Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: LB//0qQKHIjKJ9aYoZFJyhTA6Kyndtq9eNtjm8rChzg=
Subject key identifier: 06:80:C8:AD:2A:62:6F:BE:DA:6E:66:56:03:53:78:9F:9F:E2:93:A0
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 019D37895D0F1AC5C5F58DC2296EECACBD7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 13EB
Signing time: Sun 29 Mar 2026 03:00:42 +0000
Manifest this update: Sun 29 Mar 2026 03:00:42 +0000
Manifest next update: Mon 30 Mar 2026 03:00:42 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: 6IMAVJVKf4QhxZhdzNIhHPcPDC8rFHVmmYApkUKIJq8=)
2: _2TjfVrCZo9B9qI9aJsIIj8RhAk.asa (hash: M/M1jD58xwzQOF/SAmLUskPi5EjlgSXMDxr/H80Jdlc=)
3: i4Te7iMl8ghbqa21Y6HDg_6pHHs.roa (hash: w8gWgmF42nIarY6Emvf1fz/wNEfrJpHlyRzan9puCwg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:5d:0f:1a:c5:c5:f5:8d:c2:29:6e:ec:ac:bd:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Mar 29 03:00:42 2026 GMT
Not After : Mar 30 03:00:42 2026 GMT
Subject: CN=0680c8ad2a626fbeda6e66560353789f9fe293a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d5:73:01:e9:12:6c:a3:a0:3f:e2:3b:32:80:
7d:6f:87:b8:d0:fc:98:3a:ee:e2:24:fe:21:c3:f4:
41:c0:d2:5f:63:71:42:d9:40:92:c7:9f:24:ee:d4:
bf:72:39:f1:e7:5e:1e:87:e8:81:18:09:fa:64:fc:
2e:34:68:ce:ce:7e:99:41:e1:3d:31:bf:a2:ce:8e:
02:a6:a6:1b:fe:ac:c4:7c:69:7b:4e:e9:61:a8:8c:
39:56:a2:b2:13:93:25:1a:6b:a2:aa:b3:ce:82:14:
15:59:67:6a:c2:03:2c:42:73:f3:a6:b5:78:3b:be:
f6:7d:5f:bc:b5:8c:1a:b0:77:69:a8:5d:29:c6:55:
08:16:2b:73:9f:11:b1:8e:1f:63:e0:b2:1e:4a:4d:
3a:d9:01:9c:fd:a4:09:b5:d8:24:3c:b6:34:91:c7:
e9:ff:b8:f0:cb:9d:c1:8e:b9:a7:40:ad:41:66:ce:
be:1e:c3:31:29:20:51:0c:ab:33:6d:73:fc:f3:97:
b5:a9:d3:ef:0f:0d:09:5c:74:c5:36:1f:80:b5:e8:
23:67:b6:0d:27:94:f0:44:75:78:0f:96:e7:17:bd:
6e:14:a5:75:d6:e7:98:65:b6:00:f4:4a:70:76:be:
80:b4:75:5c:86:1b:14:cc:9a:70:fc:b8:1c:d4:8b:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:80:C8:AD:2A:62:6F:BE:DA:6E:66:56:03:53:78:9F:9F:E2:93:A0
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:a7:3e:3f:aa:a9:35:f6:86:0b:85:e8:09:bd:46:70:27:c9:
ff:7b:1a:4f:fa:b6:c3:65:19:93:ed:b6:1f:87:c6:95:c2:e9:
f1:0c:ad:b1:3b:01:9e:0f:8e:16:36:00:74:c6:3d:bd:81:a6:
38:92:b0:11:fb:b7:1a:e7:8c:db:a5:ef:33:9d:e1:12:75:2e:
90:f2:fa:f6:04:35:08:bd:dd:5f:d1:0a:a5:79:83:55:52:6c:
20:cf:a3:8f:99:47:96:40:ea:6c:5d:98:43:3a:20:8b:68:92:
34:89:3d:6c:65:db:77:04:14:d6:20:61:7e:66:ed:11:46:b7:
c3:46:74:99:ca:d1:9f:24:c3:ee:de:aa:1e:d4:98:c4:aa:f6:
48:4a:bf:e0:36:c6:d8:5d:db:7d:a0:33:81:f6:e5:4f:c6:07:
dc:39:b1:9b:49:4d:cf:1c:9a:f4:3c:1e:4f:a8:d7:43:ee:1b:
2a:57:b4:0b:10:2d:55:8e:bd:3e:8d:d3:e3:7e:5f:3a:15:9c:
aa:05:de:12:4b:1e:e6:fe:74:94:61:be:c1:f9:77:29:4b:01:
01:78:88:98:71:63:c2:33:8f:1b:c5:46:a4:7b:cd:5f:f8:dc:
b3:2e:55:7d:67:07:ec:c8:b6:ee:e4:ce:4c:9c:13:c6:f2:c1:
2c:92:63:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iV0PGsXF9Y3CKW7srL1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxODc0YTg4N2FhMjg4ZGFiNzJjNjU4ZTkzNjk0ZWQ1ZGFm
ZDIwMjYwHhcNMjYwMzI5MDMwMDQyWhcNMjYwMzMwMDMwMDQyWjAzMTEwLwYDVQQD
EygwNjgwYzhhZDJhNjI2ZmJlZGE2ZTY2NTYwMzUzNzg5ZjlmZTI5M2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdVzAekSbKOgP+I7MoB9b4e40PyY
Ou7iJP4hw/RBwNJfY3FC2UCSx58k7tS/cjnx514eh+iBGAn6ZPwuNGjOzn6ZQeE9
Mb+izo4CpqYb/qzEfGl7TulhqIw5VqKyE5MlGmuiqrPOghQVWWdqwgMsQnPzprV4
O772fV+8tYwasHdpqF0pxlUIFitznxGxjh9j4LIeSk062QGc/aQJtdgkPLY0kcfp
/7jwy53BjrmnQK1BZs6+HsMxKSBRDKszbXP885e1qdPvDw0JXHTFNh+AtegjZ7YN
J5TwRHV4D5bnF71uFKV11ueYZbYA9Epwdr6AtHVchhsUzJpw/Lgc1IvSuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAaAyK0qYm++2m5mVgNTeJ+f4pOgMB8GA1UdIwQY
MBaAFOGHSoh6oojatyxljpNpTtXa/SAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTct
ZWRhMjNmMmYxN2U5LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8wZmM3ZTUtYjFmNi00NzRlLTk5YTctZWRhMjNmMmYxN2U5
LzEvNFlkS2lIcWlpTnEzTEdXT2sybE8xZHI5SUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS6c+P6qp
NfaGC4XoCb1GcCfJ/3saT/q2w2UZk+22H4fGlcLp8QytsTsBng+OFjYAdMY9vYGm
OJKwEfu3GueM26XvM53hEnUukPL69gQ1CL3dX9EKpXmDVVJsIM+jj5lHlkDqbF2Y
Qzogi2iSNIk9bGXbdwQU1iBhfmbtEUa3w0Z0mcrRnyTD7t6qHtSYxKr2SEq/4DbG
2F3bfaAzgfblT8YH3Dmxm0lNzxya9DweT6jXQ+4bKle0CxAtVY69Po3T435fOhWc
qgXeEkse5v50lGG+wfl3KUsBAXiImHFjwjOPG8VGpHvNX/jcsy5VfWcH7Mi27uTO
TJwTxvLBLJJjvQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:25 2026 by rpki-client