
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier: QyA+3JUGR+wYv7hG0/FinwGo80qk05soZqnRKwgpVT0=
Subject key identifier: 00:70:61:C9:57:EB:FE:3F:20:10:68:99:EA:41:9D:88:CD:F5:7D:91
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 019CABD9AD7F8AC04E99FFC571955FA803C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 00:01:35 +0000
Manifest this update: Mon 02 Mar 2026 00:01:35 +0000
Manifest next update: Tue 03 Mar 2026 00:01:35 +0000
Files and hashes: 1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: k8wQOLo+USwS1jMbgc9tFI4owYH4uQZHOIbOb1UbjrE=)
2: Ut_nk45-PrVxes0DMrlE6POGcXc.roa (hash: oo94Gr3/o7iKPPOqsqmwUWcuIt1lQW+gn6zRbGd06vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ad:7f:8a:c0:4e:99:ff:c5:71:95:5f:a8:03:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Mar 2 00:01:35 2026 GMT
Not After : Mar 3 00:01:35 2026 GMT
Subject: CN=007061c957ebfe3f20106899ea419d88cdf57d91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:42:c9:c7:fc:11:1c:21:31:12:17:40:51:01:
3f:95:30:86:d7:78:3c:7b:d9:53:95:c2:6a:f8:ad:
93:29:d3:99:b8:75:de:29:24:97:c8:42:1a:df:97:
a1:f1:3c:10:e2:2b:18:fe:db:90:5e:13:58:29:0b:
aa:52:26:cd:4c:0a:e2:cc:ff:b8:6a:9d:53:68:2c:
bc:75:ea:a7:ce:c0:0a:92:e3:ed:9f:57:ee:20:8f:
90:76:0b:5c:53:de:d7:4c:58:b9:78:b9:82:c8:52:
90:f7:fc:17:84:a9:1a:79:7d:96:b5:5a:df:d1:45:
61:c9:1a:fd:75:74:54:b6:ad:ff:53:25:f3:06:ab:
15:1f:b3:00:e3:34:71:12:5b:c3:0c:fb:0d:06:b0:
6b:8b:d4:87:c3:3c:0b:0b:3c:5c:e4:be:4e:a7:97:
28:ac:2d:a4:d2:1a:be:5e:4f:7f:78:85:ce:46:9b:
60:44:df:3c:eb:d2:25:5f:90:e2:d4:03:08:9f:93:
fd:01:8b:a4:e0:56:fe:2e:52:42:3a:e9:be:f8:b5:
26:95:14:c8:dc:9b:5e:f5:38:de:7c:bc:4d:9f:12:
13:6c:11:f6:2a:be:44:ec:c6:c5:1e:51:67:b2:cc:
9c:ed:46:0d:fd:1b:3c:8c:fd:f9:a9:ef:f8:1e:a5:
0b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:70:61:C9:57:EB:FE:3F:20:10:68:99:EA:41:9D:88:CD:F5:7D:91
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a3:a8:da:b5:ae:d8:ec:7e:fe:f5:61:0d:06:be:15:03:41:
d8:96:df:83:6b:b4:55:2c:73:77:ee:d6:9d:78:ff:ba:e4:33:
b7:cf:ff:1b:74:9f:83:4f:17:0d:7f:45:8b:6b:51:82:fc:fb:
71:8d:9e:d2:05:f4:63:a4:9f:35:92:0d:08:cb:69:aa:f7:da:
79:40:ef:b5:16:9e:7e:40:df:d1:81:2e:11:6d:ad:03:3d:0a:
47:1d:b1:9d:2e:3d:e5:f4:73:35:1b:20:ff:f9:2d:7a:55:c2:
90:95:e8:0b:cb:fb:5f:f2:f0:fa:37:44:e0:3c:85:65:17:8f:
0d:ac:fb:17:ac:12:0b:9c:66:47:1c:74:db:20:21:4b:ec:9d:
0b:65:1b:a4:38:75:ee:eb:3c:fb:cc:25:32:19:53:c8:3c:a6:
cd:48:12:86:3f:c3:9f:ec:ff:20:8f:7b:3e:dd:ff:8e:7c:5e:
95:96:81:e0:83:83:d5:30:d3:f3:11:57:79:31:eb:43:2e:c6:
85:94:72:2b:60:b3:c2:03:06:be:fe:90:4b:42:d4:58:76:56:
f6:94:cc:0a:d4:6d:6e:dd:98:de:3d:03:43:42:67:d6:c2:df:
a5:c0:f8:2f:04:81:75:80:e6:e6:fd:d2:21:15:50:ec:bc:0b:
94:81:87:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:58 2026 by rpki-client