Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: mAZ5q2AFa0EqpW8S8r5kZ7xyUJM3iZhi+/6rj9OcEPc=
Subject key identifier: 4B:71:B2:5A:5B:63:00:79:D1:04:2E:84:EE:9A:06:D4:FE:2D:CE:F5
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 019CABD94656EF14DAB2A69E766D7D91FFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 17DA
Signing time: Mon 02 Mar 2026 00:01:09 +0000
Manifest this update: Mon 02 Mar 2026 00:01:09 +0000
Manifest next update: Tue 03 Mar 2026 00:01:09 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: AWZSwaOxMzMINv21OMvcFrn1IhocG98v8I0gIDLtaaU=)
2: Z-KRt-a6fFf_5XtERzEP16Ujm4E.roa (hash: UsGPZBKjWrTYFqihznPKPakXtZqMZXtabA/JlRVq59s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:46:56:ef:14:da:b2:a6:9e:76:6d:7d:91:ff:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Mar 2 00:01:09 2026 GMT
Not After : Mar 3 00:01:09 2026 GMT
Subject: CN=4b71b25a5b630079d1042e84ee9a06d4fe2dcef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:f2:df:24:98:bf:1b:77:56:a5:63:d9:41:
f0:57:ef:fd:7c:fc:da:b4:9e:90:ff:47:c5:ac:f0:
51:a2:38:08:a1:45:11:d8:bb:97:c9:77:73:8a:48:
ac:ae:ea:0d:9f:5a:24:88:1e:74:dd:21:56:70:96:
2a:01:b4:2f:70:5b:8c:d8:1e:0b:41:23:0c:7f:4c:
91:bb:12:49:6e:27:dc:f3:b7:41:05:17:c8:8b:2d:
d3:c2:9c:09:e5:ba:f8:11:16:cb:7b:c0:a5:e4:2d:
cc:1c:1e:80:81:8e:ce:21:66:96:f5:0c:ff:44:a9:
2a:45:55:a7:ea:a7:8d:aa:6e:05:52:b6:49:aa:35:
12:b7:ca:c4:29:b3:f9:9f:9a:1c:0b:7a:fc:f7:37:
d7:bf:97:65:c1:f2:bb:9f:a1:1d:14:f3:f3:04:84:
e0:01:f2:69:77:64:7b:45:5e:8c:0e:ea:c0:b2:96:
15:31:e4:c6:a2:31:38:cb:42:3f:58:76:aa:25:9a:
ae:f0:b8:60:1f:de:1a:dd:c9:37:33:16:8f:27:8e:
1e:7d:66:85:36:ee:33:aa:71:9c:be:15:0e:c4:a2:
5d:84:9c:a9:7e:2d:f8:b7:00:83:11:bf:b0:b7:0f:
06:ea:f9:37:f7:e9:c0:be:10:86:82:3b:2d:b7:47:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:71:B2:5A:5B:63:00:79:D1:04:2E:84:EE:9A:06:D4:FE:2D:CE:F5
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:b1:d4:1c:fd:a7:67:39:e8:8f:21:a1:fa:68:ed:15:37:ce:
b9:13:67:11:46:64:d0:9f:1b:83:88:e8:17:42:52:ba:f0:ef:
af:7f:83:c6:fd:2a:76:27:5b:98:c4:66:fb:d2:f4:b8:cc:68:
b2:21:40:a2:93:09:bf:b0:5c:3c:ea:36:38:bc:87:4f:62:9e:
9a:33:b9:d6:ed:6f:ab:b2:a3:a1:60:07:b8:e8:8d:85:f3:97:
77:cb:e1:dd:39:6e:32:7b:ab:c8:9b:c6:4b:c9:24:89:66:c5:
73:ae:3f:f3:5a:5b:19:f6:87:00:bc:9a:0e:d1:b8:f4:ed:b7:
21:3b:fb:8e:5c:a1:d9:e1:8c:64:40:bb:9f:4a:91:12:55:88:
52:5c:34:30:0c:95:43:d9:f6:a5:3d:8e:34:10:e9:2f:be:ec:
f9:fc:37:f1:05:90:49:df:9e:88:9e:b2:57:9c:69:0e:9e:ad:
90:a5:2f:ca:5e:ea:24:9a:1c:f0:cb:0f:9b:d8:8c:00:f6:ea:
6d:c9:f1:1f:a3:d4:61:68:79:fc:29:e0:3c:6f:6c:46:e9:6d:
c6:91:96:a5:a0:8c:12:9a:33:b7:3b:2e:bc:48:d1:31:0d:e3:
b5:28:f1:56:73:ef:b2:8a:a5:0c:15:8a:7d:6a:52:c5:eb:01:
10:2d:cd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:22 2026 by rpki-client