Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
File: 4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json)
Hash identifier: KBBdIY9yGm2G8OxAFKRz5dRjP3weMMpcqLDlnt1Adho=
Subject key identifier: EF:9C:3E:27:7C:A2:86:FD:B4:8C:61:8C:16:94:1C:54:51:5C:45:9F
Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155
Certificate serial: 019CAF483892B2B6DFBDC5EAE7A1B572A448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
Manifest number: 02B5
Signing time: Mon 02 Mar 2026 16:01:11 +0000
Manifest this update: Mon 02 Mar 2026 16:01:11 +0000
Manifest next update: Tue 03 Mar 2026 16:01:11 +0000
Files and hashes: 1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: l2v7JV6z4TNkCvHvF+KepiwDdm0FovDgk2lWQVajuyE=)
2: EOa20siYhVvooEhEC-epku9D3Yo.roa (hash: CaHqewaEFsaPKRUAGEnwAKh1/0YdOwyqr30Vur/C7RQ=)
3: F-khUpYShoOhEncM3MZ3Y_Wm7h4.roa (hash: zuk3r9ZBjNWRUgr9lOJrcdso6ykt5/DxOmxhn65NsfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:38:92:b2:b6:df:bd:c5:ea:e7:a1:b5:72:a4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155
Validity
Not Before: Mar 2 16:01:11 2026 GMT
Not After : Mar 3 16:01:11 2026 GMT
Subject: CN=ef9c3e277ca286fdb48c618c16941c54515c459f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:ef:61:78:17:2b:f5:7a:12:f5:38:3a:ad:
66:c5:53:97:f2:3f:41:ee:73:59:90:9f:ac:53:8f:
18:2f:73:92:b4:30:54:c6:eb:5c:31:42:03:1e:c7:
d9:4a:e0:5e:48:5f:85:2e:60:4c:11:f1:67:de:3d:
9f:82:3b:f8:48:d8:d3:08:eb:fa:35:2c:f5:d9:77:
a9:0f:d0:f6:35:16:3e:6a:e2:c9:cf:18:d4:2e:11:
51:f0:c5:80:bd:f6:2d:31:a7:83:51:fb:82:a0:82:
e9:b4:09:83:2a:bb:68:a9:17:19:22:33:f0:ce:9b:
8d:f5:2d:6e:ce:bd:fa:9d:4a:9c:77:8c:b0:a8:c2:
06:a5:27:56:de:6c:f6:09:0f:c3:20:c9:87:82:91:
31:aa:26:cd:06:48:13:8e:cc:28:8b:28:f9:61:8e:
ec:05:fc:50:0d:6b:16:29:11:81:6f:a5:dc:26:f9:
d7:21:75:33:16:e1:91:a3:68:fd:80:e3:23:6c:18:
32:73:a0:84:ef:cd:fc:45:8c:33:5e:24:2b:ac:de:
00:3d:45:f6:76:e3:0c:0d:3e:17:ce:e0:cb:2c:8e:
55:18:f3:c3:b9:f3:94:85:fe:71:9d:ed:71:cd:05:
47:01:b5:8d:c8:40:2d:c1:04:11:14:db:8b:aa:22:
50:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9C:3E:27:7C:A2:86:FD:B4:8C:61:8C:16:94:1C:54:51:5C:45:9F
X509v3 Authority Key Identifier:
keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e2:36:05:15:96:8d:ce:b3:c4:8c:d1:53:9f:cc:a5:39:4c:
85:6e:27:5c:2e:8d:33:f9:dc:86:ab:2b:70:1e:de:f3:d0:1d:
d0:49:b7:9e:f7:50:4e:ee:e9:e4:3a:65:b5:46:3e:14:c3:75:
8b:b0:3a:ed:f4:49:be:e9:f0:01:93:b9:2a:92:0a:5b:d9:00:
30:c8:c5:d9:68:8c:a2:dc:f9:72:fe:53:cb:f3:3d:2a:36:bc:
2f:ec:30:f1:49:01:b2:63:6d:4c:58:5c:f8:42:e6:3d:9e:04:
18:73:25:28:62:3b:c4:57:a8:bd:ba:5f:d4:1b:f3:6f:ba:73:
8c:85:67:0c:21:a5:ae:ae:b0:c7:d1:44:9d:c8:aa:db:e7:de:
11:c2:29:34:d0:81:0c:ac:9c:ba:35:d6:d5:84:0d:24:cb:c1:
f0:35:5d:6b:38:9e:85:e0:21:70:ec:0e:dc:8a:57:aa:15:2b:
b4:69:60:0d:17:8a:9a:d6:9a:be:6a:72:45:c4:87:40:74:79:
b5:a9:45:0c:d1:84:49:f7:f0:1a:de:12:e8:7f:98:c8:3c:0f:
ec:04:9a:87:c8:b1:09:97:f0:fc:93:01:f3:36:76:6a:b1:c8:
05:a3:2d:b7:75:6f:94:b0:91:19:23:8b:75:22:8e:de:ef:e0:
c3:92:89:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:01:43 2026 by rpki-client