Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
File: 4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json)
Hash identifier: A5tx/7wzGLr2v2IGSdD5yBqW8bZ7ZgrYQw98q7nJPiE=
Subject key identifier: EB:6A:7D:42:B3:69:C7:E2:F1:57:01:40:72:BA:7B:9E:12:C2:97:A3
Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155
Certificate serial: 019DA678BBF3BD88DC1E4B39B8E76C3B7B64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
Manifest number: 0335
Signing time: Sun 19 Apr 2026 16:00:23 +0000
Manifest this update: Sun 19 Apr 2026 16:00:23 +0000
Manifest next update: Mon 20 Apr 2026 16:00:23 +0000
Files and hashes: 1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: T8sRC8vJKI4XxkrYOB9TxXTvWRulInP70MARPlRQGrg=)
2: EOa20siYhVvooEhEC-epku9D3Yo.roa (hash: CaHqewaEFsaPKRUAGEnwAKh1/0YdOwyqr30Vur/C7RQ=)
3: F-khUpYShoOhEncM3MZ3Y_Wm7h4.roa (hash: zuk3r9ZBjNWRUgr9lOJrcdso6ykt5/DxOmxhn65NsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 12:11:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:78:bb:f3:bd:88:dc:1e:4b:39:b8:e7:6c:3b:7b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155
Validity
Not Before: Apr 19 16:00:23 2026 GMT
Not After : Apr 20 16:00:23 2026 GMT
Subject: CN=eb6a7d42b369c7e2f157014072ba7b9e12c297a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:37:79:a9:fa:5b:af:63:d3:47:a3:cb:ba:a6:
9e:a3:fe:c6:ab:e4:25:2e:7c:32:12:25:ba:4d:95:
4e:32:5f:53:6e:54:76:29:e1:95:43:93:4b:74:00:
ed:4c:0f:6c:a1:33:0b:64:1f:8f:23:21:74:ab:9f:
c4:ee:ad:98:61:0c:e6:05:98:b9:8d:d1:6b:34:1c:
ca:0c:d7:4b:ab:00:ab:44:9f:40:62:15:cc:57:9b:
23:49:ce:64:70:a8:fc:be:ae:a5:07:d4:47:a6:f0:
bc:cb:7b:1f:12:11:d4:e8:42:94:97:f6:6a:43:57:
5e:4f:39:89:82:5d:79:d2:72:44:78:aa:01:75:bc:
17:56:b2:12:1e:f2:b9:6a:52:d6:c7:80:37:e2:5e:
15:3b:46:33:64:90:31:47:09:d7:15:2d:f7:6e:ec:
79:40:13:bc:95:35:dc:1f:51:cd:cd:b9:b2:55:24:
16:36:fb:6c:a9:d6:c5:c6:71:3c:33:18:57:b6:a7:
df:4a:ca:3e:ae:39:dd:68:cf:a1:57:d2:be:c1:c9:
8a:5f:3b:24:04:28:3c:d6:a8:b7:37:2d:7f:3f:39:
d2:bf:00:96:29:65:91:b0:f1:a7:e6:66:cf:e9:cc:
8f:d8:fd:33:79:75:5d:d5:a2:a1:39:3b:c8:bc:9a:
c8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:6A:7D:42:B3:69:C7:E2:F1:57:01:40:72:BA:7B:9E:12:C2:97:A3
X509v3 Authority Key Identifier:
keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:77:82:fe:b1:e8:42:db:3f:70:5a:c4:b9:ed:49:47:ba:58:
cb:dd:a6:e9:ce:07:88:c4:a0:28:4b:87:1c:88:1a:1d:82:a4:
5a:60:e2:11:54:6f:3e:5c:1a:98:79:10:02:60:ef:ba:e9:ee:
1c:72:7a:e8:0e:59:0d:9b:ba:fc:8d:fa:9d:37:ed:4f:44:f0:
5f:43:33:e9:f2:7a:a4:2c:e0:ae:01:1f:7c:d7:7c:71:1d:09:
90:58:d9:8c:10:06:98:3f:15:a0:92:c8:5b:4c:09:8b:71:be:
8e:41:94:ca:a9:5d:97:94:49:5d:42:42:bf:53:58:f0:da:91:
57:7d:19:8f:bc:2e:67:e4:65:f5:7b:e2:f5:97:0c:a7:af:77:
01:20:db:9c:28:27:b0:07:56:bd:ba:53:90:b4:2f:1f:62:65:
7e:5c:c7:0c:1d:e7:26:bf:92:eb:1a:89:7c:77:bb:95:10:10:
50:d4:97:f5:d3:13:e3:e1:a1:6e:cc:53:a0:d9:00:ec:c0:74:
da:55:89:05:6a:b0:36:f2:29:f3:0d:07:16:8c:0c:4a:ce:93:
f1:43:c7:1c:6f:2f:b2:e0:6b:02:80:51:da:ed:e3:9c:b0:8d:
a7:22:46:0e:ea:14:38:35:24:f4:bf:0b:8a:a4:e7:1c:d6:6e:
d5:04:6c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 21:03:59 2026 by rpki-client