Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
File: a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json)
Hash identifier: tqWUTc2xayIM6i4I1hgWHgPGf7iF9+TH5g7YV5uekOY=
Subject key identifier: 70:DD:4A:79:38:46:FC:77:4C:BD:6E:8D:E2:7D:1B:99:FA:DF:B9:F2
Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
Certificate issuer: /CN=6b83d9281a7a508abfc495304ae99c98c042c611
Certificate serial: 019CAC0FAAB15C51BA69955AD7CF7BB53F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
Manifest number: 17D6
Signing time: Mon 02 Mar 2026 01:00:33 +0000
Manifest this update: Mon 02 Mar 2026 01:00:33 +0000
Manifest next update: Tue 03 Mar 2026 01:00:33 +0000
Files and hashes: 1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: BxOz+PaCAgt1+n1zB08zP6rbp6n61UYtvktFIjTwYyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:aa:b1:5c:51:ba:69:95:5a:d7:cf:7b:b5:3f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611
Validity
Not Before: Mar 2 01:00:33 2026 GMT
Not After : Mar 3 01:00:33 2026 GMT
Subject: CN=70dd4a793846fc774cbd6e8de27d1b99fadfb9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b7:64:7b:b4:88:dd:57:27:ba:67:12:c6:3d:
a3:c9:96:ee:00:c5:25:ed:10:ff:eb:82:e9:63:fa:
62:eb:cb:13:80:8f:76:82:4e:b2:84:03:89:1c:c2:
75:32:65:92:e9:ec:b0:7b:34:b0:3a:e1:5c:da:6f:
f5:9e:b9:65:ff:2f:55:bc:4e:bb:9e:ed:10:54:05:
d5:37:2e:ab:33:1c:5b:92:e3:99:df:b9:f6:33:e6:
9a:f1:00:18:c7:d1:26:45:0c:e2:bf:51:93:7a:27:
98:13:75:09:00:13:78:fa:50:14:9f:52:98:0a:37:
a1:bd:15:f9:64:36:82:10:77:b4:08:7f:4d:90:05:
aa:38:83:8d:7e:62:0a:49:72:02:a3:21:77:6f:51:
50:3d:e5:be:e8:54:c4:82:84:9b:8c:0c:a3:1f:5f:
d8:78:be:9a:a7:60:ea:bb:f9:7c:07:89:d4:0f:43:
82:17:94:79:99:76:0f:b2:f5:66:dc:49:f5:72:8b:
4f:21:61:a4:1f:20:50:02:5b:bf:99:e1:43:e6:b0:
d3:7a:e0:ce:42:f5:2b:04:f5:5a:6a:6c:43:7c:5a:
cc:07:ec:40:2d:48:59:d6:62:c1:54:7f:ae:ac:81:
80:08:f8:a6:7a:23:8c:4c:af:86:b4:4c:a9:a6:93:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DD:4A:79:38:46:FC:77:4C:BD:6E:8D:E2:7D:1B:99:FA:DF:B9:F2
X509v3 Authority Key Identifier:
keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e2:0b:e9:c1:15:0e:fd:6d:2b:8d:03:d8:a5:b0:e3:43:2f:
62:f2:a0:6e:57:4d:ef:56:aa:2e:c4:8d:91:e1:be:bb:90:82:
d6:2d:62:cc:25:3e:dc:8f:d8:9f:6d:d6:41:7c:98:f7:64:a8:
7c:c6:b5:fa:14:e1:e1:2d:b3:c0:2e:6b:bc:31:c3:59:fa:f8:
3d:19:8a:c5:5f:0b:99:36:07:37:f3:b2:de:7f:59:a3:31:d3:
60:d5:9a:0f:da:97:d6:11:91:5a:32:02:77:50:3b:ee:59:6f:
44:a6:a8:a8:0f:48:4e:9e:8a:96:36:10:1c:06:c0:97:33:44:
83:d0:30:34:25:f7:7e:8f:74:3a:79:69:17:65:be:12:56:76:
f2:76:fc:e7:28:50:7f:f3:41:7f:1a:ca:8a:4e:a4:2f:fd:71:
53:d4:1b:3f:a9:1c:08:14:a8:9e:38:e4:c1:3c:18:4d:28:ef:
50:70:ce:a9:a5:c3:1a:7c:78:79:85:03:dd:b2:61:4d:68:8e:
6f:db:d2:75:63:ac:03:39:d0:09:14:3e:41:30:b5:99:08:c1:
7d:1a:41:73:5d:5d:8a:cf:b9:90:43:bc:3b:5e:f8:7c:3b:cb:
1e:51:ac:a6:be:35:6e:38:ff:19:bd:3d:e0:fc:c9:9e:96:70:
4c:17:76:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:16 2026 by rpki-client