Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
File: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft (raw, json)
Hash identifier: NwLzImmpaUAV70dsA5ZNrYcg1fDGGrTsZdgUu5CTwOc=
Subject key identifier: 0A:52:DD:39:91:64:D3:FC:96:FE:17:8F:1D:19:CC:5B:4B:F5:F2:60
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 019D375271D2FD1BC028A06925277C18ABC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
Manifest number: 0E43
Signing time: Sun 29 Mar 2026 02:00:42 +0000
Manifest this update: Sun 29 Mar 2026 02:00:42 +0000
Manifest next update: Mon 30 Mar 2026 02:00:42 +0000
Files and hashes: 1: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl (hash: 5G3D6TEZu0wWnChmpZGGdDwrPr55C/iAe+EGo2Dj0zE=)
2: NStJJ9e183cFfxVciTY49OglbNU.roa (hash: yb2BwVREODItjweWlbnW4dYNiNyWxIQNgI0RjZN1nJI=)
3: s_-LqLAwoVzNq7MMJZajpyC4Khk.roa (hash: ClKhGIdEbTXNOQjYUKo8kUllH20eM7IYqgOaHPxfrg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:71:d2:fd:1b:c0:28:a0:69:25:27:7c:18:ab:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Mar 29 02:00:42 2026 GMT
Not After : Mar 30 02:00:42 2026 GMT
Subject: CN=0a52dd399164d3fc96fe178f1d19cc5b4bf5f260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:74:cc:4c:e8:95:d9:5d:aa:cb:1a:46:be:6c:
cb:04:62:e8:98:56:f6:9e:7d:33:b0:ca:56:60:1f:
56:9c:3b:ac:40:8c:70:8b:eb:14:68:d9:18:f3:24:
b6:7d:53:90:7a:44:50:7e:4e:69:6e:8a:bd:3e:ee:
8d:6d:a4:6a:53:5a:d2:dd:60:12:b5:04:f1:31:a4:
72:05:34:23:96:08:8f:46:e1:ac:48:41:6a:4e:59:
8b:06:8e:90:c1:90:f2:e4:0f:cc:3b:c4:c6:ac:79:
d0:6a:ca:6c:65:2a:00:dd:61:9f:3b:31:d0:49:14:
c5:1a:b1:d1:76:d9:1a:7e:75:68:45:14:6b:37:f1:
92:0f:e9:f6:20:7e:85:f7:99:2b:a8:f6:2f:8e:99:
b0:12:6b:e0:f3:43:23:18:2c:f9:00:02:ed:49:0e:
6c:05:d9:79:1f:ee:ea:df:e8:95:86:a9:2a:c0:f5:
9f:18:b2:91:f6:4f:c2:bd:41:83:08:c6:16:48:29:
34:a7:bb:10:e3:39:d7:a9:9d:54:96:7f:78:45:29:
36:9a:c4:e7:7a:aa:82:0a:43:88:c5:a8:91:1e:3f:
41:3b:2c:83:e6:a1:51:d5:c4:dc:16:aa:11:9e:33:
5d:20:47:3a:6d:ae:8d:c9:af:f5:7e:a7:14:db:80:
f3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:52:DD:39:91:64:D3:FC:96:FE:17:8F:1D:19:CC:5B:4B:F5:F2:60
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:1c:19:ba:df:97:b9:07:57:e3:7f:7e:db:ab:84:1a:c4:cd:
dc:6c:b3:f1:16:39:51:d6:73:93:7a:eb:2a:43:28:b8:7c:1b:
f6:a3:09:bb:27:d3:ad:52:b7:59:71:9a:39:e9:b8:a5:61:55:
16:e0:da:12:08:ff:4f:35:d9:85:90:3d:7c:a3:7d:96:be:d5:
79:85:0d:52:6b:5a:36:1e:10:18:f5:ef:d7:bf:13:e9:11:df:
d4:72:2a:41:b8:d9:80:c6:07:18:63:21:d6:8c:96:06:fa:75:
f5:7b:9a:33:5a:4d:0d:e1:23:f8:fa:e7:6d:21:0e:bd:5d:34:
6f:e3:5d:7f:95:63:04:0b:ac:b5:45:7e:b5:e3:4b:a3:dd:15:
ca:ff:2e:9e:08:2d:0b:8b:ca:c3:c9:06:61:15:fe:2c:1b:dd:
48:ba:91:a4:2b:8d:3a:e2:5c:50:70:94:8f:9a:07:cd:98:e6:
5f:53:a7:e8:a2:d0:7b:ed:31:2d:37:47:28:7a:72:fc:2f:ed:
e0:07:ab:a7:d0:75:6c:1e:43:32:f8:6e:ae:f3:06:5b:42:89:
c4:2d:c1:af:60:19:30:85:24:aa:ee:37:01:d2:fd:21:0e:90:
b3:20:86:9e:8c:b5:6e:a7:0a:61:7c:6c:9f:49:4b:ae:37:e6:
1a:5a:a0:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UnHS/RvAKKBpJSd8GKvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNWQyOGYxNDk3OTNhM2Q3MmU4ZWYwNDFlOWM5ZTBkOWE2
NmIyMWUwHhcNMjYwMzI5MDIwMDQyWhcNMjYwMzMwMDIwMDQyWjAzMTEwLwYDVQQD
EygwYTUyZGQzOTkxNjRkM2ZjOTZmZTE3OGYxZDE5Y2M1YjRiZjVmMjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHTMTOiV2V2qyxpGvmzLBGLomFb2
nn0zsMpWYB9WnDusQIxwi+sUaNkY8yS2fVOQekRQfk5pboq9Pu6NbaRqU1rS3WAS
tQTxMaRyBTQjlgiPRuGsSEFqTlmLBo6QwZDy5A/MO8TGrHnQaspsZSoA3WGfOzHQ
SRTFGrHRdtkafnVoRRRrN/GSD+n2IH6F95krqPYvjpmwEmvg80MjGCz5AALtSQ5s
Bdl5H+7q3+iVhqkqwPWfGLKR9k/CvUGDCMYWSCk0p7sQ4znXqZ1Uln94RSk2msTn
eqqCCkOIxaiRHj9BOyyD5qFR1cTcFqoRnjNdIEc6ba6Nya/1fqcU24DzIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFApS3TmRZNP8lv4Xjx0ZzFtL9fJgMB8GA1UdIwQY
MBaAFOBdKPFJeTo9cujvBB6cng2aZrIeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUt
ODA5MWViY2UzYmJmLzEvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9iNGM5N2ItZTAwNS00Y2Q2LTgzMzUtODA5MWViY2UzYmJm
LzEvNEYwbzhVbDVPajF5Nk84RUhweWVEWnBtc2g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhwZut+X
uQdX439+26uEGsTN3Gyz8RY5UdZzk3rrKkMouHwb9qMJuyfTrVK3WXGaOem4pWFV
FuDaEgj/TzXZhZA9fKN9lr7VeYUNUmtaNh4QGPXv178T6RHf1HIqQbjZgMYHGGMh
1oyWBvp19XuaM1pNDeEj+PrnbSEOvV00b+Ndf5VjBAustUV+teNLo90Vyv8unggt
C4vKw8kGYRX+LBvdSLqRpCuNOuJcUHCUj5oHzZjmX1On6KLQe+0xLTdHKHpy/C/t
4Aerp9B1bB5DMvhurvMGW0KJxC3Br2AZMIUkqu43AdL9IQ6QsyCGnoy1bqcKYXxs
n0lLrjfmGlqg7A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:28 2026 by rpki-client