Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
File: 4MZJtmoZ2i_sI2sEndEioO82iw8.mft (raw, json)
Hash identifier: /FG2XQ7YrmDvpP1HNtKDiQfAz0gmD/FKdLfUv3DQXxQ=
Subject key identifier: 50:9A:1C:4B:56:81:99:28:F4:B9:95:65:5A:52:8D:70:C9:43:0F:77
Authority key identifier: E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
Certificate issuer: /CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Certificate serial: 019CA8A0CFD0ABB988A389EF66C3641C328A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
Manifest number: 0135
Signing time: Sun 01 Mar 2026 09:00:36 +0000
Manifest this update: Sun 01 Mar 2026 09:00:36 +0000
Manifest next update: Mon 02 Mar 2026 09:00:36 +0000
Files and hashes: 1: 4MZJtmoZ2i_sI2sEndEioO82iw8.crl (hash: YKTpcYbTJoSKZ4N3Riwv2cRSVada0FAWp/Ugj2woLIM=)
2: INwAC_jNS7HwUjq0ta-X62KVJno.asa (hash: 0iRDupFn1+ZlmDKitgIiV/zTNurv4zOW9wtdEQ3dQhc=)
3: iQFBjQMYNTTJ2jk6e5feOS_a39s.roa (hash: GqVM6J5PfB8C9Ws9x090WHFvEBb+mt5HYBg+7QoW2vE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:a0:cf:d0:ab:b9:88:a3:89:ef:66:c3:64:1c:32:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c649b66a19da2fec236b049dd122a0ef368b0f
Validity
Not Before: Mar 1 09:00:36 2026 GMT
Not After : Mar 2 09:00:36 2026 GMT
Subject: CN=509a1c4b56819928f4b995655a528d70c9430f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:90:0a:ca:27:9c:43:24:17:d1:ca:34:a6:
db:ce:52:16:da:4f:ed:43:e6:b5:62:11:be:ed:21:
be:12:72:5d:4e:25:4a:c9:ee:f2:2e:13:ea:af:83:
7b:c8:e9:2d:fc:ae:3c:30:30:38:81:3a:d6:a7:0f:
67:0d:07:c9:35:00:0a:5f:20:47:4e:f2:87:e4:e7:
2f:c7:08:99:fc:23:7a:0e:d6:69:d4:3f:66:1d:f5:
0d:0a:db:38:10:98:dc:2f:69:e4:ff:14:cd:67:f3:
fb:ca:55:b5:42:64:a1:06:4d:d5:db:8a:ff:6a:b4:
7a:4c:b5:f4:ec:92:8d:bd:20:3f:a7:d0:6d:95:11:
17:82:26:c5:fa:0d:e3:d3:8f:6e:43:91:f8:03:4e:
93:a3:0d:80:7f:0e:0e:a1:e6:44:9f:f2:ba:67:12:
4d:0e:ce:58:40:89:44:70:22:21:97:74:b7:41:f1:
66:b7:f6:69:93:2d:f6:d5:2d:82:d3:37:15:76:b4:
67:f2:1a:da:92:61:a4:7c:97:02:73:ce:d2:2a:ca:
54:84:5d:05:66:71:b8:68:da:de:90:dd:61:18:9f:
12:c3:19:de:f9:40:d0:dd:2f:85:3d:46:40:66:16:
2e:62:2e:ce:18:a8:80:c6:68:fa:cf:a1:e4:41:a2:
b1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9A:1C:4B:56:81:99:28:F4:B9:95:65:5A:52:8D:70:C9:43:0F:77
X509v3 Authority Key Identifier:
keyid:E0:C6:49:B6:6A:19:DA:2F:EC:23:6B:04:9D:D1:22:A0:EF:36:8B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MZJtmoZ2i_sI2sEndEioO82iw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/cb8f7c-c8bf-4342-826c-8f544847be74/1/4MZJtmoZ2i_sI2sEndEioO82iw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9a:36:94:13:d6:95:f0:3d:04:4a:3d:3d:b2:c5:d7:7c:f4:
6c:17:9a:59:0a:ad:5e:a4:5a:e7:e5:e4:b1:a4:34:36:5c:0b:
c8:5c:2d:4f:5a:f9:e0:34:cf:31:a8:ec:a3:e7:35:e5:9c:1a:
90:58:80:87:42:a1:2f:2c:2d:7d:0f:77:a0:2d:1d:07:fc:34:
e9:b1:82:72:10:79:58:04:e7:34:f0:bb:96:d6:a9:1f:72:fd:
00:5a:35:1f:08:66:10:6d:34:46:2b:0d:f8:31:40:11:24:b9:
15:e9:9a:0b:4c:a5:17:7f:d7:48:1b:91:38:f1:57:c1:c1:5d:
98:30:18:d2:53:37:7d:34:2f:fe:1d:cd:8e:3a:e1:77:01:14:
90:af:f1:75:12:e6:d5:1f:96:7e:f1:79:be:0d:d8:20:a8:f4:
6f:e1:5d:8b:20:fa:9e:21:c6:91:d6:41:11:17:b8:f0:5c:2e:
3d:e9:34:17:88:c4:e7:98:39:82:f1:ed:20:e7:26:1b:35:11:
ba:4a:32:78:53:03:5c:2f:02:04:8a:de:91:f8:24:a7:cd:48:
b2:5a:e7:3b:ee:5f:50:de:71:76:af:0a:38:36:fd:1a:ae:3b:
95:f6:84:87:9a:1b:e5:6d:ac:43:06:14:90:2c:e2:c9:69:23:
8d:6a:06:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:12 2026 by rpki-client