Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier: 3KguSUg9phYKZXAeKOkNv/2BNY7fZnZ5LpI8PN0a1d4=
Subject key identifier: 17:02:5A:3F:C5:0F:3F:42:8E:68:E8:E7:00:34:D7:09:20:59:07:FB
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial: 019CAD22E7B17AEFBBB3E42CC860B8B4C053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number: 1577
Signing time: Mon 02 Mar 2026 06:01:11 +0000
Manifest this update: Mon 02 Mar 2026 06:01:11 +0000
Manifest next update: Tue 03 Mar 2026 06:01:11 +0000
Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: hdYwAjV7TxhcYcG4wEfjN1lFkbGYG4uNxUtvrwrUOts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:e7:b1:7a:ef:bb:b3:e4:2c:c8:60:b8:b4:c0:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
Validity
Not Before: Mar 2 06:01:11 2026 GMT
Not After : Mar 3 06:01:11 2026 GMT
Subject: CN=17025a3fc50f3f428e68e8e70034d709205907fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:49:a5:15:d4:e7:eb:b5:81:b5:fe:7c:dd:9a:
71:41:5c:2c:15:93:da:84:92:db:53:40:94:e6:3f:
51:58:a7:a9:60:0f:69:de:72:dd:5a:48:46:68:28:
3d:29:98:62:f8:ce:f5:26:70:b7:cd:5e:92:a2:19:
28:13:0d:15:92:38:b9:04:fc:3e:1e:d1:16:d1:fd:
dc:68:16:c9:ad:b3:f6:d4:fb:99:4a:c1:76:8c:ff:
a0:02:69:3c:88:17:95:9e:c4:be:24:24:01:dd:e2:
ce:dd:f1:1f:8c:65:81:da:92:34:92:be:08:80:17:
28:02:2f:d4:57:b4:4d:58:96:de:72:c6:7c:b2:df:
9d:06:49:5a:64:11:fd:53:8b:f2:eb:c8:e6:14:0d:
be:f4:b3:f6:03:72:7d:88:1c:69:6b:0b:cb:03:eb:
fb:12:46:b6:6f:50:5f:a4:71:59:bf:60:e5:b5:d3:
33:23:fb:be:07:e7:39:a9:22:80:a5:dc:04:f7:f3:
50:a2:61:bb:7e:1d:2e:d9:23:c9:f8:90:48:c8:d6:
c1:76:71:4f:f3:58:07:28:94:53:31:33:91:f1:d4:
6a:ab:68:6e:64:35:c8:7b:a2:43:bc:31:cd:4b:17:
f9:8e:5b:fc:9b:11:91:4a:c7:32:1e:cc:a9:6c:6e:
0d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:02:5A:3F:C5:0F:3F:42:8E:68:E8:E7:00:34:D7:09:20:59:07:FB
X509v3 Authority Key Identifier:
keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:15:04:70:09:96:14:14:90:c4:a4:f3:6a:65:f2:04:70:5f:
d6:9e:d4:9e:bc:19:13:60:5b:32:c8:e1:88:dd:9c:df:a6:3b:
67:06:c9:70:04:49:d9:04:fc:53:42:4e:6e:81:f9:d1:2f:ea:
14:64:c8:68:c1:b9:56:dd:d2:7b:b5:f9:7f:1c:04:95:e8:f2:
10:ac:b8:f6:55:8d:82:53:24:0e:b6:17:c9:48:04:c8:41:cc:
be:8f:d5:43:19:20:fd:14:b0:67:74:8b:12:97:9b:09:fd:06:
aa:e2:6b:1e:50:30:60:03:f2:2a:cb:dd:26:1c:5b:20:38:78:
8f:4e:fa:d6:6f:28:51:57:31:ce:ef:d9:09:88:ab:a3:a1:50:
2a:bb:a7:74:16:98:5d:c6:a2:55:12:cf:da:ea:e3:1a:0d:1c:
cc:ec:7f:40:ff:de:9b:a4:cb:e4:be:b9:cd:f9:6b:cc:9a:49:
0d:85:05:78:92:79:90:f4:e6:d2:c2:db:63:e0:65:ca:73:30:
a2:df:c4:be:6f:e1:ae:0a:55:06:dc:d8:c8:ae:a2:54:89:e3:
d6:8c:8b:f6:3e:ed:c6:56:60:a1:2b:01:fc:a9:5b:02:31:7e:
c0:97:d1:d0:44:63:5e:7b:ce:8c:93:5a:59:1c:d2:e2:c6:49:
cb:31:64:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:23:33 2026 by rpki-client