Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
File: v4iEmi616d1XGo50O-17lRPXoSE.mft (raw, json)
Hash identifier: bGbOzxTT/ILdY31T4OpcXkud+Cyi84MEc1A8egOZMVM=
Subject key identifier: BA:3B:93:F6:B6:A5:AA:23:55:20:F2:D5:65:02:FF:A9:BF:EF:1C:53
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 019D386568474AFF3F52202D57790C909943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
Manifest number: 0460
Signing time: Sun 29 Mar 2026 07:01:02 +0000
Manifest this update: Sun 29 Mar 2026 07:01:02 +0000
Manifest next update: Mon 30 Mar 2026 07:01:02 +0000
Files and hashes: 1: 3RsLnrTTWTLPQLyhD4gSJN-DaTI.roa (hash: P//UvOt3ZaB3uh3PmS1jjSG8dYP/ZrhMVhcmC8uqPak=)
2: orOrT8NVY4pf1QT1W-mHVHhwDL8.roa (hash: bx8FYIhx4hyq5ap/XvQzvchaRMF2JO/G6piTSSfSHKo=)
3: v4iEmi616d1XGo50O-17lRPXoSE.crl (hash: gqc+T2ly+x12+vePglRfcOD8v68cQCPkvFKXcN3Z6KA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:68:47:4a:ff:3f:52:20:2d:57:79:0c:90:99:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Mar 29 07:01:02 2026 GMT
Not After : Mar 30 07:01:02 2026 GMT
Subject: CN=ba3b93f6b6a5aa235520f2d56502ffa9bfef1c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:52:4c:8d:23:56:ca:46:c0:8b:32:91:d5:63:
11:21:b1:9d:c9:93:77:98:34:cf:97:43:d4:3c:c2:
87:c7:38:b2:3f:f0:b3:92:9c:cb:79:74:0c:cb:78:
6b:e1:59:99:0e:b4:61:92:5a:f5:0d:e8:b7:79:12:
a4:e8:51:83:7a:ff:b4:78:84:5f:a4:5d:2a:27:10:
a6:d4:8a:72:33:66:ce:c5:10:ca:59:a3:e6:3d:8e:
cc:9f:bd:fc:eb:37:08:97:43:eb:63:85:ba:31:8c:
24:92:0b:a2:39:39:f4:c6:95:8d:85:22:3f:aa:99:
2c:2a:2a:5f:a1:01:42:43:5c:04:a4:85:c5:99:da:
00:09:76:fd:38:3e:fa:bb:04:41:88:2c:d0:0c:66:
e2:08:b9:11:84:df:a6:35:67:59:c5:19:30:36:05:
23:26:e6:91:e8:53:71:c1:04:1e:ae:35:48:ea:72:
b0:e3:4e:ff:5c:3b:90:93:d7:fa:57:2b:89:b9:68:
5a:cd:ab:98:69:65:53:c3:07:75:3f:b5:19:c4:fb:
4e:cb:88:c3:8f:4d:64:e7:d4:69:db:de:25:e1:42:
71:24:0e:64:45:f4:25:6d:0d:0b:b7:81:36:51:90:
5f:ce:9e:d1:88:41:80:3d:6c:3b:5e:e5:0c:66:84:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:3B:93:F6:B6:A5:AA:23:55:20:F2:D5:65:02:FF:A9:BF:EF:1C:53
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:69:89:16:e1:6f:26:64:5e:01:52:c5:4e:02:71:27:5e:39:
3f:2f:a2:af:e9:50:d9:85:56:ae:a4:91:1b:45:6f:4b:23:c0:
bb:67:82:91:85:b5:ac:2d:5c:d1:ad:a9:7d:4e:3a:c7:b3:ac:
96:0c:e4:61:d6:87:03:0e:87:5f:0e:b4:1d:92:24:20:5d:c8:
9f:3e:8b:f4:35:c9:84:e3:f2:0e:44:91:33:0c:b8:91:4c:cc:
e4:af:36:c0:bd:89:b0:a5:c8:6f:ff:36:b0:d3:40:c0:49:b4:
ad:1d:7d:05:8e:1f:6e:46:99:f9:08:b4:21:2e:2e:31:99:2c:
27:2f:b2:94:d4:14:33:6d:54:ef:7b:af:48:cc:70:2c:f9:0f:
28:bb:19:3c:30:8a:00:2b:2c:9e:a2:57:b7:b8:da:d8:45:49:
30:c4:9b:14:8b:08:10:7d:d6:82:de:65:d7:28:dc:fc:37:c4:
fa:8a:31:8a:bd:37:c5:f6:d0:e7:72:bc:48:35:58:e2:ed:88:
9d:d8:30:6b:29:12:4e:61:dd:33:eb:be:bd:f7:7b:10:29:43:
47:52:63:03:04:58:72:6e:18:e7:85:5b:7c:8b:44:66:eb:ae:
e0:b2:08:dc:8d:5a:4c:67:7a:e6:b1:a4:ed:e3:dd:29:00:1e:
fd:32:8f:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZWhHSv8/UiAtV3kMkJlDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODg4NDlhMmViNWU5ZGQ1NzFhOGU3NDNiZWQ3Yjk1MTNk
N2ExMjEwHhcNMjYwMzI5MDcwMTAyWhcNMjYwMzMwMDcwMTAyWjAzMTEwLwYDVQQD
EyhiYTNiOTNmNmI2YTVhYTIzNTUyMGYyZDU2NTAyZmZhOWJmZWYxYzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1JMjSNWykbAizKR1WMRIbGdyZN3
mDTPl0PUPMKHxziyP/CzkpzLeXQMy3hr4VmZDrRhklr1Dei3eRKk6FGDev+0eIRf
pF0qJxCm1IpyM2bOxRDKWaPmPY7Mn7386zcIl0PrY4W6MYwkkguiOTn0xpWNhSI/
qpksKipfoQFCQ1wEpIXFmdoACXb9OD76uwRBiCzQDGbiCLkRhN+mNWdZxRkwNgUj
JuaR6FNxwQQerjVI6nKw407/XDuQk9f6VyuJuWhazauYaWVTwwd1P7UZxPtOy4jD
j01k59Rp294l4UJxJA5kRfQlbQ0Lt4E2UZBfzp7RiEGAPWw7XuUMZoSh3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLo7k/a2paojVSDy1WUC/6m/7xxTMB8GA1UdIwQY
MBaAFL+IhJoutendVxqOdDvte5UT16EhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9kYmM1OGUtMDI3Yi00YWFjLTlkZTYt
MjM3MzliNWZkODRjLzEvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9kYmM1OGUtMDI3Yi00YWFjLTlkZTYtMjM3MzliNWZkODRj
LzEvdjRpRW1pNjE2ZDFYR281ME8tMTdsUlBYb1NFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmmJFuFv
JmReAVLFTgJxJ145Py+ir+lQ2YVWrqSRG0VvSyPAu2eCkYW1rC1c0a2pfU46x7Os
lgzkYdaHAw6HXw60HZIkIF3Inz6L9DXJhOPyDkSRMwy4kUzM5K82wL2JsKXIb/82
sNNAwEm0rR19BY4fbkaZ+Qi0IS4uMZksJy+ylNQUM21U73uvSMxwLPkPKLsZPDCK
ACssnqJXt7ja2EVJMMSbFIsIEH3Wgt5l1yjc/DfE+ooxir03xfbQ53K8SDVY4u2I
ndgwaykSTmHdM+u+vfd7EClDR1JjAwRYcm4Y54VbfItEZuuu4LII3I1aTGd65rGk
7ePdKQAe/TKPYA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:04:02 2026 by rpki-client