Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
File: a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json)
Hash identifier: jInaVOYYCvSsfIrpPmApkGq/Y5VdLzYgPNcbzGzT9Zw=
Subject key identifier: 27:02:D1:B9:51:1D:D8:89:03:92:41:EC:DB:BE:A4:87:AA:0F:BB:92
Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
Certificate issuer: /CN=6b83d9281a7a508abfc495304ae99c98c042c611
Certificate serial: 019D371B4A70EBC358F7390F6C45B1B930B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
Manifest number: 181E
Signing time: Sun 29 Mar 2026 01:00:28 +0000
Manifest this update: Sun 29 Mar 2026 01:00:28 +0000
Manifest next update: Mon 30 Mar 2026 01:00:28 +0000
Files and hashes: 1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: rN9TAH1ga9lriGcEGO4cQKPu1yZSqwQa3M5v53t0oBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:4a:70:eb:c3:58:f7:39:0f:6c:45:b1:b9:30:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611
Validity
Not Before: Mar 29 01:00:28 2026 GMT
Not After : Mar 30 01:00:28 2026 GMT
Subject: CN=2702d1b9511dd889039241ecdbbea487aa0fbb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:12:83:84:bd:52:81:46:f6:f9:4b:4f:6a:
68:8d:58:1b:4c:fb:e3:c8:34:d7:ef:7d:93:04:48:
16:a0:53:7b:b2:b3:fd:10:48:46:f2:84:bd:51:a6:
8c:d8:fb:52:7f:18:64:44:0a:ea:37:5a:ea:24:07:
dd:3e:72:11:55:ba:18:80:82:3a:ae:a9:17:83:4f:
b0:af:5c:cd:31:6b:24:08:06:a6:dc:90:86:72:35:
85:c9:ef:60:ca:28:54:a3:b5:70:8d:1f:9f:e1:83:
56:23:14:bf:81:f3:0b:15:de:f9:ed:a2:d4:09:39:
9a:39:2f:6c:34:4f:99:5f:e7:f2:4e:14:d3:3b:0d:
a1:4c:68:4f:e1:e3:91:a0:31:08:dd:8d:85:a5:40:
20:85:b6:49:21:fc:a1:f4:e9:31:6a:66:93:bb:52:
be:46:bf:79:f7:46:d5:53:08:3c:52:9f:fc:9f:52:
8f:b1:70:14:36:c9:ea:6d:b5:71:f4:58:88:f7:e5:
7d:3e:01:72:46:de:29:8f:22:96:75:61:cd:75:aa:
9c:ad:cf:d3:50:8e:d0:5a:d1:de:a5:ce:25:fe:56:
07:da:41:95:9a:9f:2a:d2:69:d0:2a:c5:89:15:f3:
41:d3:de:30:2e:f2:32:53:77:16:31:f9:49:4f:94:
ec:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:02:D1:B9:51:1D:D8:89:03:92:41:EC:DB:BE:A4:87:AA:0F:BB:92
X509v3 Authority Key Identifier:
keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:17:8a:12:aa:f9:6b:65:e7:8f:7b:9b:e6:8c:92:e7:98:f1:
da:e6:df:be:3c:c9:3e:ae:72:51:46:61:7f:55:3a:87:1e:1c:
03:b0:b7:c6:09:91:bb:b5:a9:96:df:4f:8f:46:9f:af:97:7a:
57:53:cf:13:25:b3:53:a7:eb:c0:cc:44:86:fc:87:85:3d:ca:
39:b5:1a:d6:78:8f:8f:ab:5b:fe:17:d3:5a:b1:f7:99:68:7f:
e3:3f:8e:03:30:76:ed:f8:23:9d:a6:00:9d:92:f9:4e:57:41:
30:41:ac:9e:30:84:91:1a:cd:0c:d5:d4:fe:1d:be:07:dd:fe:
92:5b:54:0a:4d:9b:80:97:29:3e:7d:01:5a:2b:45:c5:e2:42:
27:60:1f:d9:e4:7a:2b:b6:79:04:91:8e:c4:32:e7:27:a4:b9:
64:22:5e:8b:b0:ff:8d:c4:cf:8c:ca:8c:2a:86:2f:dd:2e:87:
43:30:82:ee:cf:98:d9:6b:95:6b:8c:99:19:1f:36:2c:65:16:
88:43:d5:12:f0:80:b7:7d:ad:14:25:0f:e1:62:9f:7a:c1:92:
7a:50:0d:34:20:91:2b:be:36:79:25:d4:65:cc:ca:eb:36:d2:
9f:8b:39:89:00:90:47:51:1a:5e:b0:50:3a:f1:c0:f2:e4:ea:
80:f4:46:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:40 2026 by rpki-client