Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
File: _ZTgRMvlw1KV-rxEWALakFgTtzI.mft (raw, json)
Hash identifier: Tb670mOH/0sf3ThyNfPpLCvH0rE0gyy211KfNSB49DE=
Subject key identifier: 4A:B3:B9:61:D5:D3:F1:99:12:BA:53:80:B9:8C:DF:91:F5:70:1C:90
Authority key identifier: FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
Certificate issuer: /CN=fd94e044cbe5c35295fabc445802da905813b732
Certificate serial: 019CAC0FB9507FD21236F5038590158A604A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
Manifest number: 04A4
Signing time: Mon 02 Mar 2026 01:00:37 +0000
Manifest this update: Mon 02 Mar 2026 01:00:37 +0000
Manifest next update: Tue 03 Mar 2026 01:00:37 +0000
Files and hashes: 1: _ZTgRMvlw1KV-rxEWALakFgTtzI.crl (hash: 7YQJ5ceTF675FE76rSQ+3j0zyT+IuS2o8XNUGSYF2CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:b9:50:7f:d2:12:36:f5:03:85:90:15:8a:60:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd94e044cbe5c35295fabc445802da905813b732
Validity
Not Before: Mar 2 01:00:37 2026 GMT
Not After : Mar 3 01:00:37 2026 GMT
Subject: CN=4ab3b961d5d3f19912ba5380b98cdf91f5701c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:db:2d:0c:dc:7c:ea:d1:1a:32:1c:97:49:c3:
03:30:47:4b:c7:30:18:41:02:77:25:96:ff:b4:d5:
fe:38:4c:ce:bc:31:69:a5:55:eb:7e:3a:16:0a:b5:
44:04:5b:20:bb:80:e2:ea:26:77:b0:47:36:2a:f2:
ac:c7:22:62:ca:0a:49:58:35:73:e1:74:fc:85:2d:
25:77:ea:6c:31:90:c9:c7:ea:ca:c2:b8:9b:ae:d5:
f7:93:70:5c:34:64:d6:f2:08:f8:b9:5f:4c:60:85:
16:bc:33:50:9a:33:b4:18:a5:4c:7a:e1:61:d7:6d:
20:70:55:ab:ab:6b:4a:4e:69:61:0b:1c:7c:d3:c4:
37:74:e1:0b:02:2e:2b:3a:f9:c5:45:6d:5f:97:7b:
00:4c:ed:1e:38:ab:6c:2f:96:9b:df:f1:dc:84:8e:
43:dc:e0:30:65:c1:91:30:fe:6d:79:3d:d9:c5:14:
47:70:1d:1b:f3:38:7a:70:08:c0:44:15:e2:06:ce:
c5:9d:ee:24:4f:a7:57:aa:64:4c:c9:d2:e2:0a:52:
28:6b:a8:80:db:98:0b:fd:c9:fd:ea:a9:09:60:e9:
be:c4:f1:1f:33:f3:e3:d2:31:a2:f9:1c:a2:bb:e7:
94:94:6e:d0:b2:ef:bd:20:fb:ef:c4:eb:d1:17:d3:
b7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B3:B9:61:D5:D3:F1:99:12:BA:53:80:B9:8C:DF:91:F5:70:1C:90
X509v3 Authority Key Identifier:
keyid:FD:94:E0:44:CB:E5:C3:52:95:FA:BC:44:58:02:DA:90:58:13:B7:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZTgRMvlw1KV-rxEWALakFgTtzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9602a9-74b6-4992-b71d-bab247fe7d7c/1/_ZTgRMvlw1KV-rxEWALakFgTtzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:84:a9:cf:9d:03:ff:3f:18:0b:ce:f0:45:9e:fc:bd:72:b4:
8d:5c:72:2e:32:f2:60:44:93:ad:cc:31:73:ed:26:7f:21:c6:
47:00:68:77:07:b5:ac:30:b3:28:16:b9:1c:a5:2d:2b:08:d9:
bd:d7:ae:54:82:66:44:48:49:79:42:d4:d3:62:5e:82:8d:59:
f8:a8:6d:d6:e7:d4:08:aa:4d:ba:47:4f:96:dc:89:68:7b:a6:
f1:1e:4e:5f:24:9f:0e:13:3b:0c:39:a1:9a:8a:3f:f2:d7:5d:
2e:e6:1c:22:aa:c4:cc:33:ae:18:b6:bd:c9:df:29:53:74:2d:
ae:2a:1d:e3:61:ac:ae:58:32:35:40:3f:3a:74:ce:95:26:69:
8c:49:65:fb:f3:0f:b3:fc:04:87:44:24:1b:89:c7:c7:cb:e5:
42:9b:38:48:d1:a5:80:fa:36:c1:a9:87:ce:d1:21:e5:e2:80:
5e:e2:26:04:9e:0d:9b:23:a5:3c:7c:4b:55:ca:6a:36:48:fc:
0f:49:a4:7c:29:0c:0a:a8:e1:5a:38:43:e5:9e:1d:66:c2:72:
b2:aa:5c:e2:ce:51:b9:7b:49:1c:09:ec:8f:db:8e:ee:1e:8a:
d7:f3:4d:5e:67:da:ad:43:be:72:25:2b:ae:c8:a6:ba:25:6d:
bc:67:d8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:13 2026 by rpki-client