Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
File: 4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json)
Hash identifier: dj5C4ziB58TBAakQ/1JuOOtL/Wqr2J+QKBwX0bT8KNs=
Subject key identifier: FE:23:67:4C:8C:66:FA:0C:81:77:4D:50:15:94:4E:05:FD:A1:CA:D2
Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
Certificate issuer: /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Certificate serial: 019D3752DB0C6D7854D666F70AA66AA9E3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
Manifest number: 0374
Signing time: Sun 29 Mar 2026 02:01:09 +0000
Manifest this update: Sun 29 Mar 2026 02:01:09 +0000
Manifest next update: Mon 30 Mar 2026 02:01:09 +0000
Files and hashes: 1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: 8otP2PFiCm+Ak248ZR9Awn9I77xOi/CFcqgjxv34l/w=)
2: valzYXczYY3RJ6xb_g__yzBDYXU.roa (hash: bbU6NTwqQ5O7qErPjl86r7BZfQa4g2RHPM0gnU6rCb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:db:0c:6d:78:54:d6:66:f7:0a:a6:6a:a9:e3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Validity
Not Before: Mar 29 02:01:09 2026 GMT
Not After : Mar 30 02:01:09 2026 GMT
Subject: CN=fe23674c8c66fa0c81774d5015944e05fda1cad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c5:84:62:94:2a:34:c6:1b:76:c4:5b:cd:c3:
f5:f0:0c:93:ff:58:63:e4:91:4e:31:14:cf:09:aa:
82:c2:93:90:d9:fb:f6:51:d3:95:48:02:bf:9b:1d:
85:d3:87:ac:a5:aa:90:d6:9d:6e:30:31:c7:fe:41:
3e:fa:f1:7f:d4:42:02:22:10:6a:20:ec:82:05:a2:
ba:b8:3a:8e:ea:f1:c3:17:c2:08:d7:79:51:49:33:
02:73:cb:e7:0f:12:f8:b6:cb:d2:62:0c:02:e7:94:
e0:7e:43:95:47:fb:24:43:bb:fa:03:9c:9c:ab:16:
ae:73:28:77:49:70:bb:8f:a8:23:67:aa:ef:7b:6f:
ba:03:59:2d:07:4a:02:40:f3:0a:16:ff:65:d6:d2:
1b:0b:a3:cb:8f:cd:2a:92:f4:c4:d4:8a:3e:f0:b7:
22:32:e9:33:c3:12:b0:c2:f8:85:74:af:77:65:61:
13:c0:d9:41:6a:90:2e:48:68:58:96:3e:6f:30:09:
39:d2:cc:7e:39:3b:9d:ca:cf:5f:d5:34:85:dd:c9:
94:2e:62:a5:93:48:2d:91:f4:8f:9d:2a:d2:34:58:
94:08:52:a0:ee:cf:ae:85:37:9a:af:1a:4a:a8:c0:
8b:6c:8f:91:66:8a:7f:7b:be:21:f9:6a:98:11:29:
9e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:23:67:4C:8C:66:FA:0C:81:77:4D:50:15:94:4E:05:FD:A1:CA:D2
X509v3 Authority Key Identifier:
keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:7d:2d:e7:4f:fd:83:6d:1e:00:2c:07:09:c9:a4:79:e3:d1:
b7:3b:c6:65:e0:17:b8:9a:e4:e5:03:18:4e:70:d7:7f:0c:be:
5d:96:6a:77:ed:f5:c8:d8:3a:1f:e2:5a:a1:25:6f:11:ab:63:
6e:ce:06:17:50:73:f4:2d:7b:1b:42:99:bc:12:bf:04:51:f3:
04:1b:4f:12:ec:5e:41:08:88:ef:9d:01:ac:f3:9d:1e:b8:bb:
dc:5b:c0:e2:08:26:46:b9:0b:34:5e:b2:61:d2:e7:70:2d:85:
6d:ba:6d:67:5e:98:7b:5b:50:0d:bb:82:ee:82:8b:f9:ea:b4:
8e:79:81:2a:26:8e:67:ff:7a:ba:7e:f0:f0:02:e2:17:3d:2f:
64:b0:c6:27:31:de:84:72:ed:56:57:c9:a7:f7:1c:56:e7:27:
9d:3c:92:82:df:d0:3c:b1:d1:82:f4:fc:91:0a:af:f7:fb:d0:
7d:5d:08:ff:52:3f:1e:9f:2c:ec:6a:70:d4:c8:fb:0e:56:aa:
1b:5a:f1:59:7c:e8:83:fd:54:81:81:b7:86:8f:d4:ca:ef:c6:
8c:09:9f:16:be:89:be:4c:da:bd:a9:6b:ba:ab:72:a6:d5:bb:
5b:ef:30:9c:e6:34:f6:71:02:85:50:bc:8a:fd:e3:0a:79:2f:
63:3b:1f:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UtsMbXhU1mb3CqZqqePAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDE5NTYxNGVlZTRhMmRiYjUxZjViMjFlNjlkMTZjNGUx
NDQxYWYwHhcNMjYwMzI5MDIwMTA5WhcNMjYwMzMwMDIwMTA5WjAzMTEwLwYDVQQD
EyhmZTIzNjc0YzhjNjZmYTBjODE3NzRkNTAxNTk0NGUwNWZkYTFjYWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18WEYpQqNMYbdsRbzcP18AyT/1hj
5JFOMRTPCaqCwpOQ2fv2UdOVSAK/mx2F04espaqQ1p1uMDHH/kE++vF/1EICIhBq
IOyCBaK6uDqO6vHDF8II13lRSTMCc8vnDxL4tsvSYgwC55TgfkOVR/skQ7v6A5yc
qxaucyh3SXC7j6gjZ6rve2+6A1ktB0oCQPMKFv9l1tIbC6PLj80qkvTE1Io+8Lci
MukzwxKwwviFdK93ZWETwNlBapAuSGhYlj5vMAk50sx+OTudys9f1TSF3cmULmKl
k0gtkfSPnSrSNFiUCFKg7s+uhTearxpKqMCLbI+RZop/e74h+WqYESmeowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP4jZ0yMZvoMgXdNUBWUTgX9ocrSMB8GA1UdIwQY
MBaAFOLRlWFO7kotu1H1sh5p0WxOFEGvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEt
NWRhYzYzNzg0MDU4LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9jZWI0Y2ItMmVhNy00MmQwLWJiMmEtNWRhYzYzNzg0MDU4
LzEvNHRHVllVN3VTaTI3VWZXeUhtblJiRTRVUWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYX0t50/9
g20eACwHCcmkeePRtzvGZeAXuJrk5QMYTnDXfwy+XZZqd+31yNg6H+JaoSVvEatj
bs4GF1Bz9C17G0KZvBK/BFHzBBtPEuxeQQiI750BrPOdHri73FvA4ggmRrkLNF6y
YdLncC2FbbptZ16Ye1tQDbuC7oKL+eq0jnmBKiaOZ/96un7w8ALiFz0vZLDGJzHe
hHLtVlfJp/ccVucnnTySgt/QPLHRgvT8kQqv9/vQfV0I/1I/Hp8s7Gpw1Mj7Dlaq
G1rxWXzog/1UgYG3ho/Uyu/GjAmfFr6JvkzavalruqtyptW7W+8wnOY09nEChVC8
iv3jCnkvYzsfBw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:31 2026 by rpki-client