Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: RZd+LdVcZc/dBhuP87V3IzttcqbHXDvcKIlLpX1Exag=
Subject key identifier: 87:E3:D0:E9:E9:04:D4:BB:4C:2C:CA:32:22:74:71:F3:F0:D1:63:E3
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 019CADC7F3627C821F24F7632122225C18FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 1599
Signing time: Mon 02 Mar 2026 09:01:28 +0000
Manifest this update: Mon 02 Mar 2026 09:01:28 +0000
Manifest next update: Tue 03 Mar 2026 09:01:28 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: jG8KclZvNy3PZP1mMgbh9+X0SDV7KIH1fSkn19Xf2LY=)
2: eP9Zj4VtBHmGTmZV-BTJVgUUM2w.roa (hash: WYeB62ZsHbPuqTvSpxGwefGN+P372Umh9fLZQeEfJRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:f3:62:7c:82:1f:24:f7:63:21:22:22:5c:18:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Mar 2 09:01:28 2026 GMT
Not After : Mar 3 09:01:28 2026 GMT
Subject: CN=87e3d0e9e904d4bb4c2cca32227471f3f0d163e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:68:0d:99:78:d5:22:f0:0b:47:55:2d:d6:7e:
c6:0a:1d:74:fe:17:24:2c:0b:aa:51:c7:9d:cf:cc:
58:be:ce:19:c3:f7:73:00:ea:81:6f:00:97:33:bf:
07:89:11:e3:b6:7d:8c:5c:9b:4a:6b:d0:0f:63:6c:
7e:3a:c1:43:e4:76:43:40:4c:cd:0b:0c:28:09:88:
65:38:e4:d9:b6:11:a8:d5:94:b3:04:4c:2d:6f:a8:
65:2e:eb:bc:42:88:bd:4c:77:25:93:de:c0:c3:55:
45:bc:b6:47:a6:48:2b:77:6c:9f:e5:d3:3a:37:e1:
a8:34:36:32:94:cb:6c:7d:72:b6:81:a8:5b:95:06:
58:d5:64:8c:54:b9:e4:6b:29:05:04:ea:0e:fc:88:
8b:b3:31:10:65:e0:af:92:88:ce:f7:f4:b4:25:82:
6e:9f:e3:1c:a1:67:16:72:fd:97:97:77:28:83:30:
3e:4c:a6:17:28:19:65:58:43:05:6e:1f:9a:a8:aa:
52:8f:11:f2:5f:36:74:03:49:6a:39:e5:c4:5c:06:
d5:8f:5e:2b:a7:cf:89:ef:9f:76:88:15:03:f1:ca:
52:f9:48:4e:59:91:ef:96:51:e8:a9:86:83:b8:97:
fb:da:b2:bd:47:c2:40:b9:2c:e3:84:ce:de:ba:89:
a5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E3:D0:E9:E9:04:D4:BB:4C:2C:CA:32:22:74:71:F3:F0:D1:63:E3
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:86:e7:95:20:b4:17:06:a4:e3:a6:ce:83:ca:98:7e:7c:7c:
3e:8f:b4:d2:53:4c:57:d5:11:3d:e2:c8:d1:a7:44:94:67:53:
94:34:d3:98:5e:85:10:45:07:49:5c:2e:dc:6c:73:79:27:a6:
45:ed:14:14:9a:75:5c:2b:ca:89:56:58:21:de:17:78:6d:bc:
6c:95:2b:98:bb:4f:82:9d:4a:5c:f6:71:4e:47:bb:c4:cd:53:
92:04:9c:cd:01:87:6e:e4:2c:74:1b:74:a9:00:13:3e:41:f2:
02:c5:3d:09:9f:df:9f:da:7b:0e:de:18:fa:e0:03:3a:24:f0:
8c:fb:d8:bb:f5:fb:a6:89:e6:78:58:67:24:a5:54:7d:1b:a2:
f2:d5:8d:f1:e6:ef:69:4a:a7:7f:3a:b2:6b:c8:73:7e:62:2c:
c0:6d:56:f2:24:f2:2d:67:20:96:dd:e7:d7:17:f5:46:9d:33:
b9:a3:62:44:d9:ea:fd:5b:90:50:a8:4f:e4:b9:15:7f:e5:f3:
a3:4d:d1:11:80:48:da:16:90:14:26:8a:f2:1d:25:8d:26:8a:
2a:91:dc:c5:de:0d:94:8b:52:35:72:0b:7f:9e:79:ac:a9:1e:
4f:63:e7:cb:03:56:96:a0:af:2c:25:ff:84:5f:fa:81:c0:48:
a0:dc:b6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:12:00 2026 by rpki-client