Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
File: 4QhbYki9cgdqtCH_oOO_75NWXp0.mft (raw, json)
Hash identifier: JX2inJexh3yaiSJ15UirELB4CoYvLoa699slxTFp8JQ=
Subject key identifier: 96:14:48:3F:23:B9:AD:E1:77:0A:11:7F:45:5C:EC:9E:12:6C:4E:88
Authority key identifier: E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
Certificate issuer: /CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Certificate serial: 019D386587FF9E191FD7BF341F78FF00ECD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
Manifest number: 0DE7
Signing time: Sun 29 Mar 2026 07:01:10 +0000
Manifest this update: Sun 29 Mar 2026 07:01:10 +0000
Manifest next update: Mon 30 Mar 2026 07:01:10 +0000
Files and hashes: 1: 4QhbYki9cgdqtCH_oOO_75NWXp0.crl (hash: 2jyDTMDb7ow81lwP5+H1kQIfUIbDADQ4a5Yi2NZH6+U=)
2: QtPhnyLsRRN8U6hpcPXp4Z0oWqY.roa (hash: i0nu2P6NxLQ5ERHa8d6GR72neeBYjpf7KkNPNvBe0Gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:87:ff:9e:19:1f:d7:bf:34:1f:78:ff:00:ec:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1085b6248bd72076ab421ffa0e3bfef93565e9d
Validity
Not Before: Mar 29 07:01:10 2026 GMT
Not After : Mar 30 07:01:10 2026 GMT
Subject: CN=9614483f23b9ade1770a117f455cec9e126c4e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4d:8f:8b:92:c6:3f:a7:43:91:0c:4e:75:fd:
3d:cb:83:56:85:10:9d:bf:e2:c9:15:4b:5a:9f:f8:
d4:d5:c9:db:35:ec:ca:0a:16:c8:0f:df:1d:a6:40:
b8:36:1d:91:24:9c:16:13:8e:42:16:ac:92:ac:1b:
ca:6b:1d:43:7b:28:d3:3d:7f:31:9c:e4:18:a1:ad:
cf:c0:84:3c:bb:11:e6:48:44:de:2e:ce:75:2b:95:
28:67:43:84:ed:e1:37:28:90:85:a8:33:35:4f:92:
2e:f3:46:2b:4a:ec:44:62:4e:23:a6:5d:30:20:05:
7f:66:8a:17:68:5c:be:f0:52:83:78:01:d8:01:26:
c7:5a:38:c9:11:54:be:1c:25:17:df:19:e9:b2:f7:
78:72:bb:6c:36:d2:75:6c:15:6c:5f:d7:f9:09:ce:
90:8c:be:40:ad:41:8c:63:c7:ba:88:67:29:5f:ee:
d3:c8:eb:6f:2c:68:a0:64:7d:e1:1d:84:a9:2d:49:
ec:f1:ca:ab:91:32:2c:4c:c4:f6:06:8a:00:0a:d9:
5a:f6:de:53:a3:62:87:49:ba:ba:3b:3d:57:16:74:
ce:ed:a3:a8:a9:13:f3:8c:ad:15:57:8b:66:b4:4a:
cc:f0:ab:d0:ce:01:2e:25:6d:d1:cd:5c:3a:e1:8d:
2c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:14:48:3F:23:B9:AD:E1:77:0A:11:7F:45:5C:EC:9E:12:6C:4E:88
X509v3 Authority Key Identifier:
keyid:E1:08:5B:62:48:BD:72:07:6A:B4:21:FF:A0:E3:BF:EF:93:56:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QhbYki9cgdqtCH_oOO_75NWXp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6d9ab5-d1ae-449d-a7e9-1f5f94ce35ee/1/4QhbYki9cgdqtCH_oOO_75NWXp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:2d:22:27:e7:11:1f:65:fa:db:63:a8:57:a3:ba:db:3a:c3:
f0:79:ef:b2:65:af:e1:41:7c:fa:cc:8b:7b:53:78:e8:69:57:
93:e8:6d:4b:0c:ff:9c:ad:88:8d:62:fd:65:2e:03:ab:e4:52:
0f:15:55:81:e5:f2:31:53:c3:07:5e:30:94:5e:fd:6b:29:9c:
58:72:1b:fe:b8:1c:82:da:76:cc:87:63:6d:3a:20:1c:41:7e:
eb:a0:5a:7a:f5:0e:51:c2:c1:71:08:d5:b1:b8:0e:cc:d9:fb:
fb:6c:d5:75:19:84:8e:ac:41:29:1d:e2:f5:6f:14:f0:1d:76:
7b:7a:05:1b:8f:1b:af:2d:d0:f2:96:33:92:36:e5:e9:9f:ec:
aa:f8:2b:52:6a:79:fb:82:fc:5a:b1:f8:80:b1:5b:7a:05:f0:
c6:27:51:ae:6f:7f:51:2b:3f:0b:66:eb:03:d6:25:40:aa:9a:
af:51:ed:57:41:5d:e5:35:4a:fa:9d:00:1e:7d:0d:93:33:97:
81:2f:76:b6:d6:85:28:e6:98:e2:6e:75:3e:03:86:67:9e:5d:
a5:8a:b1:cb:47:dc:ef:2e:21:c0:33:d4:dc:76:ef:cc:6c:7d:
11:72:79:c9:2c:c6:08:ee:24:45:95:cf:c8:0f:2a:ef:71:5d:
1a:b0:41:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZYf/nhkf1780H3j/AOzTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDg1YjYyNDhiZDcyMDc2YWI0MjFmZmEwZTNiZmVmOTM1
NjVlOWQwHhcNMjYwMzI5MDcwMTEwWhcNMjYwMzMwMDcwMTEwWjAzMTEwLwYDVQQD
Eyg5NjE0NDgzZjIzYjlhZGUxNzcwYTExN2Y0NTVjZWM5ZTEyNmM0ZTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApU2Pi5LGP6dDkQxOdf09y4NWhRCd
v+LJFUtan/jU1cnbNezKChbID98dpkC4Nh2RJJwWE45CFqySrBvKax1DeyjTPX8x
nOQYoa3PwIQ8uxHmSETeLs51K5UoZ0OE7eE3KJCFqDM1T5Iu80YrSuxEYk4jpl0w
IAV/ZooXaFy+8FKDeAHYASbHWjjJEVS+HCUX3xnpsvd4crtsNtJ1bBVsX9f5Cc6Q
jL5ArUGMY8e6iGcpX+7TyOtvLGigZH3hHYSpLUns8cqrkTIsTMT2BooACtla9t5T
o2KHSbq6Oz1XFnTO7aOoqRPzjK0VV4tmtErM8KvQzgEuJW3RzVw64Y0swwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJYUSD8jua3hdwoRf0Vc7J4SbE6IMB8GA1UdIwQY
MBaAFOEIW2JIvXIHarQh/6Djv++TVl6dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTkt
MWY1Zjk0Y2UzNWVlLzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy82ZDlhYjUtZDFhZS00NDlkLWE3ZTktMWY1Zjk0Y2UzNWVl
LzEvNFFoYllraTljZ2RxdENIX29PT183NU5XWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADS0iJ+cR
H2X622OoV6O62zrD8HnvsmWv4UF8+syLe1N46GlXk+htSwz/nK2IjWL9ZS4Dq+RS
DxVVgeXyMVPDB14wlF79aymcWHIb/rgcgtp2zIdjbTogHEF+66BaevUOUcLBcQjV
sbgOzNn7+2zVdRmEjqxBKR3i9W8U8B12e3oFG48bry3Q8pYzkjbl6Z/sqvgrUmp5
+4L8WrH4gLFbegXwxidRrm9/USs/C2brA9YlQKqar1HtV0Fd5TVK+p0AHn0NkzOX
gS92ttaFKOaY4m51PgOGZ55dpYqxy0fc7y4hwDPU3HbvzGx9EXJ5ySzGCO4kRZXP
yA8q73FdGrBBEA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:41 2026 by rpki-client