Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
File: 4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft (raw, json)
Hash identifier: 71htoOx4oBm/qBeIYHc1FrteklBhr78l8dUtX55PSHE=
Subject key identifier: 5B:78:87:3B:74:53:51:53:3C:EB:D4:CB:DB:61:00:C6:E2:67:9D:92
Authority key identifier: E0:15:FF:00:5A:A2:66:91:C7:E3:30:EB:F9:C1:C4:C1:AE:54:94:D4
Certificate issuer: /CN=e015ff005aa26691c7e330ebf9c1c4c1ae5494d4
Certificate serial: 019D37F7921625C7F19115AEB0FD17E15DCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
Manifest number: 0242
Signing time: Sun 29 Mar 2026 05:01:04 +0000
Manifest this update: Sun 29 Mar 2026 05:01:04 +0000
Manifest next update: Mon 30 Mar 2026 05:01:04 +0000
Files and hashes: 1: 4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl (hash: y4+oZxDZqAGWuHQHRNLcQ8DvDQQ5YKTPqOkCHgU2JHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:92:16:25:c7:f1:91:15:ae:b0:fd:17:e1:5d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e015ff005aa26691c7e330ebf9c1c4c1ae5494d4
Validity
Not Before: Mar 29 05:01:04 2026 GMT
Not After : Mar 30 05:01:04 2026 GMT
Subject: CN=5b78873b745351533cebd4cbdb6100c6e2679d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:90:fa:75:e4:12:07:bd:f0:3f:c8:ae:3c:5b:
c3:7c:55:0e:d9:d7:44:69:f0:41:0d:84:29:93:7c:
c6:e8:ea:b9:52:dd:13:73:ac:2c:30:07:7a:10:3c:
5b:6d:48:1c:3b:57:d6:1a:3f:12:3e:5e:96:09:87:
3d:13:3d:6d:7a:31:e2:45:e0:06:ae:be:e6:6b:9a:
34:1e:ac:0d:1a:87:03:ab:22:c1:56:f2:f9:e6:e0:
d0:a2:d1:11:35:d9:dd:91:2f:16:40:d3:04:69:a2:
f5:18:94:1c:30:c5:ac:57:d5:9b:10:b3:9c:36:1a:
ad:23:f6:58:4c:20:0d:cf:9c:62:24:8f:cd:e8:44:
c6:f0:49:69:e0:01:e7:e7:1b:9e:6a:18:50:8b:d4:
ef:6d:31:e6:7b:8c:0f:44:e8:26:ac:f6:04:0d:e5:
a9:62:40:14:f6:a7:b1:b5:29:24:c5:ad:cd:54:bc:
f4:01:30:dc:84:84:9c:2c:75:12:6a:e0:72:c1:b0:
27:44:ad:7c:a7:30:64:25:ba:43:0b:4b:bf:13:02:
99:05:60:a1:c4:38:b4:92:80:4e:7e:54:63:fe:a7:
29:cc:90:41:65:a5:cb:6f:83:cc:ee:94:a6:1c:1a:
a2:81:0e:4c:9d:a2:d0:85:51:8e:bf:54:d4:0c:e5:
ea:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:78:87:3B:74:53:51:53:3C:EB:D4:CB:DB:61:00:C6:E2:67:9D:92
X509v3 Authority Key Identifier:
keyid:E0:15:FF:00:5A:A2:66:91:C7:E3:30:EB:F9:C1:C4:C1:AE:54:94:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:50:b8:e1:62:7f:d1:96:29:57:65:b9:cb:bf:fa:3d:c5:db:
18:8d:a7:a8:f2:1c:39:c5:ae:5c:40:a1:39:fc:6a:f0:f1:c5:
40:01:c1:9a:68:c0:ee:c7:81:47:12:25:1f:76:3d:99:86:da:
18:dc:50:90:c2:15:e2:80:d1:a4:df:b2:a3:a4:9d:cd:12:cd:
dd:54:20:23:d6:c0:23:99:7a:0a:41:28:f3:a4:f9:cf:2e:e8:
96:46:a7:8a:94:d8:48:1c:20:13:48:10:96:dc:a8:60:04:57:
f6:ad:10:bc:ba:08:b3:dd:f3:23:05:af:d6:c9:e4:c0:ab:51:
e3:d7:8a:af:2c:c8:2f:39:bb:e1:ad:44:81:fd:60:27:51:1a:
70:5b:e6:5a:8b:e5:5b:4a:33:6d:bf:f5:7b:43:d2:03:b8:ce:
5f:89:3a:fc:7b:a0:0a:61:f9:05:72:39:0d:71:17:01:c6:2c:
ac:aa:a7:57:a6:6f:e5:6f:2e:44:ad:b3:1c:53:a4:f3:06:23:
b1:0a:bf:2e:35:34:05:d6:ab:e0:2e:9b:0e:a0:1e:f1:59:7e:
ef:f2:bb:42:0f:1c:6c:44:4d:34:4f:fe:33:72:ba:dc:86:b1:
d5:57:f2:f7:16:59:66:34:2a:36:3b:66:2b:51:ce:e7:cf:6d:
ed:c6:1f:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0395IWJcfxkRWusP0X4V3LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMTVmZjAwNWFhMjY2OTFjN2UzMzBlYmY5YzFjNGMxYWU1
NDk0ZDQwHhcNMjYwMzI5MDUwMTA0WhcNMjYwMzMwMDUwMTA0WjAzMTEwLwYDVQQD
Eyg1Yjc4ODczYjc0NTM1MTUzM2NlYmQ0Y2JkYjYxMDBjNmUyNjc5ZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5D6deQSB73wP8iuPFvDfFUO2ddE
afBBDYQpk3zG6Oq5Ut0Tc6wsMAd6EDxbbUgcO1fWGj8SPl6WCYc9Ez1tejHiReAG
rr7ma5o0HqwNGocDqyLBVvL55uDQotERNdndkS8WQNMEaaL1GJQcMMWsV9WbELOc
NhqtI/ZYTCANz5xiJI/N6ETG8Elp4AHn5xueahhQi9TvbTHme4wPROgmrPYEDeWp
YkAU9qextSkkxa3NVLz0ATDchIScLHUSauBywbAnRK18pzBkJbpDC0u/EwKZBWCh
xDi0koBOflRj/qcpzJBBZaXLb4PM7pSmHBqigQ5MnaLQhVGOv1TUDOXqXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFt4hzt0U1FTPOvUy9thAMbiZ52SMB8GA1UdIwQY
MBaAFOAV/wBaomaRx+Mw6/nBxMGuVJTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEJYX0FGcWlacEhINHpEci1jSEV3YTVVbE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zODFiOWUtY2IxOS00MDg4LTkwNjYt
ZGVlMzE3ZWVjMmY3LzEvNEJYX0FGcWlacEhINHpEci1jSEV3YTVVbE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8zODFiOWUtY2IxOS00MDg4LTkwNjYtZGVlMzE3ZWVjMmY3
LzEvNEJYX0FGcWlacEhINHpEci1jSEV3YTVVbE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhVC44WJ/
0ZYpV2W5y7/6PcXbGI2nqPIcOcWuXEChOfxq8PHFQAHBmmjA7seBRxIlH3Y9mYba
GNxQkMIV4oDRpN+yo6SdzRLN3VQgI9bAI5l6CkEo86T5zy7olkanipTYSBwgE0gQ
ltyoYARX9q0QvLoIs93zIwWv1snkwKtR49eKryzILzm74a1Egf1gJ1EacFvmWovl
W0ozbb/1e0PSA7jOX4k6/HugCmH5BXI5DXEXAcYsrKqnV6Zv5W8uRK2zHFOk8wYj
sQq/LjU0Bdar4C6bDqAe8Vl+7/K7Qg8cbERNNE/+M3K63Iax1Vfy9xZZZjQqNjtm
K1HO589t7cYf8g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:41 2026 by rpki-client