Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier: vD9YrsAJ7O0k5jL8GWwiFh9kxwMtECVLR6YUdULDr6Q=
Subject key identifier: 51:D9:52:58:33:44:EE:F7:3F:70:29:D3:4D:03:E1:82:50:B9:BF:72
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 019CAEDA1D91A21762140F69DA9B2E671CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number: 137B
Signing time: Mon 02 Mar 2026 14:00:55 +0000
Manifest this update: Mon 02 Mar 2026 14:00:55 +0000
Manifest next update: Tue 03 Mar 2026 14:00:55 +0000
Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: oH1QGWc9h/4r4scs8iuSrUwd5u5lgpSubFAkl/MblnU=)
2: NdV1685pUzzupc5kE5-ldMdSDxg.roa (hash: ueorjyehMNjdQkD1BLlElPr49sGyaBsEZXRjheGpYAA=)
3: ObqCC5ItaIb9zSaMr1gSLuQWW7g.roa (hash: z8qeiKJfszyHlpziW66XElBOILDVztPeTixCMaYCXnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:da:1d:91:a2:17:62:14:0f:69:da:9b:2e:67:1c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: Mar 2 14:00:55 2026 GMT
Not After : Mar 3 14:00:55 2026 GMT
Subject: CN=51d952583344eef73f7029d34d03e18250b9bf72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c3:96:e6:0a:57:22:9e:a4:8e:66:e6:c7:92:
c0:06:92:20:f0:26:e1:40:7b:78:04:ac:53:9e:84:
80:4a:b4:97:11:3c:80:9e:f1:e3:83:8f:d5:1b:24:
b0:4b:b4:56:d3:96:52:c6:36:c2:0d:bd:31:c1:ed:
8a:0a:f5:bd:14:de:fb:d6:0e:45:33:cf:09:7d:ad:
9f:8e:00:1c:8f:89:50:29:ad:24:d5:2e:57:78:f8:
68:89:45:c7:16:c6:e7:48:c1:6c:95:7e:32:7b:bd:
32:ab:81:d3:7a:f2:5d:9d:fc:41:70:11:8a:59:d9:
b0:6c:27:c2:26:57:8b:90:e9:c6:0b:27:bb:3e:d7:
3f:0d:51:71:36:06:55:41:a1:57:54:c6:82:ae:2d:
e0:0d:62:76:ec:4e:6f:ef:70:79:ba:7c:f7:7b:a0:
fd:dd:17:25:2d:d5:c9:bc:80:a5:02:ea:0b:2d:af:
32:1e:ec:59:e5:0a:83:a1:aa:12:f5:02:29:5c:0e:
f8:58:dd:4f:50:f0:1f:eb:0a:92:6b:1b:db:dc:17:
d0:10:1c:ed:f9:1a:f5:b3:0e:51:f3:67:38:ba:98:
09:e4:24:b8:f6:c8:ab:60:10:5b:59:e5:4c:2c:b0:
c6:52:e3:ea:be:f7:d1:53:fd:8f:35:05:de:8d:b2:
08:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D9:52:58:33:44:EE:F7:3F:70:29:D3:4D:03:E1:82:50:B9:BF:72
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:e9:50:f3:fe:7f:eb:db:c0:29:07:78:b9:48:51:05:50:6d:
a8:72:09:c3:61:9b:46:b2:7f:82:01:8f:7a:12:07:e0:8f:53:
c1:dd:11:28:36:0a:7c:14:f9:6c:b8:7c:5d:d1:6f:64:28:9e:
34:2c:fd:48:c8:e3:a4:d9:17:c0:05:d3:c7:c4:0b:94:32:fe:
8a:d4:ad:39:9c:ec:4b:b4:99:82:cf:9c:ee:b4:36:ec:df:5b:
2b:80:0c:94:6e:97:67:07:f1:64:2d:b2:03:9c:b6:da:7f:86:
e9:52:03:aa:07:ac:b1:a9:02:16:86:4d:c6:c4:14:40:04:30:
dc:21:c9:47:c6:e8:9d:76:07:ed:2d:be:16:30:90:cd:75:c8:
52:ef:90:13:b6:f3:61:33:74:f5:8d:90:d9:15:51:51:aa:16:
48:09:b5:bc:e9:79:a5:77:e7:63:5e:ac:79:eb:92:e9:19:e2:
57:35:8c:7c:d4:2d:d4:ec:81:f7:76:08:39:15:ca:8b:2c:21:
03:2d:76:18:30:9f:42:f8:dd:a2:b9:b0:e1:c9:7e:39:64:3c:
f2:8b:2f:6b:79:89:59:2a:1a:b5:23:12:3b:90:ff:de:00:7d:
87:e9:b7:34:e3:cc:2b:45:6d:a6:49:31:72:b0:00:e7:e7:69:
53:62:f2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:14:55 2026 by rpki-client