
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.mft
File: 4U-Z-ZSPLAeHhGluSv-1NhjHrD4.mft (raw, json)
Hash identifier: ZJcwVC9DbXrLOVPjy994czS4Ih3wyxS/YxmVT2PH0Ss=
Subject key identifier: 9B:B0:43:73:DA:DF:41:88:D0:DA:62:7F:30:E0:60:49:78:BE:B3:49
Authority key identifier: E1:4F:99:F9:94:8F:2C:07:87:84:69:6E:4A:FF:B5:36:18:C7:AC:3E
Certificate issuer: /CN=e14f99f9948f2c078784696e4affb53618c7ac3e
Certificate serial: 01A03FA9A9731E39394FA1278BA327C869DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.mft
Manifest number: 0144
Signing time: Wed 26 Aug 2026 20:01:18 +0000
Manifest this update: Wed 26 Aug 2026 20:01:18 +0000
Manifest next update: Thu 27 Aug 2026 20:01:18 +0000
Files and hashes: 1: 4U-Z-ZSPLAeHhGluSv-1NhjHrD4.crl (hash: HLPhwOI8K5IimAjfUndqmp2H/sJ5rWr7WlaBrIVlrsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:a9:73:1e:39:39:4f:a1:27:8b:a3:27:c8:69:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14f99f9948f2c078784696e4affb53618c7ac3e
Validity
Not Before: Aug 26 20:01:18 2026 GMT
Not After : Aug 27 20:01:18 2026 GMT
Subject: CN=9bb04373dadf4188d0da627f30e0604978beb349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:53:04:11:fe:f0:3b:7b:04:4a:87:75:48:b9:
0a:c2:c3:12:94:c4:5c:b2:b0:12:33:7a:36:b6:79:
b2:97:38:6a:71:b2:1b:e1:57:95:55:dd:b9:73:d5:
a0:ef:57:0a:42:7f:da:4c:67:9f:4a:6a:3f:3f:b7:
02:27:b1:77:43:ab:27:c5:21:f0:b4:a2:ef:4a:f2:
8a:e0:66:c4:e3:f3:e1:11:a6:23:e9:48:dc:69:f2:
12:34:c0:1e:82:f5:73:a6:0b:80:a2:81:c7:66:9a:
19:1f:19:e2:7a:32:18:ed:a0:dd:5d:5a:92:21:62:
ca:10:7d:34:76:a9:ba:6d:b0:5c:a0:f8:34:aa:79:
9f:d8:ba:3b:8b:96:89:64:67:17:71:40:06:5e:15:
c3:89:e5:dd:1d:b6:96:73:a6:ed:a1:8a:d1:6f:c9:
0c:67:2d:bc:b4:04:48:29:76:dd:fa:14:91:55:bd:
ca:41:db:54:2a:93:c6:ae:be:37:c3:f1:43:05:4b:
13:47:cf:54:70:26:2b:c0:cc:8d:31:83:d2:62:51:
11:3c:8a:8b:9d:25:b1:da:b6:42:3b:17:1f:32:72:
91:71:04:b4:d3:c6:72:46:99:5c:13:df:a8:68:4c:
ca:ee:67:31:cd:fc:ac:dd:1f:3c:28:97:cb:ba:75:
13:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B0:43:73:DA:DF:41:88:D0:DA:62:7F:30:E0:60:49:78:BE:B3:49
X509v3 Authority Key Identifier:
keyid:E1:4F:99:F9:94:8F:2C:07:87:84:69:6E:4A:FF:B5:36:18:C7:AC:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e82380-786e-45a7-8b45-4f9816c92536/1/4U-Z-ZSPLAeHhGluSv-1NhjHrD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:62:bd:ef:36:77:56:87:05:a3:bb:98:ba:42:3e:47:1f:af:
db:56:c5:f2:28:2e:51:9e:a1:c5:42:06:68:ca:71:e4:5f:f0:
e6:9d:c3:83:11:d3:32:f2:20:8c:c2:a2:8f:97:ba:c5:39:6a:
70:3f:1d:46:01:3f:2c:5f:66:75:0f:a0:01:50:04:e5:04:42:
21:d2:9a:07:7b:cc:c7:6f:1d:49:9c:5c:47:f0:c0:28:bf:e2:
81:e3:82:88:7b:43:e0:80:c2:92:56:27:cc:8d:f0:18:3d:c3:
aa:52:a8:b5:77:de:ee:ae:0a:b8:89:4d:f7:ee:80:01:86:f3:
16:3e:d6:b1:8f:97:ac:1c:b2:ce:64:19:e1:17:26:3c:34:73:
83:cb:05:ba:0d:52:ce:1d:57:dd:f8:b1:a2:9c:8c:e6:de:8c:
b9:c0:e8:40:de:db:4d:e3:c6:e3:6c:8c:63:e9:3e:da:9a:bc:
88:13:c2:cf:b5:7e:2e:43:ec:f7:09:ec:58:be:22:69:97:b4:
95:1f:e6:dd:bf:9c:90:4b:03:85:40:cf:a3:35:cf:f9:74:15:
d7:90:44:9d:59:79:cb:23:73:7d:13:03:1e:c9:db:77:9e:52:
31:1f:83:c6:48:fb:75:e9:5d:8b:f0:52:16:f0:03:ee:d7:89:
30:38:4a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:47:36 2026 by rpki-client