Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft
File: 4xw9EfQ8dCp9AIVC3079O7ANLXc.mft (raw, json)
Hash identifier: CXGzd9KH8I8+tqVdXgVFpVUFmLccueR+gEm60fPMs+M=
Subject key identifier: 70:4F:83:47:6E:A5:7C:E1:87:D6:89:48:9B:E4:36:07:C9:C2:EC:7C
Authority key identifier: E3:1C:3D:11:F4:3C:74:2A:7D:00:85:42:DF:4E:FD:3B:B0:0D:2D:77
Certificate issuer: /CN=e31c3d11f43c742a7d008542df4efd3bb00d2d77
Certificate serial: 019D38D2BD5B1BF328AA704FB013286874D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft
Manifest number: 017F
Signing time: Sun 29 Mar 2026 09:00:28 +0000
Manifest this update: Sun 29 Mar 2026 09:00:28 +0000
Manifest next update: Mon 30 Mar 2026 09:00:28 +0000
Files and hashes: 1: 4xw9EfQ8dCp9AIVC3079O7ANLXc.crl (hash: usDJqtgV9RnKhqeQbvMabtHcbW0G5joqVGiX6d1ALN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:bd:5b:1b:f3:28:aa:70:4f:b0:13:28:68:74:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c3d11f43c742a7d008542df4efd3bb00d2d77
Validity
Not Before: Mar 29 09:00:28 2026 GMT
Not After : Mar 30 09:00:28 2026 GMT
Subject: CN=704f83476ea57ce187d689489be43607c9c2ec7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6d:62:67:d9:e8:cc:4b:7d:01:d0:39:ed:ee:
e6:83:85:51:1a:d6:68:b8:d8:75:6c:52:a1:60:8b:
0e:28:c8:13:26:50:ed:5c:40:55:e0:2d:54:54:bb:
58:8c:0c:a2:1a:36:6e:ec:17:eb:80:f9:88:f7:03:
9b:7e:0d:c6:b7:24:82:c5:ae:11:43:9f:d5:13:cc:
ca:c6:43:45:e5:d6:5c:80:90:de:a7:c2:df:fb:4a:
4d:a3:f6:6a:62:2c:68:6d:ed:fd:4f:1d:06:71:b5:
1b:87:f9:c4:5a:00:e8:2e:a8:78:af:6c:be:f5:b4:
4f:50:89:58:e6:c0:01:c6:4f:7d:ac:e8:8d:d0:6f:
34:9c:e0:d2:a0:9a:52:00:dc:78:87:49:3f:2e:07:
e4:5d:2e:6e:4c:f4:cd:eb:06:5b:ec:4c:76:d7:06:
59:b6:15:5a:c9:51:02:eb:9f:c8:f5:2e:3e:2a:1e:
a5:1e:b9:3d:ca:e3:15:4e:b5:ef:c6:df:ae:70:61:
78:84:d2:ca:e9:1f:19:ff:e2:a0:82:da:d0:37:60:
ed:08:3d:a4:c6:78:8c:66:3c:78:01:04:72:2e:b9:
50:99:ee:fc:38:30:93:18:8c:00:01:74:d4:41:12:
ef:f2:a1:fb:a6:6c:0f:6e:7a:8c:24:9d:90:54:f2:
f2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:4F:83:47:6E:A5:7C:E1:87:D6:89:48:9B:E4:36:07:C9:C2:EC:7C
X509v3 Authority Key Identifier:
keyid:E3:1C:3D:11:F4:3C:74:2A:7D:00:85:42:DF:4E:FD:3B:B0:0D:2D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:8b:08:fe:8c:81:74:47:36:9b:70:84:45:2b:89:81:07:96:
46:c7:0b:f3:0e:c1:fb:05:dd:a3:71:e4:e0:cc:ca:d5:d3:30:
fa:7b:14:7a:0f:55:a7:87:8c:ab:a1:83:31:8d:5f:76:7c:63:
5d:ea:d7:74:6a:7f:e4:ee:29:18:46:3f:f4:1c:41:5a:c0:72:
d9:41:b3:ea:c2:88:3b:70:91:7a:6d:b3:d5:6d:ff:76:e0:c0:
35:76:a6:0c:a5:64:72:b1:9e:01:8a:13:04:bb:31:34:9f:0a:
6d:49:9e:ea:03:6b:73:c1:2a:35:5c:e1:51:3b:68:23:e1:e5:
02:40:d8:71:04:db:1c:7c:51:b2:25:8b:a9:51:35:b1:ae:ae:
6e:d8:f5:2a:39:c6:02:23:f4:55:63:28:53:9a:a9:1f:81:d8:
b9:bf:60:a1:2e:9a:26:84:98:45:63:74:8f:95:82:59:61:d3:
c4:68:dd:27:24:94:81:b2:9a:a8:dd:89:36:b6:f7:38:dd:69:
4c:41:bb:56:44:25:21:51:5a:5d:be:0d:86:9f:b4:ef:c8:5c:
3d:16:4e:4c:27:36:ad:0c:f0:bf:5d:9c:e1:93:d0:28:f2:ed:
19:2e:46:00:d8:c7:4e:5b:88:2b:03:81:3d:ae:e6:ca:7c:da:
c5:29:a0:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040r1bG/MoqnBPsBMoaHTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMWMzZDExZjQzYzc0MmE3ZDAwODU0MmRmNGVmZDNiYjAw
ZDJkNzcwHhcNMjYwMzI5MDkwMDI4WhcNMjYwMzMwMDkwMDI4WjAzMTEwLwYDVQQD
Eyg3MDRmODM0NzZlYTU3Y2UxODdkNjg5NDg5YmU0MzYwN2M5YzJlYzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W1iZ9nozEt9AdA57e7mg4VRGtZo
uNh1bFKhYIsOKMgTJlDtXEBV4C1UVLtYjAyiGjZu7BfrgPmI9wObfg3GtySCxa4R
Q5/VE8zKxkNF5dZcgJDep8Lf+0pNo/ZqYixobe39Tx0GcbUbh/nEWgDoLqh4r2y+
9bRPUIlY5sABxk99rOiN0G80nODSoJpSANx4h0k/LgfkXS5uTPTN6wZb7Ex21wZZ
thVayVEC65/I9S4+Kh6lHrk9yuMVTrXvxt+ucGF4hNLK6R8Z/+KggtrQN2DtCD2k
xniMZjx4AQRyLrlQme78ODCTGIwAAXTUQRLv8qH7pmwPbnqMJJ2QVPLykwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBPg0dupXzhh9aJSJvkNgfJwux8MB8GA1UdIwQY
MBaAFOMcPRH0PHQqfQCFQt9O/TuwDS13MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHh3OUVmUThkQ3A5QUlWQzMwNzlPN0FOTFhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82NDkyYjItNWFjYy00YTkwLWI1MzMt
NmUwZjZkMzlmZmZkLzEvNHh3OUVmUThkQ3A5QUlWQzMwNzlPN0FOTFhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS82NDkyYjItNWFjYy00YTkwLWI1MzMtNmUwZjZkMzlmZmZk
LzEvNHh3OUVmUThkQ3A5QUlWQzMwNzlPN0FOTFhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALosI/oyB
dEc2m3CERSuJgQeWRscL8w7B+wXdo3Hk4MzK1dMw+nsUeg9Vp4eMq6GDMY1fdnxj
XerXdGp/5O4pGEY/9BxBWsBy2UGz6sKIO3CRem2z1W3/duDANXamDKVkcrGeAYoT
BLsxNJ8KbUme6gNrc8EqNVzhUTtoI+HlAkDYcQTbHHxRsiWLqVE1sa6ubtj1KjnG
AiP0VWMoU5qpH4HYub9goS6aJoSYRWN0j5WCWWHTxGjdJySUgbKaqN2JNrb3ON1p
TEG7VkQlIVFaXb4Nhp+078hcPRZOTCc2rQzwv12c4ZPQKPLtGS5GANjHTluIKwOB
Pa7mynzaxSmgBw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:38 2026 by rpki-client