Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
File: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft (raw, json)
Hash identifier: wRjMuZjKx1RTSYhBvSOmOyhiIs8VyrW2ISaWZwLZgVU=
Subject key identifier: 6E:58:72:BE:30:51:12:59:43:C5:71:47:56:02:B7:3D:72:5C:EF:0C
Authority key identifier: E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
Certificate issuer: /CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Certificate serial: 019D3752212D5F16C683557EC7F7B9435298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
Manifest number: 17CD
Signing time: Sun 29 Mar 2026 02:00:22 +0000
Manifest this update: Sun 29 Mar 2026 02:00:22 +0000
Manifest next update: Mon 30 Mar 2026 02:00:22 +0000
Files and hashes: 1: 4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl (hash: ZlJBH7yzDjZW6nLbE2GnnJlyF7PEquIm811m7nNGQyY=)
2: pZ2DG9liFeCKNbzetKHvN52UJO0.roa (hash: ngpoJdoTiDK1ogZAlMttmztrBQw9vwYksg/OwsA6X2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:21:2d:5f:16:c6:83:55:7e:c7:f7:b9:43:52:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b9a3ce0f593910819c3271e1e8d0bd1371a6be
Validity
Not Before: Mar 29 02:00:22 2026 GMT
Not After : Mar 30 02:00:22 2026 GMT
Subject: CN=6e5872be3051125943c571475602b73d725cef0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e8:a3:44:ed:08:c4:04:e7:5b:b4:49:10:e2:
e5:3b:e6:49:6f:63:54:28:13:3d:0d:2d:0e:4d:a6:
6c:26:db:a6:53:33:27:63:06:aa:71:3d:d2:29:06:
85:80:60:2e:25:0e:1c:e9:b5:9a:25:c9:c2:87:7e:
c9:da:e9:c2:e2:35:99:19:1f:c1:71:37:0e:56:c9:
e5:2c:98:e1:33:e9:89:8f:25:b8:a4:31:45:b0:13:
fd:43:1a:2f:7c:0e:c3:58:f3:7a:68:e0:a6:b6:78:
17:26:8b:62:c6:b8:73:b4:57:38:ab:57:e7:9d:e7:
bc:14:24:9a:46:5c:a1:81:61:a4:c7:b2:78:6c:ec:
51:31:cc:27:31:69:19:0e:ac:06:ae:50:cb:b7:17:
c0:50:7a:8c:cf:01:01:2e:88:63:e1:6e:51:2a:31:
f3:82:f6:6a:3d:04:d4:2d:08:09:d0:d8:05:5c:2b:
e5:7d:5f:c2:55:42:df:1d:2a:f4:1d:a4:a5:c4:cd:
f5:36:9c:1f:02:09:79:a7:3b:b6:7e:ee:d7:4b:e0:
e8:43:84:67:13:8b:29:60:49:f0:2a:8d:4f:75:39:
72:4b:d1:8b:6d:03:29:67:15:94:72:be:03:50:9d:
48:88:86:6d:df:bd:e6:3c:70:79:d9:3a:c5:2d:72:
f6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:58:72:BE:30:51:12:59:43:C5:71:47:56:02:B7:3D:72:5C:EF:0C
X509v3 Authority Key Identifier:
keyid:E1:B9:A3:CE:0F:59:39:10:81:9C:32:71:E1:E8:D0:BD:13:71:A6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bmjzg9ZORCBnDJx4ejQvRNxpr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0d8be8-b4b4-436e-86e2-ba4c56d8c0ce/1/4bmjzg9ZORCBnDJx4ejQvRNxpr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:31:85:ac:4f:f2:50:f1:ae:a7:dd:dd:2b:99:12:50:cd:46:
df:8c:0a:5b:b7:22:a1:44:60:38:a1:3d:eb:c8:c1:a4:83:a2:
fe:e3:39:1f:27:40:ed:4a:86:c7:41:1e:a8:c4:ff:5b:cd:02:
e6:c2:93:df:c7:81:43:bb:60:19:25:75:61:8a:71:ad:82:18:
be:10:3e:40:e4:c1:f9:46:b7:67:63:23:41:e2:ca:f1:53:51:
2f:de:33:8d:15:33:bd:ce:a5:18:b7:57:b1:b7:6c:5a:1a:7c:
bc:41:38:24:3b:cb:34:11:2c:c9:01:b3:94:14:d7:2d:8c:f6:
98:2c:21:d5:6f:d6:33:97:80:27:13:00:c7:22:6b:7f:42:7d:
8e:58:5f:68:90:c1:93:c4:0f:cf:a6:d5:70:30:30:54:9b:6e:
a5:95:be:1a:ed:bd:04:5f:5b:5e:a9:78:dc:1a:52:03:32:a6:
85:e8:0c:fe:e7:fa:3a:07:c2:a4:8b:bc:b8:9a:9a:d3:68:75:
dd:b7:8d:14:0a:34:d4:3c:fc:cc:da:81:06:49:fa:2a:e4:67:
c1:db:0b:87:06:fe:4a:ff:d5:95:cf:40:9d:83:4e:86:70:37:
5b:2e:b6:15:74:8c:e2:71:f5:2a:ca:ff:9e:5a:57:7b:4b:91:
e6:14:be:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:06 2026 by rpki-client