Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: n3WPD6f3y5faYuQuuDnLOwNvp/iwooaz+f6SVxVL0gk=
Subject key identifier: E1:6A:AF:13:14:96:B8:52:4A:62:4C:94:0A:B6:6A:2F:BD:B2:06:76
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 019D3977BCCBD7A449C2C0112ED37BB699A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 11B8
Signing time: Sun 29 Mar 2026 12:00:41 +0000
Manifest this update: Sun 29 Mar 2026 12:00:41 +0000
Manifest next update: Mon 30 Mar 2026 12:00:41 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: vXbKtFRDPZ+1Ga4e8VDQ2Y+J6lITFGQ166GXNQI8cvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:bc:cb:d7:a4:49:c2:c0:11:2e:d3:7b:b6:99:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Mar 29 12:00:41 2026 GMT
Not After : Mar 30 12:00:41 2026 GMT
Subject: CN=e16aaf131496b8524a624c940ab66a2fbdb20676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c4:79:f4:b0:d6:71:1f:c8:5b:0f:51:26:a0:
8b:98:42:7e:87:d3:0a:d8:0f:eb:23:9f:fb:e9:4e:
1a:4a:8c:42:60:8e:ca:4f:de:ae:61:e6:51:35:1a:
02:31:03:2d:83:29:31:e0:d8:45:c0:cc:80:12:84:
ff:80:e8:c7:69:fa:38:c9:c4:8c:d0:91:ae:f6:6a:
12:da:25:72:5b:9c:61:cd:d0:9f:be:09:e0:43:ad:
8f:9a:53:0f:d4:2c:b1:1a:23:88:b7:25:b3:cf:ca:
6f:1d:fe:53:83:d0:52:e7:8f:93:7e:3c:e7:70:0c:
99:92:3c:f9:6c:a4:8b:f7:6a:03:b9:22:37:e8:d8:
ab:1c:a5:60:a9:03:79:0e:41:98:e1:28:d3:54:8a:
5b:25:1b:75:4c:6c:30:3c:f8:43:70:39:35:85:fb:
bd:e7:55:02:b8:8c:56:20:72:9d:84:24:fd:d3:49:
80:ed:ce:c0:52:46:cb:e4:93:61:40:6c:22:41:fb:
b4:76:ea:ba:eb:b2:6d:4a:c7:6a:f4:c1:37:c4:ce:
0d:19:8a:63:b0:2a:76:65:b3:5f:27:7b:73:f8:36:
3b:42:eb:6e:cd:81:3c:4d:4d:92:4b:b8:fe:15:05:
b1:18:8f:98:5f:9a:e5:85:d1:7b:92:6d:f0:47:04:
42:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6A:AF:13:14:96:B8:52:4A:62:4C:94:0A:B6:6A:2F:BD:B2:06:76
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:5f:c6:01:73:bd:0e:c2:90:ad:85:cd:71:90:2b:f3:c0:a9:
5f:4b:ef:13:42:08:6c:e3:06:cc:dc:6b:b0:e3:02:ec:59:b0:
0b:a9:75:7b:68:e1:e2:b1:c6:0c:a4:f7:13:8f:25:ed:d0:f2:
ee:40:42:0a:c7:10:52:c3:51:01:87:8e:56:e8:54:45:db:2f:
e6:10:25:e5:fe:10:b6:82:07:25:6c:95:15:9f:1a:76:b2:ff:
f5:62:38:ee:1a:b3:22:d3:63:a0:85:e6:68:37:33:ca:bd:13:
ba:51:9b:b4:ed:06:6b:98:6b:c8:77:af:73:7e:cb:a0:cf:3c:
5a:1c:a7:db:55:3f:c8:2c:a3:1c:d8:42:8d:bf:c0:73:ca:51:
bb:af:a9:67:3f:af:97:ba:fa:17:e0:f7:80:e7:04:5f:98:0c:
38:7e:1b:1c:46:98:f0:49:d0:d0:8b:0d:0a:ec:a6:d5:8e:1e:
1b:00:69:0a:f1:a9:91:99:9a:1c:17:1e:27:f3:93:d2:0e:e9:
33:e3:ba:15:1d:75:13:af:4c:7c:49:93:9e:87:84:e4:0a:de:
bc:06:34:c9:b6:e6:1c:af:3b:43:50:0b:34:dc:78:cb:a4:ae:
83:10:0d:28:bd:8b:ad:45:22:5a:fd:84:d5:44:4a:43:81:96:
78:96:37:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d7zL16RJwsARLtN7tpmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZTFlZjg1MTFiNzU2MmJmM2RjM2MwYjA0MDkzYjMzN2Jj
ZTAzOTEwHhcNMjYwMzI5MTIwMDQxWhcNMjYwMzMwMTIwMDQxWjAzMTEwLwYDVQQD
EyhlMTZhYWYxMzE0OTZiODUyNGE2MjRjOTQwYWI2NmEyZmJkYjIwNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcR59LDWcR/IWw9RJqCLmEJ+h9MK
2A/rI5/76U4aSoxCYI7KT96uYeZRNRoCMQMtgykx4NhFwMyAEoT/gOjHafo4ycSM
0JGu9moS2iVyW5xhzdCfvgngQ62PmlMP1CyxGiOItyWzz8pvHf5Tg9BS54+Tfjzn
cAyZkjz5bKSL92oDuSI36NirHKVgqQN5DkGY4SjTVIpbJRt1TGwwPPhDcDk1hfu9
51UCuIxWIHKdhCT900mA7c7AUkbL5JNhQGwiQfu0duq667JtSsdq9ME3xM4NGYpj
sCp2ZbNfJ3tz+DY7QutuzYE8TU2SS7j+FQWxGI+YX5rlhdF7km3wRwRC3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFqrxMUlrhSSmJMlAq2ai+9sgZ2MB8GA1UdIwQY
MBaAFOLh74URt1Yr89w8CwQJOzN7zgORMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lY2I1ZDQtYjQ0OC00MmU0LWI0YTMt
OWI2NTg5MGUyZWFlLzEvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9lY2I1ZDQtYjQ0OC00MmU0LWI0YTMtOWI2NTg5MGUyZWFl
LzEvNHVIdmhSRzNWaXZ6M0R3TEJBazdNM3ZPQTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkl/GAXO9
DsKQrYXNcZAr88CpX0vvE0IIbOMGzNxrsOMC7FmwC6l1e2jh4rHGDKT3E48l7dDy
7kBCCscQUsNRAYeOVuhURdsv5hAl5f4QtoIHJWyVFZ8adrL/9WI47hqzItNjoIXm
aDczyr0TulGbtO0Ga5hryHevc37LoM88Whyn21U/yCyjHNhCjb/Ac8pRu6+pZz+v
l7r6F+D3gOcEX5gMOH4bHEaY8EnQ0IsNCuym1Y4eGwBpCvGpkZmaHBceJ/OT0g7p
M+O6FR11E69MfEmTnoeE5ArevAY0ybbmHK87Q1ALNNx4y6SugxANKL2LrUUiWv2E
1URKQ4GWeJY37g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:54 2026 by rpki-client