Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier: gpOiBiNIGsGHJtgC2h6i0CBTrklqKlRVSb+zpO/ZmlM=
Subject key identifier: 90:84:58:4F:0E:CB:18:ED:E5:32:5F:C0:2A:79:21:43:A5:91:92:85
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer: /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial: 019D37F7014CB65C5452953E8CD7026DC801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number: 0871
Signing time: Sun 29 Mar 2026 05:00:27 +0000
Manifest this update: Sun 29 Mar 2026 05:00:27 +0000
Manifest next update: Mon 30 Mar 2026 05:00:27 +0000
Files and hashes: 1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: tNghQije5uYPFyZgNGd4vgUmXHof6CnUg/f/rFgU+wo=)
2: gVfdWm0UhTm-_kYhCxfI_PPh9pQ.roa (hash: KPBhQabvMXA3ivJ7vLYo7qGQjlOgp6mXdXBE/OSlu9M=)
3: wZ9RkRMpZ0zSJRETkyLZujvEe_A.roa (hash: 8sVpKy5s2khImy6cMRVFY6mSlDYqhzQpPN1YY16omwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:01:4c:b6:5c:54:52:95:3e:8c:d7:02:6d:c8:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Validity
Not Before: Mar 29 05:00:27 2026 GMT
Not After : Mar 30 05:00:27 2026 GMT
Subject: CN=9084584f0ecb18ede5325fc02a792143a5919285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:0d:bd:3e:14:fb:0f:40:34:fb:ea:3e:b6:
9b:80:3b:eb:34:a2:88:ef:b9:6a:0c:58:9e:da:c0:
1f:2d:42:33:11:66:ff:b6:6e:c3:f8:43:d1:e4:0e:
a1:41:84:59:37:c7:49:74:d3:42:fb:ac:66:40:93:
e8:e9:39:00:c3:ae:cf:17:db:2f:c5:4f:da:47:03:
f4:30:99:d1:51:ac:46:cd:1b:7f:11:5b:9b:ce:3e:
99:79:39:14:31:25:c7:cb:26:22:52:36:0f:5b:98:
19:6a:67:7d:3d:10:01:f1:31:40:5c:ac:aa:80:f1:
dd:6e:1d:24:b9:30:ed:e0:2c:ad:3e:2a:39:15:11:
10:ac:e1:db:64:fe:d4:45:25:cc:8d:c4:81:74:3e:
16:37:87:32:d3:7e:37:da:f4:63:36:71:cc:cd:34:
80:54:54:00:9e:c8:91:69:f4:4c:10:30:94:6b:fa:
51:05:a0:86:bd:16:15:e4:16:bb:69:b2:d6:a7:55:
0f:03:8e:c3:c3:cd:79:a8:59:1a:c9:7e:c3:53:43:
cb:1d:97:39:2b:dd:9b:11:a0:34:16:89:04:81:07:
0a:25:17:97:46:38:d8:77:ce:a4:b3:2f:3e:bc:77:
a2:41:1f:42:84:27:59:a5:8b:ef:f8:b2:ce:2d:3a:
01:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:84:58:4F:0E:CB:18:ED:E5:32:5F:C0:2A:79:21:43:A5:91:92:85
X509v3 Authority Key Identifier:
keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:aa:02:3a:79:3f:c4:11:69:18:c9:cc:bd:d8:29:ec:1b:f9:
b2:56:0c:81:02:2c:77:a3:a2:9c:9a:e0:c0:7a:a7:22:1b:c9:
9b:77:c8:70:cc:34:c3:62:bb:9f:b0:84:67:10:b1:73:7a:dc:
c7:ab:d0:e5:81:4e:8e:54:9a:a0:b8:f5:05:a0:16:4b:85:73:
0e:44:56:db:c0:3f:1f:57:38:82:33:ec:ff:0d:42:68:80:7e:
fe:c3:f7:ff:fb:60:64:21:ce:34:9c:03:7f:80:4a:6c:2f:be:
c8:22:cd:67:53:bb:fd:92:d2:5a:0a:6a:92:4f:1e:e2:a5:56:
09:fe:2b:ed:58:9a:ea:5e:18:6f:8c:ff:c0:22:1a:6c:20:1e:
2f:f4:ae:20:d3:5b:f0:ff:4e:f2:9f:f7:1a:88:6a:08:fb:f6:
d0:f0:29:a6:a5:c8:26:82:00:b4:51:67:0f:68:a4:11:4c:9a:
d0:cf:3f:e2:c0:fe:bf:06:63:96:be:44:d3:2b:30:e4:00:84:
5f:04:3c:90:e0:83:4e:82:91:41:82:c0:2f:3b:1d:ac:08:ee:
b9:1b:08:53:53:61:a0:46:99:3b:d3:da:79:a7:c8:13:81:28:
bf:03:c0:da:92:d2:01:65:74:ea:64:cb:fc:82:fc:52:e2:85:
c1:32:03:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039wFMtlxUUpU+jNcCbcgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWYzNjU2YzZlZDlhM2Y5YTQyYzY3OGE3OGEyZTM3NGY4
ZTU3ZDMwHhcNMjYwMzI5MDUwMDI3WhcNMjYwMzMwMDUwMDI3WjAzMTEwLwYDVQQD
Eyg5MDg0NTg0ZjBlY2IxOGVkZTUzMjVmYzAyYTc5MjE0M2E1OTE5Mjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAracNvT4U+w9ANPvqPrabgDvrNKKI
77lqDFie2sAfLUIzEWb/tm7D+EPR5A6hQYRZN8dJdNNC+6xmQJPo6TkAw67PF9sv
xU/aRwP0MJnRUaxGzRt/EVubzj6ZeTkUMSXHyyYiUjYPW5gZamd9PRAB8TFAXKyq
gPHdbh0kuTDt4CytPio5FREQrOHbZP7URSXMjcSBdD4WN4cy03432vRjNnHMzTSA
VFQAnsiRafRMEDCUa/pRBaCGvRYV5Ba7abLWp1UPA47Dw815qFkayX7DU0PLHZc5
K92bEaA0FokEgQcKJReXRjjYd86ksy8+vHeiQR9ChCdZpYvv+LLOLToB2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCEWE8Oyxjt5TJfwCp5IUOlkZKFMB8GA1UdIwQY
MBaAFOMfNlbG7Zo/mkLGeKeKLjdPjlfTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUt
ZTczM2MyNjJhMzgyLzEvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8wMmY4YTEtMzM4My00ZDIxLWFhMjUtZTczM2MyNjJhMzgy
LzEvNHg4MlZzYnRtai1hUXNaNHA0b3VOMC1PVjlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAaoCOnk/
xBFpGMnMvdgp7Bv5slYMgQIsd6OinJrgwHqnIhvJm3fIcMw0w2K7n7CEZxCxc3rc
x6vQ5YFOjlSaoLj1BaAWS4VzDkRW28A/H1c4gjPs/w1CaIB+/sP3//tgZCHONJwD
f4BKbC++yCLNZ1O7/ZLSWgpqkk8e4qVWCf4r7Via6l4Yb4z/wCIabCAeL/SuINNb
8P9O8p/3GohqCPv20PAppqXIJoIAtFFnD2ikEUya0M8/4sD+vwZjlr5E0ysw5ACE
XwQ8kOCDToKRQYLALzsdrAjuuRsIU1NhoEaZO9PaeafIE4EovwPA2pLSAWV06mTL
/IL8UuKFwTIDxg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:03 2026 by rpki-client