Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier: w9UdnXKwN/Jw1OAyN/tO1ULjkpoutyZN1NbaUfviXD4=
Subject key identifier: 51:53:90:D3:79:6D:B5:C4:7A:A9:18:BB:8F:08:77:7E:52:8E:88:87
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 019CABA2654E4B339E2790EC39FD9188655A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:01:12 +0000
Manifest this update: Sun 01 Mar 2026 23:01:12 +0000
Manifest next update: Mon 02 Mar 2026 23:01:12 +0000
Files and hashes: 1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: ULBltEveaEKH83jB/cPh2xy44Z+Ii5+QIYlVEfKKrEQ=)
2: WIclx685icB5o3UOREAKLFzzP34.roa (hash: uDpM1rHiGL2CuGW9o80RIXGPENrx4ls410ovEwWq5XE=)
3: hCTpwVd8i1hPStdoLxWMzM8N_TE.roa (hash: ihYHu1XwJ3avyhb/XoPHgm87ZbqnGY5kgmNHjUUXafY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:65:4e:4b:33:9e:27:90:ec:39:fd:91:88:65:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Mar 1 23:01:12 2026 GMT
Not After : Mar 2 23:01:12 2026 GMT
Subject: CN=515390d3796db5c47aa918bb8f08777e528e8887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b1:10:a1:41:2d:cb:b5:2d:ca:4e:9a:39:dc:
53:08:68:82:d3:f8:71:1a:46:4d:38:e1:38:3b:4d:
72:b3:23:5d:23:e1:2e:09:e0:88:e7:60:c2:40:38:
54:00:59:85:07:30:b7:42:f1:79:7e:9c:c7:dc:10:
ca:db:1f:1d:3d:db:29:7d:14:8a:42:8c:c2:33:4c:
d8:df:bb:c7:29:4b:f6:8b:91:ac:83:01:f5:25:39:
00:28:73:e2:a1:95:19:e2:6f:03:72:93:8d:b4:7c:
15:71:b4:41:69:85:f4:00:00:08:c6:c7:ee:b0:c7:
46:88:a4:fc:94:a5:74:db:c9:94:4d:92:09:0a:f7:
4e:76:bc:1d:59:22:77:b4:0f:96:3f:a8:1a:00:77:
57:99:31:3d:b3:a1:0f:60:c8:1d:e7:76:36:91:76:
42:29:04:48:cd:15:28:fc:e6:61:88:72:6b:db:0c:
95:63:d1:1a:8c:00:b0:4e:8f:66:cb:1b:a1:97:c6:
2b:11:fe:4b:91:92:97:e6:14:47:7e:94:df:cc:f8:
cc:06:d1:68:67:a9:46:2b:e5:c7:0f:38:8d:61:30:
ca:9c:b9:73:29:37:ce:58:92:45:31:5d:08:e5:36:
ed:c7:f2:be:ea:45:a3:0a:4e:8e:51:17:4d:19:07:
22:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:53:90:D3:79:6D:B5:C4:7A:A9:18:BB:8F:08:77:7E:52:8E:88:87
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:8a:33:58:ba:5e:6b:fb:8d:fb:3e:c5:3b:88:f2:55:bf:38:
03:41:91:a7:72:91:be:f9:90:b4:45:1e:00:b3:67:91:7c:43:
89:13:32:c3:f7:99:bd:6e:11:3d:c2:35:26:93:7f:00:1f:b3:
58:d9:74:f1:93:0b:f2:65:43:bd:b9:63:bd:43:dd:3b:e1:c4:
7d:1f:40:18:20:7d:6c:d8:40:09:30:36:6b:f3:4b:6e:aa:5d:
72:ae:d1:bd:9e:9f:b2:db:52:82:3e:9f:ed:66:da:69:db:77:
da:1c:de:cb:ca:e3:00:90:85:1b:1a:00:69:2a:cd:b6:9a:20:
92:2a:ca:be:5a:f8:06:af:8a:fc:8d:57:a3:5c:ab:dd:a2:56:
3f:4c:15:06:0a:37:15:75:c2:0e:27:f4:00:04:d8:8f:41:e0:
4f:56:46:f9:22:93:b3:ef:16:c5:2b:38:71:a1:31:81:d8:02:
a2:e8:64:ee:dd:1b:f5:7b:a0:e9:a3:0f:17:29:2c:18:28:ab:
57:a0:9e:5a:20:5e:57:d5:7e:ad:15:a8:ca:55:a8:7a:5e:60:
4c:4b:d5:05:c8:73:36:98:d0:a2:dd:f5:4f:bb:e4:81:d6:a3:
df:61:52:d1:99:84:6a:b5:5b:ef:24:f2:2f:30:49:ac:6c:9e:
60:35:36:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:49 2026 by rpki-client