Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
File: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json)
Hash identifier: 9wZzx9lGFZOUW2ibftCal6SD0RauMylmDrKB4RsHVnE=
Subject key identifier: F7:72:7B:17:92:B5:D5:7F:AC:C0:77:04:BF:FC:A7:10:92:12:68:63
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial: 019D37C04E95EAB32BA6C1109B965A407060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
Manifest number: 0F5E
Signing time: Sun 29 Mar 2026 04:00:42 +0000
Manifest this update: Sun 29 Mar 2026 04:00:42 +0000
Manifest next update: Mon 30 Mar 2026 04:00:42 +0000
Files and hashes: 1: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: YAJJG8dwoZIZq+LHadsBlJXoQR9U6yNySzWazHZucOM=)
2: JrMdq8W_Js69e7PdI-Ct-5yCpDo.roa (hash: g0z8GxHhTedzHVjLXB39V9yW7Ab4PjyuLrPENMUU7AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:4e:95:ea:b3:2b:a6:c1:10:9b:96:5a:40:70:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Validity
Not Before: Mar 29 04:00:42 2026 GMT
Not After : Mar 30 04:00:42 2026 GMT
Subject: CN=f7727b1792b5d57facc07704bffca71092126863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:83:3f:cf:3e:87:9c:1f:58:72:01:c7:4e:
56:2f:e8:81:d7:f9:c3:8c:b3:4e:01:57:76:45:b4:
a1:09:3c:20:bb:3e:b2:c5:91:f9:2b:45:df:fe:57:
a9:bc:ec:40:69:4f:57:5e:78:c2:fb:83:87:d5:f4:
b8:08:c7:11:ea:07:6a:db:40:75:fe:1b:45:2d:d6:
b8:0f:e8:11:d5:f8:49:64:12:44:a8:08:8a:32:0d:
6a:4b:1c:d5:f5:d4:9c:65:54:13:b7:76:26:38:da:
a4:9b:ba:d3:43:3a:3b:b1:c2:01:bd:b2:c2:a7:13:
86:26:33:a7:d0:9c:d3:b9:64:10:29:ec:28:19:37:
cb:ad:be:74:50:17:32:55:79:2a:f1:9a:7d:31:83:
4d:6f:d6:ab:31:0c:2a:de:a7:da:fe:b8:43:ca:81:
d8:ae:f0:2f:db:17:e6:52:a1:7d:f7:a6:d4:7e:08:
a1:49:6a:e7:57:d3:51:b6:5f:2e:68:4a:36:2e:ff:
62:20:8a:2c:4a:e9:ff:1f:d9:09:ff:5e:9b:7c:49:
53:18:53:43:fb:a5:98:5e:21:44:07:ba:9c:88:da:
fe:4d:3c:5a:be:96:95:03:3d:b4:0a:e2:45:13:53:
11:c4:c6:c7:cd:45:83:06:00:e1:b1:da:25:54:a3:
4d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:72:7B:17:92:B5:D5:7F:AC:C0:77:04:BF:FC:A7:10:92:12:68:63
X509v3 Authority Key Identifier:
keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:bb:c3:f0:48:ac:5f:f8:75:16:07:a1:64:09:5d:c0:f3:db:
73:bc:a5:8b:10:a3:cc:1b:ed:6a:77:66:dc:8f:cb:1e:a6:2a:
dc:5b:f6:a7:85:7c:35:f8:45:d7:7e:ca:c9:55:ee:d2:7d:c2:
d0:29:83:e2:c2:a9:e9:11:ce:18:fe:3e:d5:ed:09:aa:38:43:
89:85:5e:4d:dc:e7:ec:ad:ba:60:9d:f5:c8:32:80:47:ee:28:
a9:5d:e4:cd:62:bc:47:11:b7:1f:ea:9f:a6:03:c4:df:09:28:
e1:8e:cc:8b:a2:78:d5:03:61:48:31:f7:44:0b:bc:ab:55:b5:
16:44:49:32:b4:a5:24:9f:e2:76:4c:1c:76:01:44:e1:2d:ff:
d9:b7:cd:6f:77:62:d9:c4:10:b1:91:62:cc:04:e2:25:4c:a2:
c8:af:5d:f8:a1:c6:a5:f0:45:9c:1d:98:6a:b8:23:e5:3b:38:
f4:f3:81:6f:65:cd:64:33:2f:ca:35:28:5b:cf:7c:6d:72:3a:
d1:a1:de:ad:cb:ba:ae:16:78:88:fb:63:68:d4:ab:bf:2d:bc:
33:17:2d:91:12:7c:08:4d:1c:b3:27:58:cc:3d:5b:1e:fc:cf:
ff:f9:57:ee:cd:90:62:2b:98:37:a2:7c:f4:30:dd:ca:c5:dc:
d0:19:d7:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wE6V6rMrpsEQm5ZaQHBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiODBlN2JjYjQyYmNjYjgwOTJhZTI4YTQxYWVkOTI4ZWVh
NGQ2MzUwHhcNMjYwMzI5MDQwMDQyWhcNMjYwMzMwMDQwMDQyWjAzMTEwLwYDVQQD
EyhmNzcyN2IxNzkyYjVkNTdmYWNjMDc3MDRiZmZjYTcxMDkyMTI2ODYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0WDP88+h5wfWHIBx05WL+iB1/nD
jLNOAVd2RbShCTwguz6yxZH5K0Xf/lepvOxAaU9XXnjC+4OH1fS4CMcR6gdq20B1
/htFLda4D+gR1fhJZBJEqAiKMg1qSxzV9dScZVQTt3YmONqkm7rTQzo7scIBvbLC
pxOGJjOn0JzTuWQQKewoGTfLrb50UBcyVXkq8Zp9MYNNb9arMQwq3qfa/rhDyoHY
rvAv2xfmUqF996bUfgihSWrnV9NRtl8uaEo2Lv9iIIosSun/H9kJ/16bfElTGFND
+6WYXiFEB7qciNr+TTxavpaVAz20CuJFE1MRxMbHzUWDBgDhsdolVKNNZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPdyexeStdV/rMB3BL/8pxCSEmhjMB8GA1UdIwQY
MBaAFAuA57y0K8y4CSriikGu2SjupNY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYt
ZmMwMTQ4MTE5NjM4LzEvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My85NTQ2NTMtMjY3ZS00MzEzLWI5MDYtZmMwMTQ4MTE5NjM4
LzEvQzREbnZMUXJ6TGdKS3VLS1FhN1pLTzZrMWpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLvD8Eis
X/h1FgehZAldwPPbc7ylixCjzBvtandm3I/LHqYq3Fv2p4V8NfhF137KyVXu0n3C
0CmD4sKp6RHOGP4+1e0JqjhDiYVeTdzn7K26YJ31yDKAR+4oqV3kzWK8RxG3H+qf
pgPE3wko4Y7Mi6J41QNhSDH3RAu8q1W1FkRJMrSlJJ/idkwcdgFE4S3/2bfNb3di
2cQQsZFizATiJUyiyK9d+KHGpfBFnB2Yargj5Ts49POBb2XNZDMvyjUoW898bXI6
0aHercu6rhZ4iPtjaNSrvy28MxctkRJ8CE0csydYzD1bHvzP//lX7s2QYiuYN6J8
9DDdysXc0BnXBg==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:48 2026 by rpki-client