Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft
File: 4Yup6gmzdhhN50OUcr0G2LHRfQs.mft (raw, json)
Hash identifier: /EJnD5/7XTx1iMx14Tg/H7TcM2mpTpmVtXQpNLgEq9g=
Subject key identifier: E3:7F:9C:AF:A7:96:7A:1B:1B:BB:06:A8:1A:83:FD:3A:B0:9D:57:67
Authority key identifier: E1:8B:A9:EA:09:B3:76:18:4D:E7:43:94:72:BD:06:D8:B1:D1:7D:0B
Certificate issuer: /CN=e18ba9ea09b376184de7439472bd06d8b1d17d0b
Certificate serial: 019D37BFFF6C908E7ABE0A1E2BCF65114F4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Yup6gmzdhhN50OUcr0G2LHRfQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft
Manifest number: 1C
Signing time: Sun 29 Mar 2026 04:00:22 +0000
Manifest this update: Sun 29 Mar 2026 04:00:22 +0000
Manifest next update: Mon 30 Mar 2026 04:00:22 +0000
Files and hashes: 1: 4Yup6gmzdhhN50OUcr0G2LHRfQs.crl (hash: ANOVjBqzssAM2n8uqESZ/NVJaVcgMF42S36D8atstrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Yup6gmzdhhN50OUcr0G2LHRfQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:ff:6c:90:8e:7a:be:0a:1e:2b:cf:65:11:4f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18ba9ea09b376184de7439472bd06d8b1d17d0b
Validity
Not Before: Mar 29 04:00:22 2026 GMT
Not After : Mar 30 04:00:22 2026 GMT
Subject: CN=e37f9cafa7967a1b1bbb06a81a83fd3ab09d5767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:96:f1:c7:f3:a0:7c:31:1e:b5:58:e9:7d:
81:53:c3:87:2e:a5:19:f5:a0:73:8b:4c:93:89:ca:
f8:3c:30:15:67:b2:10:df:eb:c5:d5:2c:44:2c:b5:
cd:b0:20:b3:c6:4a:5e:97:60:4f:0d:89:8f:df:3d:
3e:e4:1a:36:54:7a:4a:b8:2b:fc:25:cf:af:b4:1a:
2e:ed:64:67:44:f4:a2:44:a4:23:4a:8c:1c:a8:fd:
b2:76:ba:86:ec:af:9e:bf:7d:21:71:28:c0:be:44:
4c:60:28:83:07:5a:16:68:ff:85:84:4e:3e:f1:63:
4d:41:ef:5d:84:21:07:97:9c:d6:75:c3:ca:5b:96:
da:bb:88:a7:ce:68:2d:8c:48:36:20:60:88:c8:94:
4d:9a:69:82:a0:eb:78:68:b6:02:b2:37:69:b4:b0:
6d:40:d7:0e:4d:d0:9b:d3:ab:3d:a1:d1:b3:22:b4:
76:6e:c3:73:d5:06:48:45:e2:be:23:c1:f0:1a:9c:
6a:c8:50:3c:28:54:92:02:d9:7e:5b:67:3d:72:51:
09:8e:cb:f7:20:26:cc:d2:84:cf:0b:39:ed:14:93:
9c:76:0d:7f:cc:06:58:f2:2b:4c:a8:66:e6:d4:f0:
b3:3f:39:95:ad:cf:2e:02:8d:66:43:da:15:d3:89:
12:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:7F:9C:AF:A7:96:7A:1B:1B:BB:06:A8:1A:83:FD:3A:B0:9D:57:67
X509v3 Authority Key Identifier:
keyid:E1:8B:A9:EA:09:B3:76:18:4D:E7:43:94:72:BD:06:D8:B1:D1:7D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yup6gmzdhhN50OUcr0G2LHRfQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ae54e-1559-44c4-a8f6-a607e722d490/1/4Yup6gmzdhhN50OUcr0G2LHRfQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f6:97:8f:7b:26:66:ed:db:5e:63:5b:42:7a:38:67:d1:2e:
b8:c5:c8:32:61:00:a5:1e:4a:97:40:df:a9:68:ff:97:2c:61:
58:e6:66:d5:41:b4:06:7d:0f:1f:9a:74:ca:7a:a9:71:92:4e:
bc:9a:62:3e:0a:32:90:1f:01:cf:08:93:eb:20:31:82:39:ec:
42:b2:60:b8:61:a8:e2:c9:0e:e6:02:60:65:d9:62:94:e4:a6:
cd:d2:38:2b:9e:f2:f9:d2:d6:4e:4a:6d:75:55:0b:72:44:49:
ed:19:28:2d:78:f7:43:38:82:8a:7a:f9:3c:fe:15:8f:fe:1c:
42:90:26:b6:eb:57:d0:21:dd:a0:6d:71:02:bd:c2:05:0d:97:
e3:64:b5:e0:36:62:4b:95:2e:7a:07:9c:0a:d5:fd:9d:ee:92:
42:35:b0:5a:42:b4:d8:36:6f:49:c6:75:c6:a8:cd:53:e2:c9:
eb:1d:3b:96:f7:5f:23:fa:1f:05:10:a2:97:7a:a0:1d:4b:41:
e9:4c:aa:f7:99:c5:77:86:b7:76:10:3b:b0:78:31:e0:4e:f6:
89:db:c4:ce:a8:42:a2:af:14:f4:9e:d0:51:02:6a:8b:dd:f6:
05:bc:99:16:9a:19:e6:c1:e1:ec:e2:c4:ae:ee:7f:50:63:2c:
fd:98:f9:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v/9skI56vgoeK89lEU9KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOGJhOWVhMDliMzc2MTg0ZGU3NDM5NDcyYmQwNmQ4YjFk
MTdkMGIwHhcNMjYwMzI5MDQwMDIyWhcNMjYwMzMwMDQwMDIyWjAzMTEwLwYDVQQD
EyhlMzdmOWNhZmE3OTY3YTFiMWJiYjA2YTgxYTgzZmQzYWIwOWQ1NzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDWW8cfzoHwxHrVY6X2BU8OHLqUZ
9aBzi0yTicr4PDAVZ7IQ3+vF1SxELLXNsCCzxkpel2BPDYmP3z0+5Bo2VHpKuCv8
Jc+vtBou7WRnRPSiRKQjSowcqP2ydrqG7K+ev30hcSjAvkRMYCiDB1oWaP+FhE4+
8WNNQe9dhCEHl5zWdcPKW5bau4inzmgtjEg2IGCIyJRNmmmCoOt4aLYCsjdptLBt
QNcOTdCb06s9odGzIrR2bsNz1QZIReK+I8HwGpxqyFA8KFSSAtl+W2c9clEJjsv3
ICbM0oTPCzntFJOcdg1/zAZY8itMqGbm1PCzPzmVrc8uAo1mQ9oV04kSAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFON/nK+nlnobG7sGqBqD/TqwnVdnMB8GA1UdIwQY
MBaAFOGLqeoJs3YYTedDlHK9Btix0X0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFl1cDZnbXpkaGhONTBPVWNyMEcyTEhSZlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85YWU1NGUtMTU1OS00NGM0LWE4ZjYt
YTYwN2U3MjJkNDkwLzEvNFl1cDZnbXpkaGhONTBPVWNyMEcyTEhSZlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC85YWU1NGUtMTU1OS00NGM0LWE4ZjYtYTYwN2U3MjJkNDkw
LzEvNFl1cDZnbXpkaGhONTBPVWNyMEcyTEhSZlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL/aXj3sm
Zu3bXmNbQno4Z9EuuMXIMmEApR5Kl0DfqWj/lyxhWOZm1UG0Bn0PH5p0ynqpcZJO
vJpiPgoykB8BzwiT6yAxgjnsQrJguGGo4skO5gJgZdlilOSmzdI4K57y+dLWTkpt
dVULckRJ7RkoLXj3QziCinr5PP4Vj/4cQpAmtutX0CHdoG1xAr3CBQ2X42S14DZi
S5UuegecCtX9ne6SQjWwWkK02DZvScZ1xqjNU+LJ6x07lvdfI/ofBRCil3qgHUtB
6Uyq95nFd4a3dhA7sHgx4E72idvEzqhCoq8U9J7QUQJqi932BbyZFpoZ5sHh7OLE
ru5/UGMs/Zj5RA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:38:44 2026 by rpki-client