Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
File: 4Zd4WdBx9xUIN7KstDU_8z79gxw.mft (raw, json)
Hash identifier: GsXkm+W7sgugpMaDR6OCGzEWlm2wu3H8vgYNt+DJsWM=
Subject key identifier: EF:19:C9:16:B7:42:BC:59:1F:5D:DD:D3:7A:12:A4:72:38:77:C9:CB
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Certificate issuer: /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial: 019D3752E1C156712C2B087469DB6B0DDF32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
Manifest number: 1660
Signing time: Sun 29 Mar 2026 02:01:11 +0000
Manifest this update: Sun 29 Mar 2026 02:01:11 +0000
Manifest next update: Mon 30 Mar 2026 02:01:11 +0000
Files and hashes: 1: 4Zd4WdBx9xUIN7KstDU_8z79gxw.crl (hash: KoaHrHh+f5FLoJA/9/7dz8oTBC4D6QZpP5STAuNvObw=)
2: ZYafFY5hgrZvAujIo4WJUy5Xkqs.asa (hash: gV/VgEXsJQud2DLaq6P58qMjbq6QyvStYKRKnU9km8E=)
3: vAtADiVzn1Bh76pWGdcxSENwoAM.roa (hash: QoQZh2KeNuOMLkkI0LNnA2kiP20KbUQKF1Cg2Ja7ZC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:e1:c1:56:71:2c:2b:08:74:69:db:6b:0d:df:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
Validity
Not Before: Mar 29 02:01:11 2026 GMT
Not After : Mar 30 02:01:11 2026 GMT
Subject: CN=ef19c916b742bc591f5dddd37a12a4723877c9cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:26:54:d8:55:c8:c0:3b:31:7b:cd:0e:2b:
75:19:9e:a2:d1:76:ff:d5:69:1a:05:ae:55:59:1b:
15:74:87:72:e9:ea:d5:a5:17:0d:ae:e0:01:12:ee:
7f:d3:cc:cf:10:9e:ba:c4:d5:50:1f:96:56:2c:12:
85:d8:43:d3:3c:34:cf:be:fe:e7:05:ae:fb:8c:5f:
18:a3:63:af:d6:e0:6a:01:b7:ce:b5:d5:cd:e3:27:
38:da:3c:bc:28:da:86:26:bc:b4:43:72:60:5f:02:
d3:53:d7:7c:e8:2b:07:3a:7e:2b:cf:c9:3d:9e:75:
f9:11:e6:77:9b:7f:dd:b8:4d:3f:aa:b3:a9:34:60:
27:82:c5:5c:8c:b9:bf:c1:0e:4c:7c:29:44:42:f2:
96:82:57:c1:fc:ce:10:3f:5c:49:3d:90:d0:01:e8:
4a:be:cb:12:89:d3:2d:ab:46:77:4f:49:11:be:dc:
ff:68:97:19:de:d4:25:0b:61:3e:bb:30:61:b8:55:
67:7e:be:80:b0:9f:ea:29:3f:78:be:f4:47:1f:2c:
99:25:3a:53:b0:f3:a9:89:3b:03:f6:e5:5e:94:e5:
64:3b:93:b7:0f:df:5d:ce:10:9a:d6:aa:84:b9:c7:
71:9a:08:0c:e7:48:36:72:38:35:b6:8b:26:aa:6b:
7b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:19:C9:16:B7:42:BC:59:1F:5D:DD:D3:7A:12:A4:72:38:77:C9:CB
X509v3 Authority Key Identifier:
keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c7:7a:3c:55:72:26:50:e8:a8:76:1a:c8:3b:aa:a9:78:f9:
f7:e3:4d:3c:41:54:35:cd:33:d7:e7:34:f6:5f:7b:43:1d:f3:
1c:56:11:b4:93:bb:12:42:ba:74:3b:7d:8e:29:17:10:fd:24:
b2:36:71:f3:d6:d5:9c:48:aa:19:08:02:e6:06:0f:7a:a6:01:
87:90:6d:ca:9c:6d:32:83:00:e7:aa:ab:c2:a6:ba:5f:c7:91:
c4:95:8b:4d:e9:c8:2a:39:ab:a0:9b:e0:5c:d3:6f:b2:bc:2c:
12:9e:57:05:1a:a2:98:26:53:77:d1:6f:a0:b8:64:3f:db:d8:
f1:c2:b8:ec:b3:ca:41:8e:11:b0:da:93:bb:00:ab:6a:94:40:
ad:89:08:a6:8b:44:27:33:8a:7e:37:a1:c9:a8:83:69:4b:9b:
86:58:ed:9f:3f:d7:49:af:c6:7f:a8:d7:1e:55:18:0e:e7:ff:
41:fb:57:13:a6:d6:4c:c4:d8:ba:46:20:0c:5d:eb:1c:3c:a0:
a8:58:34:5b:96:f6:71:b5:15:09:a9:16:24:1c:f6:e3:a6:c3:
97:a8:71:b9:08:ab:6b:0a:c9:71:d9:5b:ac:da:d1:aa:9a:69:
28:c5:14:d9:69:e9:50:a3:60:01:85:e5:07:19:6e:ef:dc:fd:
c3:59:fb:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UuHBVnEsKwh0adtrDd8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOTc3ODU5ZDA3MWY3MTUwODM3YjJhY2I0MzUzZmYzM2Vm
ZDgzMWMwHhcNMjYwMzI5MDIwMTExWhcNMjYwMzMwMDIwMTExWjAzMTEwLwYDVQQD
EyhlZjE5YzkxNmI3NDJiYzU5MWY1ZGRkZDM3YTEyYTQ3MjM4NzdjOWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbUmVNhVyMA7MXvNDit1GZ6i0Xb/
1WkaBa5VWRsVdIdy6erVpRcNruABEu5/08zPEJ66xNVQH5ZWLBKF2EPTPDTPvv7n
Ba77jF8Yo2Ov1uBqAbfOtdXN4yc42jy8KNqGJry0Q3JgXwLTU9d86CsHOn4rz8k9
nnX5EeZ3m3/duE0/qrOpNGAngsVcjLm/wQ5MfClEQvKWglfB/M4QP1xJPZDQAehK
vssSidMtq0Z3T0kRvtz/aJcZ3tQlC2E+uzBhuFVnfr6AsJ/qKT94vvRHHyyZJTpT
sPOpiTsD9uVelOVkO5O3D99dzhCa1qqEucdxmggM50g2cjg1tosmqmt7zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8ZyRa3QrxZH13d03oSpHI4d8nLMB8GA1UdIwQY
MBaAFOGXeFnQcfcVCDeyrLQ1P/M+/YMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEt
YjVjZTZiNmZkNGQxLzEvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni85ZDdjZDctZWU2My00ODg2LThmZTEtYjVjZTZiNmZkNGQx
LzEvNFpkNFdkQng5eFVJTjdLc3REVV84ejc5Z3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcd6PFVy
JlDoqHYayDuqqXj59+NNPEFUNc0z1+c09l97Qx3zHFYRtJO7EkK6dDt9jikXEP0k
sjZx89bVnEiqGQgC5gYPeqYBh5BtypxtMoMA56qrwqa6X8eRxJWLTenIKjmroJvg
XNNvsrwsEp5XBRqimCZTd9FvoLhkP9vY8cK47LPKQY4RsNqTuwCrapRArYkIpotE
JzOKfjehyaiDaUubhljtnz/XSa/Gf6jXHlUYDuf/QftXE6bWTMTYukYgDF3rHDyg
qFg0W5b2cbUVCakWJBz246bDl6hxuQirawrJcdlbrNrRqpppKMUU2WnpUKNgAYXl
Bxlu79z9w1n7ng==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:53 2026 by rpki-client