Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier: RZijUt0BTQhaPldQUoh5XPCPQ7GBf1UKtU12lRYbl3A=
Subject key identifier: BB:6B:05:AE:6F:6B:E4:23:9B:ED:C3:D7:3F:2E:8D:00:BA:4A:8F:DE
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial: 019D37F76B7DAC6578170B946820E7D0C84E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number: 062F
Signing time: Sun 29 Mar 2026 05:00:54 +0000
Manifest this update: Sun 29 Mar 2026 05:00:54 +0000
Manifest next update: Mon 30 Mar 2026 05:00:54 +0000
Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: n6Oehr6nhnA1Wcbz+GXOBnfDW5T8fdjDN8WILLMafAw=)
2: z585MlMo7mSSr9Hk1ivV-63iY4Q.roa (hash: DZmssWKd0chIvnTRvKAN4jdqih24+ZhEvPT2Hj5FZkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:6b:7d:ac:65:78:17:0b:94:68:20:e7:d0:c8:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e109e278c7862254c88755e4717398a552a49040
Validity
Not Before: Mar 29 05:00:54 2026 GMT
Not After : Mar 30 05:00:54 2026 GMT
Subject: CN=bb6b05ae6f6be4239bedc3d73f2e8d00ba4a8fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5d:3a:7a:72:f7:63:1a:d4:71:88:52:48:87:
24:60:29:62:db:39:55:e3:f4:4f:1b:3d:c6:0b:6c:
9c:b9:be:55:f5:2c:45:b3:4f:6c:e0:31:de:79:17:
04:44:9c:75:2f:4a:e6:ca:38:58:be:80:c6:47:d5:
ae:29:08:b1:9d:22:4b:6e:9a:46:f2:b6:ea:5f:e7:
93:9a:0d:3b:6f:06:fb:58:52:72:34:a3:79:37:40:
43:3a:ba:b2:8f:72:7d:f7:82:db:00:8d:8d:07:25:
46:8c:62:a9:8b:53:40:f0:c4:d8:e3:fe:8e:28:72:
b5:2b:d6:cb:04:c5:59:09:96:a1:b0:df:c4:d4:28:
d0:cf:ba:9d:69:08:fb:bc:64:0f:c8:2f:e1:21:ee:
19:76:fc:68:91:bc:28:de:48:5c:8c:25:88:91:62:
4a:11:39:83:84:1f:d7:aa:f6:cd:36:7a:6a:34:47:
56:64:42:4b:fd:fa:91:51:a0:6f:58:b9:9a:14:46:
83:22:f6:53:43:20:59:67:f4:70:a9:b0:82:21:4c:
37:8c:18:f8:d9:8e:0c:e3:4c:49:27:62:dd:8d:55:
b7:07:16:90:16:3d:cb:5c:b2:63:ee:0f:90:4c:a0:
4f:ca:87:a4:93:e2:58:bf:2b:05:dc:ef:bb:26:7d:
35:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6B:05:AE:6F:6B:E4:23:9B:ED:C3:D7:3F:2E:8D:00:BA:4A:8F:DE
X509v3 Authority Key Identifier:
keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:e3:f8:1e:74:01:9e:8e:01:51:18:e5:5c:b1:15:13:d7:6b:
b8:2d:83:d1:69:b9:8e:1e:0b:0c:f7:af:9a:39:8c:b5:80:67:
43:40:0a:de:25:cf:b5:c7:c7:84:00:10:6f:f8:16:38:76:ef:
e7:c3:44:83:60:45:2b:f4:40:60:80:85:90:20:ce:62:26:46:
d2:c9:4d:25:bc:f2:ed:6e:c6:da:6c:eb:80:8d:01:2f:4c:cd:
cd:76:00:af:c7:78:f5:c0:ed:5e:29:f6:80:8a:47:75:0e:47:
ab:83:74:df:53:de:8a:82:be:f6:b4:4a:6d:e5:d0:81:86:5d:
d7:2e:b1:2f:bf:65:02:6d:17:c2:a3:59:a9:29:89:9d:60:e2:
94:76:ef:73:33:75:4f:f6:8f:5b:df:e2:77:9d:00:67:14:5f:
a5:e3:5e:52:a3:4d:39:7b:0f:e7:b5:79:8a:64:25:dd:58:00:
41:34:16:17:36:1e:f9:e7:57:12:cd:14:32:7f:05:6f:cc:b0:
36:1a:69:8e:18:df:7a:4b:79:ea:b7:bc:49:af:88:d1:e9:49:
4a:64:fc:7a:af:15:ed:00:5f:c3:89:c9:a6:03:ef:60:51:5b:
14:80:4c:a4:e6:46:60:93:9c:b6:66:33:28:c8:6c:67:45:39:
67:f2:8d:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0392t9rGV4FwuUaCDn0MhOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDllMjc4Yzc4NjIyNTRjODg3NTVlNDcxNzM5OGE1NTJh
NDkwNDAwHhcNMjYwMzI5MDUwMDU0WhcNMjYwMzMwMDUwMDU0WjAzMTEwLwYDVQQD
EyhiYjZiMDVhZTZmNmJlNDIzOWJlZGMzZDczZjJlOGQwMGJhNGE4ZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtF06enL3YxrUcYhSSIckYCli2zlV
4/RPGz3GC2ycub5V9SxFs09s4DHeeRcERJx1L0rmyjhYvoDGR9WuKQixnSJLbppG
8rbqX+eTmg07bwb7WFJyNKN5N0BDOrqyj3J994LbAI2NByVGjGKpi1NA8MTY4/6O
KHK1K9bLBMVZCZahsN/E1CjQz7qdaQj7vGQPyC/hIe4Zdvxokbwo3khcjCWIkWJK
ETmDhB/XqvbNNnpqNEdWZEJL/fqRUaBvWLmaFEaDIvZTQyBZZ/RwqbCCIUw3jBj4
2Y4M40xJJ2LdjVW3BxaQFj3LXLJj7g+QTKBPyoekk+JYvysF3O+7Jn01WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtrBa5va+Qjm+3D1z8ujQC6So/eMB8GA1UdIwQY
MBaAFOEJ4njHhiJUyIdV5HFzmKVSpJBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQt
MmYwM2UzMmJkMjFhLzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9lMDcyZDctODdjMC00YjczLTlhNGQtMmYwM2UzMmJkMjFh
LzEvNFFuaWVNZUdJbFRJaDFYa2NYT1lwVktra0VBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnOP4HnQB
no4BURjlXLEVE9druC2D0Wm5jh4LDPevmjmMtYBnQ0AK3iXPtcfHhAAQb/gWOHbv
58NEg2BFK/RAYICFkCDOYiZG0slNJbzy7W7G2mzrgI0BL0zNzXYAr8d49cDtXin2
gIpHdQ5Hq4N031PeioK+9rRKbeXQgYZd1y6xL79lAm0XwqNZqSmJnWDilHbvczN1
T/aPW9/id50AZxRfpeNeUqNNOXsP57V5imQl3VgAQTQWFzYe+edXEs0UMn8Fb8yw
Nhppjhjfekt56re8Sa+I0elJSmT8eq8V7QBfw4nJpgPvYFFbFIBMpOZGYJOctmYz
KMhsZ0U5Z/KNyQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:26 2026 by rpki-client