Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier: TBJ79rL6Tf24HQ/1f2rKwH+Iln/DKPNmECyi5LRH2xw=
Subject key identifier: 2E:D8:4F:D3:78:59:49:08:7F:EC:7B:58:12:20:6E:6E:79:27:96:24
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial: 019D37F70ADFB798EF83A5BA1D4A48942F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 05:00:29 +0000
Manifest this update: Sun 29 Mar 2026 05:00:29 +0000
Manifest next update: Mon 30 Mar 2026 05:00:29 +0000
Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: TKR15jKRDN/vQZJqqQ9anv8jdtmYO9waEKklGgAft5A=)
2: SZ7uQjj18-cU4bIpWv5dSgIvGBE.roa (hash: rmE3xiiuA8FInWGbe7SdLUBpAe5mfXQkxmyusGShZtQ=)
3: XphaguuWFSP8UQVU9jupgKQKPTw.roa (hash: 7KRxLds07r+kpPQbo12VWuWgRVl+sWP2XMsAOWnoAcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:0a:df:b7:98:ef:83:a5:ba:1d:4a:48:94:2f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
Validity
Not Before: Mar 29 05:00:29 2026 GMT
Not After : Mar 30 05:00:29 2026 GMT
Subject: CN=2ed84fd3785949087fec7b5812206e6e79279624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ff:84:a9:27:84:81:0e:67:24:15:ea:ee:e9:
d8:da:42:c8:4a:65:58:44:cf:c3:1f:21:0e:5f:66:
f7:27:87:72:c7:48:cb:ee:8a:86:8c:06:eb:9a:df:
c6:4a:55:0c:6a:2b:25:6c:be:8d:af:fe:81:6e:df:
6b:60:c5:f9:14:1b:65:34:ee:88:07:56:a5:39:c3:
90:18:90:91:13:95:6f:f0:a4:c8:65:b7:d4:e6:61:
5d:5c:c7:02:d1:5e:2c:80:c2:79:df:fc:ac:95:47:
9a:54:9a:83:9a:ae:ce:a1:1e:f3:29:e1:64:e5:f7:
ea:21:04:ab:de:91:ac:3e:55:db:b2:1f:1c:93:43:
a0:b4:09:3f:c4:0f:ca:ee:81:2a:1d:e2:3a:3e:e9:
c2:bd:bd:9d:2d:b3:a5:fb:56:9f:3e:14:5b:f8:f2:
73:af:25:a7:b5:50:6a:1b:01:91:84:a5:b1:f8:8a:
6f:44:da:56:b2:d7:cd:bf:1e:5e:01:39:0e:6a:5a:
bc:18:61:b5:ff:8e:5c:56:dd:2a:4d:0f:f2:4e:0a:
1a:1c:c9:66:9a:36:f9:72:80:e1:f7:07:af:2b:22:
ea:27:2d:4d:71:8b:e5:eb:87:36:00:29:7d:b9:cf:
f0:04:3e:1b:a0:2e:a9:d7:7e:5b:6b:44:10:18:92:
4f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D8:4F:D3:78:59:49:08:7F:EC:7B:58:12:20:6E:6E:79:27:96:24
X509v3 Authority Key Identifier:
keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:dd:e5:88:7a:97:e0:7f:ce:a3:d3:6d:39:fd:f6:97:7e:f7:
6c:80:6b:25:4d:a0:6d:7c:10:b0:6e:7c:ff:4e:55:e5:31:22:
c8:13:95:e4:4c:3d:86:92:81:5d:ef:b5:40:9c:4a:f6:f8:e1:
84:62:8c:48:b0:f2:bd:45:cd:17:bd:c9:48:d8:9f:92:05:5b:
a9:a1:83:08:21:ba:1d:74:b9:90:4a:ec:5f:94:bd:05:7c:78:
61:81:81:2e:8b:88:da:69:5c:12:96:cf:4c:d4:66:57:47:84:
c1:81:75:15:34:61:60:4a:f0:32:71:4e:36:73:96:52:f9:31:
9c:9f:2a:67:a3:b9:48:ae:8b:55:03:ff:27:7c:2d:4e:f5:46:
1c:01:6a:22:3d:72:1e:2b:9a:49:6c:17:d5:ec:b6:d8:f5:98:
c0:9c:62:79:7e:58:2b:c8:37:e1:99:e0:45:3c:cd:18:06:1b:
f3:87:ef:86:7c:a0:45:44:70:ca:09:ea:dd:76:90:1c:bc:c2:
7d:c9:8a:44:ce:4d:60:57:48:0d:f5:7f:d3:19:46:90:18:9e:
ee:4c:33:60:b5:67:15:49:c9:98:a3:f0:27:58:bc:40:29:21:
31:c8:12:88:48:7d:fc:0f:80:80:0d:6f:20:eb:da:f2:d1:82:
a9:68:66:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039wrft5jvg6W6HUpIlC8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwOGUxN2E3ODFiNjQxMTlhM2E2MzU3MDAwMjU0ZjViNzk1
YjBkYTgwHhcNMjYwMzI5MDUwMDI5WhcNMjYwMzMwMDUwMDI5WjAzMTEwLwYDVQQD
EygyZWQ4NGZkMzc4NTk0OTA4N2ZlYzdiNTgxMjIwNmU2ZTc5Mjc5NjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f+EqSeEgQ5nJBXq7unY2kLISmVY
RM/DHyEOX2b3J4dyx0jL7oqGjAbrmt/GSlUMaislbL6Nr/6Bbt9rYMX5FBtlNO6I
B1alOcOQGJCRE5Vv8KTIZbfU5mFdXMcC0V4sgMJ53/yslUeaVJqDmq7OoR7zKeFk
5ffqIQSr3pGsPlXbsh8ck0OgtAk/xA/K7oEqHeI6PunCvb2dLbOl+1afPhRb+PJz
ryWntVBqGwGRhKWx+IpvRNpWstfNvx5eATkOalq8GGG1/45cVt0qTQ/yTgoaHMlm
mjb5coDh9wevKyLqJy1NcYvl64c2ACl9uc/wBD4boC6p135ba0QQGJJPiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7YT9N4WUkIf+x7WBIgbm55J5YkMB8GA1UdIwQY
MBaAFOCOF6eBtkEZo6Y1cAAlT1t5Ww2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2Ut
ZDVlNDVmMmNhODc5LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMTQwMjAtMWJmYi00MTMzLWFmY2UtZDVlNDVmMmNhODc5
LzEvNEk0WHA0RzJRUm1qcGpWd0FDVlBXM2xiRGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAit3liHqX
4H/Oo9NtOf32l373bIBrJU2gbXwQsG58/05V5TEiyBOV5Ew9hpKBXe+1QJxK9vjh
hGKMSLDyvUXNF73JSNifkgVbqaGDCCG6HXS5kErsX5S9BXx4YYGBLouI2mlcEpbP
TNRmV0eEwYF1FTRhYErwMnFONnOWUvkxnJ8qZ6O5SK6LVQP/J3wtTvVGHAFqIj1y
HiuaSWwX1ey22PWYwJxieX5YK8g34ZngRTzNGAYb84fvhnygRURwygnq3XaQHLzC
fcmKRM5NYFdIDfV/0xlGkBie7kwzYLVnFUnJmKPwJ1i8QCkhMcgSiEh9/A+AgA1v
IOva8tGCqWhmoA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:48:58 2026 by rpki-client