Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: zc7amp/QfNKBNlJfAyqA7k/WPwL1denL07uI5VAhLY8=
Subject key identifier: 3F:07:8C:94:C1:AC:22:B0:C4:23:5B:7E:31:D6:42:43:95:0E:09:70
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 019E30A95BC07E2B3F9D396F2A9027CCB7B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 1238
Signing time: Sat 16 May 2026 12:01:05 +0000
Manifest this update: Sat 16 May 2026 12:01:05 +0000
Manifest next update: Sun 17 May 2026 12:01:05 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: S7Q8HmNEO8aVmA/N1uO+iycAtz0tJcobPeDH15miPck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:5b:c0:7e:2b:3f:9d:39:6f:2a:90:27:cc:b7:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: May 16 12:01:05 2026 GMT
Not After : May 17 12:01:05 2026 GMT
Subject: CN=3f078c94c1ac22b0c4235b7e31d64243950e0970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:51:5f:6d:6b:43:52:52:ee:cb:4b:90:c7:42:
df:10:2b:9c:42:07:0d:c4:87:47:a4:e9:24:20:e4:
2c:45:6d:2e:b7:3c:cf:70:ce:80:c1:9b:90:a2:41:
18:ef:d1:d9:7e:57:1f:7f:c2:5f:fa:b4:8d:1c:39:
5b:12:0f:fb:8c:20:b9:b6:41:ab:93:7e:08:c4:c2:
a7:9a:ab:d8:55:9b:04:1e:eb:69:b9:f8:c8:e4:51:
b1:99:17:45:ad:f8:3e:2b:16:9f:e0:ca:22:8d:80:
1e:a8:f7:a7:47:52:61:07:ee:ef:0f:01:61:ac:01:
e3:4d:ac:5f:4b:00:b1:91:fa:cd:59:7b:88:c5:1b:
fd:85:a6:2d:23:35:3d:15:d6:ed:d9:d7:b4:08:c8:
b5:ca:80:c1:91:4e:2e:fb:cc:9d:5e:13:09:13:9d:
98:d6:dd:02:b7:94:70:17:4c:94:e3:b2:ae:ed:e1:
3c:d7:59:ff:ce:24:23:6d:5f:07:ac:76:d2:bf:98:
e9:41:fd:2b:3c:f1:df:23:82:e6:b3:c7:e9:cc:3a:
6f:d2:83:2d:ec:a5:d0:6c:54:f0:ea:97:e9:45:1e:
3f:9a:c7:66:c6:ce:d1:e7:c8:b5:66:e3:ed:3e:6b:
2a:4e:d9:a6:b1:19:97:2f:cb:54:3b:ea:98:25:68:
7d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:07:8C:94:C1:AC:22:B0:C4:23:5B:7E:31:D6:42:43:95:0E:09:70
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b8:eb:02:d7:4c:a4:16:dc:39:fe:51:5a:b9:9b:49:62:5f:
6e:f9:c3:27:68:90:0c:2e:04:2d:cc:04:aa:c5:39:b9:59:39:
dc:9e:fd:92:54:7a:98:00:80:f2:ec:d4:02:6f:67:c0:de:5c:
26:69:9a:c6:c0:bf:57:20:61:57:40:f6:4e:e8:1c:62:0b:f8:
b5:3e:e0:0b:08:d5:30:a8:2b:3c:6b:aa:32:5d:e7:ec:3f:f1:
23:4f:a6:24:2d:51:04:15:85:22:f8:04:99:c8:17:8b:88:34:
1a:03:3d:5a:ad:54:bb:4e:f1:63:c6:d4:28:72:dd:4b:b3:af:
14:9e:fe:1d:28:f1:f2:5a:c5:d7:f6:bf:d5:46:8c:31:ef:63:
a1:a8:1d:aa:7e:a7:77:fd:dc:11:df:d1:d9:4e:93:1e:2c:5b:
f3:1b:8b:7c:8d:18:ca:79:05:82:58:41:e6:8f:7b:9f:d3:c0:
f4:23:d0:eb:b6:c8:59:a1:ba:81:1f:fc:b0:77:09:f5:85:ce:
69:89:d0:b8:bf:42:df:6f:4d:5e:4c:b0:c5:c9:e3:b0:93:05:
ed:69:81:0b:e7:11:38:5d:8f:ab:25:9f:48:8f:5f:06:ef:11:
77:84:42:33:3b:5f:fc:6e:6d:74:b4:ed:d8:47:50:f2:27:85:
2c:b1:23:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqVvAfis/nTlvKpAnzLe3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTFlZjg1MTFiNzU2MmJmM2RjM2MwYjA0MDkzYjMzN2Jj
ZTAzOTEwHhcNMjYwNTE2MTIwMTA1WhcNMjYwNTE3MTIwMTA1WjAzMTEwLwYDVQQD
EygzZjA3OGM5NGMxYWMyMmIwYzQyMzViN2UzMWQ2NDI0Mzk1MGUwOTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VFfbWtDUlLuy0uQx0LfECucQgcN
xIdHpOkkIOQsRW0utzzPcM6AwZuQokEY79HZflcff8Jf+rSNHDlbEg/7jCC5tkGr
k34IxMKnmqvYVZsEHutpufjI5FGxmRdFrfg+Kxaf4MoijYAeqPenR1JhB+7vDwFh
rAHjTaxfSwCxkfrNWXuIxRv9haYtIzU9Fdbt2de0CMi1yoDBkU4u+8ydXhMJE52Y
1t0Ct5RwF0yU47Ku7eE811n/ziQjbV8HrHbSv5jpQf0rPPHfI4Lms8fpzDpv0oMt
7KXQbFTw6pfpRR4/msdmxs7R58i1ZuPtPmsqTtmmsRmXL8tUO+qYJWh9MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD8HjJTBrCKwxCNbfjHWQkOVDglwMB8GA1UdIwQY
MBaAFOLh74URt1Yr89w8CwQJOzN7zgORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lY2I1ZDQtYjQ0OC00MmU0LWI0YTMt
OWI2NTg5MGUyZWFlLzEvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lY2I1ZDQtYjQ0OC00MmU0LWI0YTMtOWI2NTg5MGUyZWFl
LzEvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJLjrAtdM
pBbcOf5RWrmbSWJfbvnDJ2iQDC4ELcwEqsU5uVk53J79klR6mACA8uzUAm9nwN5c
JmmaxsC/VyBhV0D2TugcYgv4tT7gCwjVMKgrPGuqMl3n7D/xI0+mJC1RBBWFIvgE
mcgXi4g0GgM9Wq1Uu07xY8bUKHLdS7OvFJ7+HSjx8lrF1/a/1UaMMe9joagdqn6n
d/3cEd/R2U6THixb8xuLfI0YynkFglhB5o97n9PA9CPQ67bIWaG6gR/8sHcJ9YXO
aYnQuL9C329NXkywxcnjsJMF7WmBC+cROF2PqyWfSI9fBu8Rd4RCMztf/G5tdLTt
2EdQ8ieFLLEjlw==
-----END CERTIFICATE-----
Generated at Sat May 16 19:29:05 2026 by rpki-client