Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: 0FgcIvKpGYd0NxO9hQEa1xRxwKP1MceedCL3dBYncRI=
Subject key identifier: 93:7D:C2:56:5D:36:54:E8:68:DE:77:EE:7A:9D:79:FB:DD:A8:C1:AF
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 019D38D29739B8002C2B09C1EDAFBEF4C72C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 17E3
Signing time: Sun 29 Mar 2026 09:00:18 +0000
Manifest this update: Sun 29 Mar 2026 09:00:18 +0000
Manifest next update: Mon 30 Mar 2026 09:00:18 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: 3hxX+o3r1IEZpThzGDnI9jYvQqj2kE/Ggk0zm6ZB+qE=)
2: APkEJsxH2t-1o8uReEsySa-BG0k.roa (hash: QGebNblh9sIV47+DzT8QKo/lQO0JIeSNiq/YB/thR5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:97:39:b8:00:2c:2b:09:c1:ed:af:be:f4:c7:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Mar 29 09:00:18 2026 GMT
Not After : Mar 30 09:00:18 2026 GMT
Subject: CN=937dc2565d3654e868de77ee7a9d79fbdda8c1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5d:54:00:b3:3f:76:ef:ec:84:63:fc:6b:92:
56:41:70:4e:5d:25:ef:dd:a7:04:da:50:19:c1:b0:
09:03:67:f4:f6:ad:62:36:3d:91:87:74:dd:ef:59:
15:73:44:f5:bb:07:b7:c9:8e:0e:ba:e9:56:d3:bb:
11:1a:27:df:e0:7a:41:2f:ea:59:ca:64:4d:6c:ac:
e5:94:d9:f8:6d:3e:ba:b3:8e:d0:01:b8:37:b2:77:
94:48:62:2d:bc:47:60:d6:9a:9e:3f:73:d0:fa:6f:
98:65:03:a4:4e:5e:60:7a:27:f7:71:d5:30:26:75:
a7:bf:e2:05:c8:e1:0a:7c:5a:16:28:2b:eb:85:02:
2f:67:0f:fc:20:bd:8e:44:93:1d:83:c5:43:48:54:
7b:5f:b5:c5:99:0d:21:4a:5d:c0:3d:21:77:18:3d:
6c:7d:ee:58:3b:d6:0a:dd:fa:ea:9d:5b:71:b8:37:
ac:7b:54:6e:70:99:d7:93:15:9e:41:8e:83:d2:ad:
c9:3b:8e:d1:62:ae:76:15:91:f1:88:67:0a:15:28:
0f:17:2d:7f:da:c6:77:84:65:0c:82:85:e6:90:95:
76:71:ea:5e:4f:b0:1c:fa:bd:05:65:2b:f7:4d:28:
61:a9:e6:d7:4e:81:26:7e:15:58:f4:10:31:38:0f:
65:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7D:C2:56:5D:36:54:E8:68:DE:77:EE:7A:9D:79:FB:DD:A8:C1:AF
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:dc:88:53:3f:3e:ff:08:6a:ff:57:cd:39:55:39:26:ae:4f:
49:cb:38:67:c5:43:fa:f0:9b:21:14:ee:47:04:09:34:bb:98:
b5:06:66:2f:23:dc:20:48:fd:c7:06:5d:8c:9d:54:17:ab:5f:
02:97:09:f9:80:aa:4c:f2:0c:a9:83:e7:79:de:8d:92:a7:28:
9f:f5:a0:c0:f3:aa:5f:b9:1c:69:69:4f:7d:6b:ac:10:50:56:
7f:3a:95:03:e4:6f:dd:23:5b:8b:b2:e5:da:de:78:0f:ed:38:
c1:e4:92:7d:d8:11:e8:ce:b9:fc:25:1f:1d:cf:6d:49:fa:30:
16:33:ec:0f:55:92:36:74:18:15:07:23:fd:50:df:17:b0:cd:
0d:af:d2:e4:27:c4:ae:14:4b:55:95:14:7b:23:6d:25:00:5e:
67:ee:a9:37:6f:46:6c:48:e9:8c:17:2b:f4:bf:62:9e:a5:b8:
1a:85:3f:9e:cd:1e:af:66:a7:ba:90:c7:52:f0:b1:8a:28:46:
74:8a:85:57:ab:57:ef:f6:bd:c2:14:0e:f3:bf:d8:44:ce:6c:
73:56:cb:1d:d4:75:26:b8:07:49:bf:e7:8f:85:d3:cd:b5:de:
80:1d:ce:85:2d:d8:3e:2f:bb:28:3d:1e:83:6a:58:1e:8b:7e:
c1:10:51:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040pc5uAAsKwnB7a++9McsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxM2QzZmI2YTg2M2FjMGZhNGQxZmVlZmUzYWVjMzllZDhk
Mzg5NWMwHhcNMjYwMzI5MDkwMDE4WhcNMjYwMzMwMDkwMDE4WjAzMTEwLwYDVQQD
Eyg5MzdkYzI1NjVkMzY1NGU4NjhkZTc3ZWU3YTlkNzlmYmRkYThjMWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV1UALM/du/shGP8a5JWQXBOXSXv
3acE2lAZwbAJA2f09q1iNj2Rh3Td71kVc0T1uwe3yY4OuulW07sRGiff4HpBL+pZ
ymRNbKzllNn4bT66s47QAbg3sneUSGItvEdg1pqeP3PQ+m+YZQOkTl5geif3cdUw
JnWnv+IFyOEKfFoWKCvrhQIvZw/8IL2ORJMdg8VDSFR7X7XFmQ0hSl3APSF3GD1s
fe5YO9YK3frqnVtxuDese1RucJnXkxWeQY6D0q3JO47RYq52FZHxiGcKFSgPFy1/
2sZ3hGUMgoXmkJV2cepeT7Ac+r0FZSv3TShhqebXToEmfhVY9BAxOA9luQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJN9wlZdNlToaN537nqdefvdqMGvMB8GA1UdIwQY
MBaAFOE9P7aoY6wPpNH+7+Ouw57Y04lcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFQwX3RxaGpyQS1rMGY3djQ2N0RudGpUaVZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9hNWY0OTgtNmM3Ni00MjMwLTkzZDEt
YTM5ZTAwOTYyN2VmLzEvNFQwX3RxaGpyQS1rMGY3djQ2N0RudGpUaVZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9hNWY0OTgtNmM3Ni00MjMwLTkzZDEtYTM5ZTAwOTYyN2Vm
LzEvNFQwX3RxaGpyQS1rMGY3djQ2N0RudGpUaVZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYdyIUz8+
/whq/1fNOVU5Jq5PScs4Z8VD+vCbIRTuRwQJNLuYtQZmLyPcIEj9xwZdjJ1UF6tf
ApcJ+YCqTPIMqYPned6Nkqcon/WgwPOqX7kcaWlPfWusEFBWfzqVA+Rv3SNbi7Ll
2t54D+04weSSfdgR6M65/CUfHc9tSfowFjPsD1WSNnQYFQcj/VDfF7DNDa/S5CfE
rhRLVZUUeyNtJQBeZ+6pN29GbEjpjBcr9L9inqW4GoU/ns0er2anupDHUvCxiihG
dIqFV6tX7/a9whQO87/YRM5sc1bLHdR1JrgHSb/nj4XTzbXegB3OhS3YPi+7KD0e
g2pYHot+wRBRrw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:36 2026 by rpki-client