Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier: Sh/32SgBobyKqj1M0+jDdi+n+L7FzYWJJ+zuhvLyO6A=
Subject key identifier: 70:58:3F:17:E4:E3:EC:F6:A5:9F:C0:C7:CF:4D:F8:9F:05:3B:69:D8
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial: 019D3865C5DCCD7189E31FC6897E5CE07DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number: 0425
Signing time: Sun 29 Mar 2026 07:01:26 +0000
Manifest this update: Sun 29 Mar 2026 07:01:26 +0000
Manifest next update: Mon 30 Mar 2026 07:01:26 +0000
Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: yO6fWm0jmBPV8Is6QOtxNVxsLogrljzoJGAAF0jHX20=)
2: Xhzxh_1tEvbHh31P53cpofaJHAY.roa (hash: 31jnPeVemUW3b4ECC8z4gudFDjDHIoHHJ4mUtzZB8F8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:c5:dc:cd:71:89:e3:1f:c6:89:7e:5c:e0:7d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Validity
Not Before: Mar 29 07:01:26 2026 GMT
Not After : Mar 30 07:01:26 2026 GMT
Subject: CN=70583f17e4e3ecf6a59fc0c7cf4df89f053b69d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:bc:b6:b9:93:64:5d:87:1f:c5:f9:ed:e9:
c3:09:34:1c:08:99:94:06:b6:ac:1a:1f:78:fc:c7:
5e:e1:42:99:09:b7:0e:36:bd:85:b1:2c:0f:c5:cd:
d8:e6:d0:77:31:b9:7b:da:08:58:c3:f5:89:0f:6b:
48:29:7b:70:83:e4:0a:8f:f5:a0:68:ee:b0:40:ba:
a4:59:21:83:dd:52:18:11:78:6e:e4:a4:f5:37:1e:
56:e0:4a:05:6d:30:8f:2f:85:dc:ba:4d:3c:c6:ab:
dc:a2:e3:b1:16:34:2d:54:da:dc:e5:fa:3f:96:d7:
f0:37:09:81:a5:58:62:11:28:8f:b9:44:a8:0d:10:
f8:ca:c2:43:c8:ae:4e:44:a6:09:88:b0:77:c3:1b:
46:32:35:24:21:3e:3f:74:0f:58:0e:73:6d:a3:61:
99:81:10:8b:7d:18:6e:d9:29:42:c3:b5:c6:46:f3:
41:cc:f4:36:e4:48:e8:fd:fd:5f:b3:fb:7e:26:a8:
03:c4:d8:48:c4:dc:3c:cc:de:fa:73:f9:3c:bf:ee:
7a:a8:36:94:de:de:06:17:7d:b0:2b:7e:05:6b:10:
43:6c:d3:0d:64:e8:2d:71:7f:3f:88:79:13:b7:a9:
e4:f8:d7:6f:0f:cc:f9:1b:60:e8:5c:ba:98:cf:d2:
68:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:58:3F:17:E4:E3:EC:F6:A5:9F:C0:C7:CF:4D:F8:9F:05:3B:69:D8
X509v3 Authority Key Identifier:
keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:9a:17:05:59:91:ae:84:9b:50:d2:fc:73:ae:70:2c:6b:b2:
ec:97:38:72:b9:11:d7:93:7e:9f:ee:bf:b4:aa:46:59:e4:a2:
82:60:5b:2a:a2:42:63:51:7d:b3:e1:7d:8e:5a:ac:ef:9b:75:
d8:ef:66:8d:db:4c:d3:0b:cf:9c:bc:f8:86:f2:6d:d6:4a:9e:
53:c8:a1:f7:a3:cc:06:ee:ee:fd:77:19:96:36:a3:97:7a:11:
05:1d:d5:f5:4d:8e:2e:cf:64:73:0f:58:d4:ab:bf:a9:ed:34:
fb:d6:db:ba:b0:ee:3c:dd:72:a4:5a:78:d3:ef:83:06:0e:eb:
f0:39:7a:7f:85:23:f5:1a:92:c5:16:54:03:5f:04:91:83:07:
3c:10:e3:cd:f6:eb:80:db:c0:dc:3d:32:8d:f8:3a:49:4c:65:
20:ce:d7:c4:c4:7b:85:38:f3:11:ec:93:2d:00:d3:c4:35:77:
dc:9e:bc:af:d9:7d:68:f7:d9:a3:24:9e:a1:8d:80:ec:a0:cb:
75:2a:50:8e:25:e3:32:73:91:aa:26:f7:2e:35:01:23:27:90:
12:ce:b5:8e:b1:6f:fd:13:74:f7:34:d1:54:2c:0a:47:dc:5b:
9f:b5:aa:e5:03:97:65:c3:5c:ec:2f:a9:21:82:73:eb:9d:49:
60:a3:8e:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZcXczXGJ4x/GiX5c4H3HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNzc2YjA4MzhmYTBlMWRhMWJlNGVkY2NmODkyNGJkNDEz
YjFkYjcwHhcNMjYwMzI5MDcwMTI2WhcNMjYwMzMwMDcwMTI2WjAzMTEwLwYDVQQD
Eyg3MDU4M2YxN2U0ZTNlY2Y2YTU5ZmMwYzdjZjRkZjg5ZjA1M2I2OWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYW8trmTZF2HH8X57enDCTQcCJmU
BrasGh94/Mde4UKZCbcONr2FsSwPxc3Y5tB3Mbl72ghYw/WJD2tIKXtwg+QKj/Wg
aO6wQLqkWSGD3VIYEXhu5KT1Nx5W4EoFbTCPL4Xcuk08xqvcouOxFjQtVNrc5fo/
ltfwNwmBpVhiESiPuUSoDRD4ysJDyK5ORKYJiLB3wxtGMjUkIT4/dA9YDnNto2GZ
gRCLfRhu2SlCw7XGRvNBzPQ25Ejo/f1fs/t+JqgDxNhIxNw8zN76c/k8v+56qDaU
3t4GF32wK34FaxBDbNMNZOgtcX8/iHkTt6nk+NdvD8z5G2DoXLqYz9Jo7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBYPxfk4+z2pZ/Ax89N+J8FO2nYMB8GA1UdIwQY
MBaAFOB3awg4+g4dob5O3M+JJL1BOx23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEhkckNEajZEaDJodms3Y3o0a2t2VUU3SGJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9iZTlkYWItNWYyNy00M2NlLWFiMjIt
NzM5YTkxYzYyMGFjLzEvNEhkckNEajZEaDJodms3Y3o0a2t2VUU3SGJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9iZTlkYWItNWYyNy00M2NlLWFiMjItNzM5YTkxYzYyMGFj
LzEvNEhkckNEajZEaDJodms3Y3o0a2t2VUU3SGJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJoXBVmR
roSbUNL8c65wLGuy7Jc4crkR15N+n+6/tKpGWeSigmBbKqJCY1F9s+F9jlqs75t1
2O9mjdtM0wvPnLz4hvJt1kqeU8ih96PMBu7u/XcZljajl3oRBR3V9U2OLs9kcw9Y
1Ku/qe00+9bburDuPN1ypFp40++DBg7r8Dl6f4Uj9RqSxRZUA18EkYMHPBDjzfbr
gNvA3D0yjfg6SUxlIM7XxMR7hTjzEeyTLQDTxDV33J68r9l9aPfZoySeoY2A7KDL
dSpQjiXjMnORqib3LjUBIyeQEs61jrFv/RN09zTRVCwKR9xbn7Wq5QOXZcNc7C+p
IYJz651JYKOO8w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:12 2026 by rpki-client