:a5:
52:40:2a:b7:5e:55:86:d1:85:28:41:a8:38:09:4f:
96:17:4e:65:fe:9a:fb:07:53:f0:ec:0d:c4:5d:7b:
7f:4a:44:2b:97:92:18:a1:98:b9:ce:d5:f7:04:70:
52:6a:01:cd:09:9b:ac:20:10:1b:53:d5:94:43:e9:
63:f2:64:73:da:04:4a:5d:a0:66:b6:0a:bd:a8:50:
9a:c2:a8:09:a6:ab:e7:bf:2a:dc:2e:09:b2:69:2f:
81:bf:c5:7f:ab:39:a3:7f:48:00:d8:00:7f:ba:9e:
d8:1c:05:51:0f:98:02:1e:57:32:56:a4:0b:cc:0b:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:25:6C:D5:1E:3F:13:14:E1:2B:E6:DC:16:9B:F9:4B:A1:BC:15:5D
X509v3 Authority Key Identifier:
keyid:E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:18:dc:f9:0d:a6:5b:f8:b1:34:42:cf:9e:41:da:6c:f9:c3:
fe:bf:fd:05:69:b1:b8:3a:25:4c:02:59:7d:df:db:fe:dd:5e:
f6:b7:e9:ba:d3:3f:87:09:18:7a:3f:b9:9d:62:cd:b1:31:f2:
b1:eb:07:ba:15:21:ea:cf:cd:d1:35:5a:98:12:fb:fd:be:f5:
12:a7:98:d3:5c:23:5e:44:50:94:a3:f4:08:69:a9:45:86:68:
aa:40:20:dc:72:81:3c:5e:ed:ef:6c:2b:1e:6f:27:a4:22:d0:
77:af:94:24:5e:62:30:94:27:bd:64:27:c1:65:a8:9e:2e:cf:
e8:d9:fa:b9:f5:ab:b3:8c:22:8c:59:dd:e5:bc:dc:c6:5a:39:
ee:24:3d:65:fa:1a:3a:01:4e:c0:43:95:14:73:35:52:05:04:
bf:35:65:31:ce:da:2f:f2:bd:fd:1f:33:ce:58:10:c8:fd:6b:
70:71:0c:bf:e2:af:14:95:c8:4e:a9:55:71:52:a6:33:18:54:
69:99:79:40:7e:89:07:bb:45:0f:0f:33:2f:f4:df:42:9a:3f:
33:15:f3:3f:d3:6e:ff:1f:f1:65:15:10:93:43:47:dc:a8:f7:
66:a1:3c:6d:8a:b9:d3:e6:d0:a1:42:ad:54:53:d9:55:b4:33:
6c:a3:f9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:47:57 2026 by rpki-client